AWS::EC2::VPCEncryptionControlDescribes the configuration and state of VPC encryption controls. For more information, see [Enforce VPC encryption in transit](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html) in the *Amazon VPC User Guide* .
import { CfnVPCEncryptionControl } from 'aws-cdk-lib/aws-ec2';Or use the module namespace:
import * as ec2 from 'aws-cdk-lib/aws-ec2';
// ec2.CfnVPCEncryptionControlConfiguration passed to the constructor as CfnVPCEncryptionControlProps.
egressOnlyInternetGatewayExclusionInputOptionalstringSpecifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
elasticFileSystemExclusionInputOptionalstringSpecifies whether to exclude Elastic File System traffic from encryption enforcement.
internetGatewayExclusionInputOptionalstringSpecifies whether to exclude internet gateway traffic from encryption enforcement.
lambdaExclusionInputOptionalstringSpecifies whether to exclude Lambda function traffic from encryption enforcement.
modeOptionalstringThe encryption mode for the VPC Encryption Control configuration.
natGatewayExclusionInputOptionalstringSpecifies whether to exclude NAT gateway traffic from encryption enforcement.
tagsOptionalCfnTag[]The tags assigned to the VPC Encryption Control configuration.
virtualPrivateGatewayExclusionInputOptionalstringSpecifies whether to exclude virtual private gateway traffic from encryption enforcement.
vpcIdOptionalstringThe ID of the VPC for which to create the encryption control configuration.
vpcLatticeExclusionInputOptionalstringSpecifies whether to exclude VPC Lattice traffic from encryption enforcement.
vpcPeeringExclusionInputOptionalstringSpecifies whether to exclude VPC peering connection traffic from encryption enforcement.
This L1 construct maps directly to the following CloudFormation resource type.
Everything you need to know about Amazon EC2 on one page. HD quality, print-friendly.
Download Free Infographicaws-ec2AWS::EC2::VPCEncryptionControl