IpamRouteProtectionFinding
¶
Source code in docs_src/capo_ec2/types/ipam_route_protection_finding.py
advertisement_type
instance-attribute
¶
advertisement_type: NotRequired[IpamByoipAdvertisementType]
The advertisement type. Possible values:
-
regional- The IP address is advertised from a single location (regional services such as Amazon EC2). -
global- The IP address is advertised from multiple global locations simultaneously (global services such as Amazon CloudFront).
asn
instance-attribute
¶
asn: NotRequired[String]
The Autonomous System Number (ASN) that originates the route.
ipam_pool_id
instance-attribute
¶
ipam_pool_id: NotRequired[IpamPoolId]
The ID of the IPAM pool associated with the finding.
network_border_group
instance-attribute
¶
network_border_group: NotRequired[String]
The network border group.
resource_owner_id
instance-attribute
¶
resource_owner_id: NotRequired[String]
The ID of the resource owner.
resource_region
instance-attribute
¶
resource_region: NotRequired[String]
The Amazon Web Services Region of the resource.
roa_sample_time
instance-attribute
¶
roa_sample_time: NotRequired[MillisecondDateTime]
The time when the ROA data was last sampled.
roas
instance-attribute
¶
roas: NotRequired[IpamRouteOriginAuthorizationSet]
The Route Origin Authorizations (ROAs) that cover the prefix.
route_overlaps
instance-attribute
¶
route_overlaps: NotRequired[IpamRouteOverlapSet]
The overlapping routes detected for this prefix.
rpki_status
instance-attribute
¶
rpki_status: NotRequired[IpamRpkiStatus]
The RPKI validation status of the route. Possible values:
-
valid- The route has a matching ROA that covers the prefix and origin ASN. -
invalid- The route has a ROA for the prefix, but the origin ASN or prefix length does not match. -
unknown- No ROA exists for the prefix, so RPKI validation cannot be performed.
rpki_strength
instance-attribute
¶
rpki_strength: NotRequired[IpamRpkiStrength]
The RPKI enforcement strength for the route. Possible values:
-
strict- Invalid routes are rejected. -
permissive- Invalid routes are accepted but flagged.
sample_time
instance-attribute
¶
sample_time: NotRequired[MillisecondDateTime]
The time when the route was last sampled.
state
instance-attribute
¶
state: NotRequired[IpamByoipCidrState]
The state of the BYOIP CIDR. Possible values:
-
advertised- The CIDR is being advertised. -
deprovisioned- The CIDR has been deprovisioned. -
failed-deprovision- Deprovisioning failed. -
failed-provision- Provisioning failed. -
pending-deprovision- Deprovisioning is in progress. -
pending-provision- Provisioning is in progress. -
provisioned- The CIDR is provisioned. -
provisioned-not-publicly-advertisable- The CIDR is provisioned but not publicly advertisable.