account_vpc_encryption_controls

Creates, updates, deletes, gets or lists an account_vpc_encryption_controls resource.

Overview

Name	account_vpc_encryption_controls
Type	Resource
Id	aws.ec2.account_vpc_encryption_controls

Fields

The following fields are returned by SELECT queries:

describe_account_vpc_encryption_control

Name	Datatype	Description
exclusions	string	Information about the traffic exclusions for the account-level VPC Encryption Control configuration.
last_update_timestamp	string	The date and time when the account-level VPC Encryption Control configuration was last updated.
managed_by	string	The entity that manages the account-level VPC Encryption Control configuration.
mode	string	The encryption mode for the account-level VPC Encryption Control configuration.
state	string	The current state of the account-level VPC Encryption Control configuration.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
describe_account_vpc_encryption_control	select	region	DryRun	Describes the account-level VPC Encryption Control configuration for your account. VPC Encryption Control enables you to enforce encryption for all data in transit within and between VPCs to meet compliance requirements. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.
modify_account_vpc_encryption_control	update	region	DryRun, Mode, InternetGateway, EgressOnlyInternetGateway, NatGateway, VirtualPrivateGateway, VpcPeering, Lambda, VpcLattice, ElasticFileSystem	Modifies the account-level VPC Encryption Control configuration. This sets the encryption control mode and resource exclusions that apply to the VPCs in your account. VPC Encryption Control enables you to enforce encryption for all data in transit within and between VPCs to meet compliance requirements. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)
DryRun	boolean	Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
EgressOnlyInternetGateway	string	Specifies whether to exclude egress-only internet gateway resource from account-level encryption enforcement.
ElasticFileSystem	string	Specifies whether to exclude Elastic File System service from account-level encryption enforcement.
InternetGateway	string	Specifies whether to exclude internet gateway resource from account-level encryption enforcement.
Lambda	string	Specifies whether to exclude Lambda service from account-level encryption enforcement.
Mode	string	The encryption mode for the account encryption control configuration.
NatGateway	string	Specifies whether to exclude NAT gateway resource from account-level encryption enforcement.
VirtualPrivateGateway	string	Specifies whether to exclude virtual private gateway resource from account-level encryption enforcement.
VpcLattice	string	Specifies whether to exclude VPC Lattice service from account-level encryption enforcement.
VpcPeering	string	Specifies whether to exclude VPC peering connection resource from account-level encryption enforcement.

SELECT examples

describe_account_vpc_encryption_control

Describes the account-level VPC Encryption Control configuration for your account. VPC Encryption Control enables you to enforce encryption for all data in transit within and between VPCs to meet compliance requirements. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

SELECT
exclusions,
last_update_timestamp,
managed_by,
mode,
state
FROM aws.ec2.account_vpc_encryption_controls
WHERE region = '{{ region }}' -- required
AND DryRun = '{{ DryRun }}'
;

UPDATE examples

modify_account_vpc_encryption_control

Modifies the account-level VPC Encryption Control configuration. This sets the encryption control mode and resource exclusions that apply to the VPCs in your account. VPC Encryption Control enables you to enforce encryption for all data in transit within and between VPCs to meet compliance requirements. For more information, see Enforce VPC encryption in transit in the Amazon VPC User Guide.

UPDATE aws.ec2.account_vpc_encryption_controls
SET 
-- No updatable properties
WHERE 
region = '{{ region }}' --required
AND DryRun = {{ DryRun}}
AND Mode = '{{ Mode}}'
AND InternetGateway = '{{ InternetGateway}}'
AND EgressOnlyInternetGateway = '{{ EgressOnlyInternetGateway}}'
AND NatGateway = '{{ NatGateway}}'
AND VirtualPrivateGateway = '{{ VirtualPrivateGateway}}'
AND VpcPeering = '{{ VpcPeering}}'
AND Lambda = '{{ Lambda}}'
AND VpcLattice = '{{ VpcLattice}}'
AND ElasticFileSystem = '{{ ElasticFileSystem}}'
RETURNING
exclusions,
last_update_timestamp,
managed_by,
mode,
state;