AWS Fundamentals Logo
AWS Fundamentals
AWS::EC2::VPCEncryptionControl

EC2 VPCEncryptionControl

Resource Type definition for AWS::EC2::VPCEncryptionControl

Properties

11 configurable properties. Click a row to see details.

Filter:
PropertyTypeFlags
EgressOnlyInternetGatewayExclusionInput
string
Write-only
ElasticFileSystemExclusionInput
string
Write-only
InternetGatewayExclusionInput
string
Write-only
LambdaExclusionInput
string
Write-only
Mode
string
NatGatewayExclusionInput
string
Write-only
Tags
Array<Tag>
VirtualPrivateGatewayExclusionInput
string
Write-only
VpcId
string
Create-only
VpcLatticeExclusionInput
string
Write-only
VpcPeeringExclusionInput
string
Write-only

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

AttributeTypeDescription
ResourceExclusionsResourceExclusionsEnumerates the states of all the VPC encryption control resource exclusions
StatestringThe current state of the VPC encryption control.
StateMessagestringProvides additional context on the state of the VPC encryption control.
VpcEncryptionControlIdstringThe VPC encryption control resource id.

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::EC2::VPCEncryptionControl

Resources:
  MyResource:
    Type: AWS::EC2::VPCEncryptionControl
    Properties:
      Tags:
        - Key: Environment
          Value: Production

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

ec2:DescribeVpcEncryptionControlsec2:CreateVpcEncryptionControlec2:CreateTags

read

ec2:DescribeVpcEncryptionControlsec2:DescribeTags

update

ec2:DescribeVpcEncryptionControlsec2:ModifyVpcEncryptionControlec2:CreateTagsec2:DeleteTags

delete

ec2:DescribeVpcEncryptionControlsec2:DeleteVpcEncryptionControlec2:DeleteTags

list

ec2:DescribeVpcEncryptionControls

Get the EC2 Cheat Sheet

Everything you need to know about EC2 on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

ServiceEC2
Properties15
Required0
TaggingSupported
Primary IDVpcEncryptionControlId

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

VpcId

Related Resources

External Links