modify_account_vpc_encryption_control
async
¶
modify_account_vpc_encryption_control(
*,
config_overrides: Optional[AsyncEC2ClientConfig] = None,
dry_run: Optional[Boolean] = None,
mode: Optional[AccountVpcEncryptionControlMode] = None,
internet_gateway: Optional[VpcEncryptionControlExclusionStateInput] = None,
egress_only_internet_gateway: Optional[
VpcEncryptionControlExclusionStateInput
] = None,
nat_gateway: Optional[VpcEncryptionControlExclusionStateInput] = None,
virtual_private_gateway: Optional[VpcEncryptionControlExclusionStateInput] = None,
vpc_peering: Optional[VpcEncryptionControlExclusionStateInput] = None,
lambda_: Optional[VpcEncryptionControlExclusionStateInput] = None,
vpc_lattice: Optional[VpcEncryptionControlExclusionStateInput] = None,
elastic_file_system: Optional[VpcEncryptionControlExclusionStateInput] = None,
) -> ModifyAccountVpcEncryptionControlResult
Modifies the account-level VPC Encryption Control configuration. This sets the encryption control mode and resource exclusions that apply to the VPCs in your account. VPC Encryption Control enables you to enforce encryption for all data in transit within and between VPCs to meet compliance requirements.
For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
Parameters:
-
dry_run(Optional[Boolean], default:None) –Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is
DryRunOperation. Otherwise, it isUnauthorizedOperation. -
mode(Optional[AccountVpcEncryptionControlMode], default:None) –The encryption mode for the account encryption control configuration.
-
internet_gateway(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude internet gateway resource from account-level encryption enforcement.
-
egress_only_internet_gateway(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude egress-only internet gateway resource from account-level encryption enforcement.
-
nat_gateway(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude NAT gateway resource from account-level encryption enforcement.
-
virtual_private_gateway(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude virtual private gateway resource from account-level encryption enforcement.
-
vpc_peering(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude VPC peering connection resource from account-level encryption enforcement.
-
lambda_(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude Lambda service from account-level encryption enforcement.
-
vpc_lattice(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude VPC Lattice service from account-level encryption enforcement.
-
elastic_file_system(Optional[VpcEncryptionControlExclusionStateInput], default:None) –Specifies whether to exclude Elastic File System service from account-level encryption enforcement.
Raises:
-
UnknownServiceError–The service returned an error code this client does not model.
Source code in docs_src/capo_ec2/_services/async_ec2.py
49513 49514 49515 49516 49517 49518 49519 49520 49521 49522 49523 49524 49525 49526 49527 49528 49529 49530 49531 49532 49533 49534 49535 49536 49537 49538 49539 49540 49541 49542 49543 49544 49545 49546 49547 49548 49549 49550 49551 49552 49553 49554 49555 49556 49557 49558 49559 49560 49561 49562 49563 49564 49565 49566 49567 49568 49569 49570 49571 49572 49573 49574 49575 49576 49577 49578 49579 49580 49581 49582 49583 49584 49585 49586 49587 49588 49589 49590 49591 49592 49593 49594 49595 49596 49597 49598 49599 49600 49601 49602 49603 49604 49605 49606 49607 49608 49609 49610 | |