AWS Fundamentals Logo
AWS Fundamentals
L1 ConstructAWS::EC2::VPCEndpointServicePermissions

CfnVPCEndpointServicePermissions

Grant or revoke permissions for service consumers (users, IAM roles, and AWS accounts) to connect to a VPC endpoint service. If you grant permissions to all principals, the service is public. Any users who know the name of a public service can send a request to attach an endpoint. If the service does not require manual approval, attachments are automatically approved.

Import

import { CfnVPCEndpointServicePermissions } from 'aws-cdk-lib/aws-ec2';

Or use the module namespace:

import * as ec2 from 'aws-cdk-lib/aws-ec2';
// ec2.CfnVPCEndpointServicePermissions

Properties

Configuration passed to the constructor as CfnVPCEndpointServicePermissionsProps.

serviceIdRequired
string | IVPCEndpointServiceRef

The ID of the service.

allowedPrincipalsOptional
string[]

The Amazon Resource Names (ARN) of one or more principals (for example, users, IAM roles, and AWS accounts ). Permissions are granted to the principals in this list. To grant permissions to all principals, specify an asterisk (*). Permissions are revoked for principals not in this list. If the list is empty, then all permissions are revoked.

CloudFormation Resource

This L1 construct maps directly to the following CloudFormation resource type.

Get the Amazon EC2 Cheat Sheet

Everything you need to know about Amazon EC2 on one page. HD quality, print-friendly.

Download Free Infographic