AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::EC2::VPCBlockPublicAccessOptions

CfnVPCBlockPublicAccessOptions

VPC Block Public Access (BPA) enables you to block resources in VPCs and subnets that you own in a Region from reaching or being reached from the internet through internet gateways and egress-only internet gateways. To learn more about VPC BPA, see [Block public access to VPCs and subnets](https://docs.aws.amazon.com/vpc/latest/userguide/security-vpc-bpa.html) in the *Amazon VPC User Guide* .

Import

import { CfnVPCBlockPublicAccessOptions } from 'aws-cdk-lib/aws-ec2';

Or use the module namespace:

import * as ec2 from 'aws-cdk-lib/aws-ec2';
// ec2.CfnVPCBlockPublicAccessOptions

Properties

Configuration passed to the constructor as CfnVPCBlockPublicAccessOptionsProps.

internetGatewayBlockModeRequired
string

The desired VPC Block Public Access mode for internet gateways in your account. We do not allow you to create this resource type in an "off" mode since off is the default value. - `block-bidirectional` : Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). - `block-ingress` : Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

AWS::EC2::VPCBlockPublicAccessOptionsView in CloudFormation Explorer

Get the Amazon EC2 Cheat Sheet

Everything you need to know about Amazon EC2 on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

LevelL1 (CloudFormation)
Moduleaws-ec2
CFN TypeAWS::EC2::VPCBlockPublicAccessOptions
Properties1

Related Constructs

Explore This Service

External Links