VpcBlockPublicAccessOptions
¶
Source code in docs_src/capo_ec2/types/vpc_block_public_access_options.py
aws_account_id
instance-attribute
¶
aws_account_id: NotRequired[String]
An Amazon Web Services account ID.
exclusions_allowed
instance-attribute
¶
exclusions_allowed: NotRequired[VpcBlockPublicAccessExclusionsAllowed]
Determines if exclusions are allowed. If you have enabled VPC BPA at the Organization level, exclusions may be not-allowed. Otherwise, they are allowed.
internet_gateway_block_mode
instance-attribute
¶
internet_gateway_block_mode: NotRequired[InternetGatewayBlockMode]
The current mode of VPC BPA.
-
off: VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region. -
block-bidirectional: Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). -
block-ingress: Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.
last_update_timestamp
instance-attribute
¶
last_update_timestamp: NotRequired[MillisecondDateTime]
The last time the VPC BPA mode was updated.
managed_by
instance-attribute
¶
managed_by: NotRequired[ManagedBy]
The entity that manages the state of VPC BPA. Possible values include:
-
account- The state is managed by the account. -
declarative-policy- The state is managed by a declarative policy and can't be modified by the account.
state
instance-attribute
¶
state: NotRequired[VpcBlockPublicAccessState]
The current state of VPC BPA.