2025/06/11 - AWS Network Manager - 4 updated api methods
Changes Add support for public DNS hostname resolution to private IP addresses across Cloud WAN-managed VPCs. Add support for security group referencing across Cloud WAN-managed VPCs.
{'Options': {'DnsSupport': 'boolean',
'SecurityGroupReferencingSupport': 'boolean'}}
Response {'VpcAttachment': {'Options': {'DnsSupport': 'boolean',
'SecurityGroupReferencingSupport': 'boolean'}}}
Creates a VPC attachment on an edge location of a core network.
See also: AWS API Documentation
Request Syntax
client.create_vpc_attachment(
CoreNetworkId='string',
VpcArn='string',
SubnetArns=[
'string',
],
Options={
'Ipv6Support': True|False,
'ApplianceModeSupport': True|False,
'DnsSupport': True|False,
'SecurityGroupReferencingSupport': True|False
},
Tags=[
{
'Key': 'string',
'Value': 'string'
},
],
ClientToken='string'
)
string
[REQUIRED]
The ID of a core network for the VPC attachment.
string
[REQUIRED]
The ARN of the VPC.
list
[REQUIRED]
The subnet ARN of the VPC attachment.
(string) --
dict
Options for the VPC attachment.
Ipv6Support (boolean) --
Indicates whether IPv6 is supported.
ApplianceModeSupport (boolean) --
Indicates whether appliance mode is supported. If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow. The default value is false.
DnsSupport (boolean) --
Indicates whether DNS is supported.
SecurityGroupReferencingSupport (boolean) --
Indicates whether security group referencing is enabled for this VPC attachment. The default is true. However, at the core network policy-level the default is set to false.
list
The key-value tags associated with the request.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
string
The client token associated with the request.
This field is autopopulated if not provided.
dict
Response Syntax
{
'VpcAttachment': {
'Attachment': {
'CoreNetworkId': 'string',
'CoreNetworkArn': 'string',
'AttachmentId': 'string',
'OwnerAccountId': 'string',
'AttachmentType': 'CONNECT'|'SITE_TO_SITE_VPN'|'VPC'|'DIRECT_CONNECT_GATEWAY'|'TRANSIT_GATEWAY_ROUTE_TABLE',
'State': 'REJECTED'|'PENDING_ATTACHMENT_ACCEPTANCE'|'CREATING'|'FAILED'|'AVAILABLE'|'UPDATING'|'PENDING_NETWORK_UPDATE'|'PENDING_TAG_ACCEPTANCE'|'DELETING',
'EdgeLocation': 'string',
'EdgeLocations': [
'string',
],
'ResourceArn': 'string',
'AttachmentPolicyRuleNumber': 123,
'SegmentName': 'string',
'NetworkFunctionGroupName': 'string',
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'ProposedSegmentChange': {
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'AttachmentPolicyRuleNumber': 123,
'SegmentName': 'string'
},
'ProposedNetworkFunctionGroupChange': {
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'AttachmentPolicyRuleNumber': 123,
'NetworkFunctionGroupName': 'string'
},
'CreatedAt': datetime(2015, 1, 1),
'UpdatedAt': datetime(2015, 1, 1),
'LastModificationErrors': [
{
'Code': 'VPC_NOT_FOUND'|'SUBNET_NOT_FOUND'|'SUBNET_DUPLICATED_IN_AVAILABILITY_ZONE'|'SUBNET_NO_FREE_ADDRESSES'|'SUBNET_UNSUPPORTED_AVAILABILITY_ZONE'|'SUBNET_NO_IPV6_CIDRS'|'VPN_CONNECTION_NOT_FOUND'|'MAXIMUM_NO_ENCAP_LIMIT_EXCEEDED'|'DIRECT_CONNECT_GATEWAY_NOT_FOUND'|'DIRECT_CONNECT_GATEWAY_EXISTING_ATTACHMENTS'|'DIRECT_CONNECT_GATEWAY_NO_PRIVATE_VIF',
'Message': 'string',
'ResourceArn': 'string',
'RequestId': 'string'
},
]
},
'SubnetArns': [
'string',
],
'Options': {
'Ipv6Support': True|False,
'ApplianceModeSupport': True|False,
'DnsSupport': True|False,
'SecurityGroupReferencingSupport': True|False
}
}
}
Response Structure
(dict) --
VpcAttachment (dict) --
Provides details about the VPC attachment.
Attachment (dict) --
Provides details about the VPC attachment.
CoreNetworkId (string) --
The ID of a core network.
CoreNetworkArn (string) --
The ARN of a core network.
AttachmentId (string) --
The ID of the attachment.
OwnerAccountId (string) --
The ID of the attachment account owner.
AttachmentType (string) --
The type of attachment.
State (string) --
The state of the attachment.
EdgeLocation (string) --
The Region where the edge is located. This is returned for all attachment types except a Direct Connect gateway attachment, which instead returns EdgeLocations.
EdgeLocations (list) --
The edge locations that the Direct Connect gateway is associated with. This is returned only for Direct Connect gateway attachments. All other attachment types retrun EdgeLocation.
(string) --
ResourceArn (string) --
The attachment resource ARN.
AttachmentPolicyRuleNumber (integer) --
The policy rule number associated with the attachment.
SegmentName (string) --
The name of the segment attachment.
NetworkFunctionGroupName (string) --
The name of the network function group.
Tags (list) --
The tags associated with the attachment.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
ProposedSegmentChange (dict) --
The attachment to move from one segment to another.
Tags (list) --
The list of key-value tags that changed for the segment.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
AttachmentPolicyRuleNumber (integer) --
The rule number in the policy document that applies to this change.
SegmentName (string) --
The name of the segment to change.
ProposedNetworkFunctionGroupChange (dict) --
Describes a proposed change to a network function group associated with the attachment.
Tags (list) --
The list of proposed changes to the key-value tags associated with the network function group.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
AttachmentPolicyRuleNumber (integer) --
The proposed new attachment policy rule number for the network function group.
NetworkFunctionGroupName (string) --
The proposed name change for the network function group name.
CreatedAt (datetime) --
The timestamp when the attachment was created.
UpdatedAt (datetime) --
The timestamp when the attachment was last updated.
LastModificationErrors (list) --
Describes the error associated with the attachment request.
(dict) --
Describes the error associated with an attachment request.
Code (string) --
The error code for the attachment request.
Message (string) --
The message associated with the error code.
ResourceArn (string) --
The ARN of the requested attachment resource.
RequestId (string) --
The ID of the attachment request.
SubnetArns (list) --
The subnet ARNs.
(string) --
Options (dict) --
Provides details about the VPC attachment.
Ipv6Support (boolean) --
Indicates whether IPv6 is supported.
ApplianceModeSupport (boolean) --
Indicates whether appliance mode is supported. If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow. The default value is false.
DnsSupport (boolean) --
Indicates whether DNS is supported.
SecurityGroupReferencingSupport (boolean) --
Indicates whether security group referencing is enabled for this VPC attachment. The default is true. However, at the core network policy-level the default is set to false.
{'CoreNetworkChanges': {'NewValues': {'DnsSupport': 'boolean',
'SecurityGroupReferencingSupport': 'boolean',
'VpnEcmpSupport': 'boolean'},
'PreviousValues': {'DnsSupport': 'boolean',
'SecurityGroupReferencingSupport': 'boolean',
'VpnEcmpSupport': 'boolean'}}}
Returns a change set between the LIVE core network policy and a submitted policy.
See also: AWS API Documentation
Request Syntax
client.get_core_network_change_set(
CoreNetworkId='string',
PolicyVersionId=123,
MaxResults=123,
NextToken='string'
)
string
[REQUIRED]
The ID of a core network.
integer
[REQUIRED]
The ID of the policy version.
integer
The maximum number of results to return.
string
The token for the next page of results.
dict
Response Syntax
{
'CoreNetworkChanges': [
{
'Type': 'CORE_NETWORK_SEGMENT'|'NETWORK_FUNCTION_GROUP'|'CORE_NETWORK_EDGE'|'ATTACHMENT_MAPPING'|'ATTACHMENT_ROUTE_PROPAGATION'|'ATTACHMENT_ROUTE_STATIC'|'CORE_NETWORK_CONFIGURATION'|'SEGMENTS_CONFIGURATION'|'SEGMENT_ACTIONS_CONFIGURATION'|'ATTACHMENT_POLICIES_CONFIGURATION',
'Action': 'ADD'|'MODIFY'|'REMOVE',
'Identifier': 'string',
'PreviousValues': {
'SegmentName': 'string',
'NetworkFunctionGroupName': 'string',
'EdgeLocations': [
'string',
],
'Asn': 123,
'Cidr': 'string',
'DestinationIdentifier': 'string',
'InsideCidrBlocks': [
'string',
],
'SharedSegments': [
'string',
],
'ServiceInsertionActions': [
{
'Action': 'send-via'|'send-to',
'Mode': 'dual-hop'|'single-hop',
'WhenSentTo': {
'WhenSentToSegmentsList': [
'string',
]
},
'Via': {
'NetworkFunctionGroups': [
{
'Name': 'string'
},
],
'WithEdgeOverrides': [
{
'EdgeSets': [
[
'string',
],
],
'UseEdge': 'string'
},
]
}
},
],
'VpnEcmpSupport': True|False,
'DnsSupport': True|False,
'SecurityGroupReferencingSupport': True|False
},
'NewValues': {
'SegmentName': 'string',
'NetworkFunctionGroupName': 'string',
'EdgeLocations': [
'string',
],
'Asn': 123,
'Cidr': 'string',
'DestinationIdentifier': 'string',
'InsideCidrBlocks': [
'string',
],
'SharedSegments': [
'string',
],
'ServiceInsertionActions': [
{
'Action': 'send-via'|'send-to',
'Mode': 'dual-hop'|'single-hop',
'WhenSentTo': {
'WhenSentToSegmentsList': [
'string',
]
},
'Via': {
'NetworkFunctionGroups': [
{
'Name': 'string'
},
],
'WithEdgeOverrides': [
{
'EdgeSets': [
[
'string',
],
],
'UseEdge': 'string'
},
]
}
},
],
'VpnEcmpSupport': True|False,
'DnsSupport': True|False,
'SecurityGroupReferencingSupport': True|False
},
'IdentifierPath': 'string'
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
CoreNetworkChanges (list) --
Describes a core network changes.
(dict) --
Details describing a core network change.
Type (string) --
The type of change.
Action (string) --
The action to take for a core network.
Identifier (string) --
The resource identifier.
PreviousValues (dict) --
The previous values for a core network.
SegmentName (string) --
The names of the segments in a core network.
NetworkFunctionGroupName (string) --
The network function group name if the change event is associated with a network function group.
EdgeLocations (list) --
The Regions where edges are located in a core network.
(string) --
Asn (integer) --
The ASN of a core network.
Cidr (string) --
The IP addresses used for a core network.
DestinationIdentifier (string) --
The ID of the destination.
InsideCidrBlocks (list) --
The inside IP addresses used for core network change values.
(string) --
SharedSegments (list) --
The shared segments for a core network change value.
(string) --
ServiceInsertionActions (list) --
Describes the service insertion action.
(dict) --
Describes the action that the service insertion will take for any segments associated with it.
Action (string) --
The action the service insertion takes for traffic. send-via sends east-west traffic between attachments. send-to sends north-south traffic to the security appliance, and then from that to either the Internet or to an on-premesis location.
Mode (string) --
Describes the mode packets take for the send-via action. This is not used when the action is send-to. dual-hop packets traverse attachments in both the source to the destination core network edges. This mode requires that an inspection attachment must be present in all Regions of the service insertion-enabled segments. For single-hop, packets traverse a single intermediate inserted attachment. You can use EdgeOverride to specify a specific edge to use.
WhenSentTo (dict) --
The list of destination segments if the service insertion action is send-via.
WhenSentToSegmentsList (list) --
The list of destination segments when the service insertion action is send-to.
(string) --
Via (dict) --
The list of network function groups and any edge overrides for the chosen service insertion action. Used for both send-to or send-via.
NetworkFunctionGroups (list) --
The list of network function groups associated with the service insertion action.
(dict) --
Describes a network function group for service insertion.
Name (string) --
The name of the network function group.
WithEdgeOverrides (list) --
Describes any edge overrides. An edge override is a specific edge to be used for traffic.
(dict) --
Describes the edge that's used for the override.
EdgeSets (list) --
The list of edge locations.
(list) --
(string) --
UseEdge (string) --
The edge that should be used when overriding the current edge order.
VpnEcmpSupport (boolean) --
Indicates whether Equal Cost Multipath (ECMP) is enabled for the core network.
DnsSupport (boolean) --
Indicates whether public DNS support is supported. The default is true.
SecurityGroupReferencingSupport (boolean) --
Indicates whether security group referencing is enabled for the core network.
NewValues (dict) --
The new value for a core network
SegmentName (string) --
The names of the segments in a core network.
NetworkFunctionGroupName (string) --
The network function group name if the change event is associated with a network function group.
EdgeLocations (list) --
The Regions where edges are located in a core network.
(string) --
Asn (integer) --
The ASN of a core network.
Cidr (string) --
The IP addresses used for a core network.
DestinationIdentifier (string) --
The ID of the destination.
InsideCidrBlocks (list) --
The inside IP addresses used for core network change values.
(string) --
SharedSegments (list) --
The shared segments for a core network change value.
(string) --
ServiceInsertionActions (list) --
Describes the service insertion action.
(dict) --
Describes the action that the service insertion will take for any segments associated with it.
Action (string) --
The action the service insertion takes for traffic. send-via sends east-west traffic between attachments. send-to sends north-south traffic to the security appliance, and then from that to either the Internet or to an on-premesis location.
Mode (string) --
Describes the mode packets take for the send-via action. This is not used when the action is send-to. dual-hop packets traverse attachments in both the source to the destination core network edges. This mode requires that an inspection attachment must be present in all Regions of the service insertion-enabled segments. For single-hop, packets traverse a single intermediate inserted attachment. You can use EdgeOverride to specify a specific edge to use.
WhenSentTo (dict) --
The list of destination segments if the service insertion action is send-via.
WhenSentToSegmentsList (list) --
The list of destination segments when the service insertion action is send-to.
(string) --
Via (dict) --
The list of network function groups and any edge overrides for the chosen service insertion action. Used for both send-to or send-via.
NetworkFunctionGroups (list) --
The list of network function groups associated with the service insertion action.
(dict) --
Describes a network function group for service insertion.
Name (string) --
The name of the network function group.
WithEdgeOverrides (list) --
Describes any edge overrides. An edge override is a specific edge to be used for traffic.
(dict) --
Describes the edge that's used for the override.
EdgeSets (list) --
The list of edge locations.
(list) --
(string) --
UseEdge (string) --
The edge that should be used when overriding the current edge order.
VpnEcmpSupport (boolean) --
Indicates whether Equal Cost Multipath (ECMP) is enabled for the core network.
DnsSupport (boolean) --
Indicates whether public DNS support is supported. The default is true.
SecurityGroupReferencingSupport (boolean) --
Indicates whether security group referencing is enabled for the core network.
IdentifierPath (string) --
Uniquely identifies the path for a change within the changeset. For example, the IdentifierPath for a core network segment change might be "CORE_NETWORK_SEGMENT/us-east-1/devsegment".
NextToken (string) --
The token for the next page of results.
{'VpcAttachment': {'Options': {'DnsSupport': 'boolean',
'SecurityGroupReferencingSupport': 'boolean'}}}
Returns information about a VPC attachment.
See also: AWS API Documentation
Request Syntax
client.get_vpc_attachment(
AttachmentId='string'
)
string
[REQUIRED]
The ID of the attachment.
dict
Response Syntax
{
'VpcAttachment': {
'Attachment': {
'CoreNetworkId': 'string',
'CoreNetworkArn': 'string',
'AttachmentId': 'string',
'OwnerAccountId': 'string',
'AttachmentType': 'CONNECT'|'SITE_TO_SITE_VPN'|'VPC'|'DIRECT_CONNECT_GATEWAY'|'TRANSIT_GATEWAY_ROUTE_TABLE',
'State': 'REJECTED'|'PENDING_ATTACHMENT_ACCEPTANCE'|'CREATING'|'FAILED'|'AVAILABLE'|'UPDATING'|'PENDING_NETWORK_UPDATE'|'PENDING_TAG_ACCEPTANCE'|'DELETING',
'EdgeLocation': 'string',
'EdgeLocations': [
'string',
],
'ResourceArn': 'string',
'AttachmentPolicyRuleNumber': 123,
'SegmentName': 'string',
'NetworkFunctionGroupName': 'string',
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'ProposedSegmentChange': {
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'AttachmentPolicyRuleNumber': 123,
'SegmentName': 'string'
},
'ProposedNetworkFunctionGroupChange': {
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'AttachmentPolicyRuleNumber': 123,
'NetworkFunctionGroupName': 'string'
},
'CreatedAt': datetime(2015, 1, 1),
'UpdatedAt': datetime(2015, 1, 1),
'LastModificationErrors': [
{
'Code': 'VPC_NOT_FOUND'|'SUBNET_NOT_FOUND'|'SUBNET_DUPLICATED_IN_AVAILABILITY_ZONE'|'SUBNET_NO_FREE_ADDRESSES'|'SUBNET_UNSUPPORTED_AVAILABILITY_ZONE'|'SUBNET_NO_IPV6_CIDRS'|'VPN_CONNECTION_NOT_FOUND'|'MAXIMUM_NO_ENCAP_LIMIT_EXCEEDED'|'DIRECT_CONNECT_GATEWAY_NOT_FOUND'|'DIRECT_CONNECT_GATEWAY_EXISTING_ATTACHMENTS'|'DIRECT_CONNECT_GATEWAY_NO_PRIVATE_VIF',
'Message': 'string',
'ResourceArn': 'string',
'RequestId': 'string'
},
]
},
'SubnetArns': [
'string',
],
'Options': {
'Ipv6Support': True|False,
'ApplianceModeSupport': True|False,
'DnsSupport': True|False,
'SecurityGroupReferencingSupport': True|False
}
}
}
Response Structure
(dict) --
VpcAttachment (dict) --
Returns details about a VPC attachment.
Attachment (dict) --
Provides details about the VPC attachment.
CoreNetworkId (string) --
The ID of a core network.
CoreNetworkArn (string) --
The ARN of a core network.
AttachmentId (string) --
The ID of the attachment.
OwnerAccountId (string) --
The ID of the attachment account owner.
AttachmentType (string) --
The type of attachment.
State (string) --
The state of the attachment.
EdgeLocation (string) --
The Region where the edge is located. This is returned for all attachment types except a Direct Connect gateway attachment, which instead returns EdgeLocations.
EdgeLocations (list) --
The edge locations that the Direct Connect gateway is associated with. This is returned only for Direct Connect gateway attachments. All other attachment types retrun EdgeLocation.
(string) --
ResourceArn (string) --
The attachment resource ARN.
AttachmentPolicyRuleNumber (integer) --
The policy rule number associated with the attachment.
SegmentName (string) --
The name of the segment attachment.
NetworkFunctionGroupName (string) --
The name of the network function group.
Tags (list) --
The tags associated with the attachment.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
ProposedSegmentChange (dict) --
The attachment to move from one segment to another.
Tags (list) --
The list of key-value tags that changed for the segment.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
AttachmentPolicyRuleNumber (integer) --
The rule number in the policy document that applies to this change.
SegmentName (string) --
The name of the segment to change.
ProposedNetworkFunctionGroupChange (dict) --
Describes a proposed change to a network function group associated with the attachment.
Tags (list) --
The list of proposed changes to the key-value tags associated with the network function group.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
AttachmentPolicyRuleNumber (integer) --
The proposed new attachment policy rule number for the network function group.
NetworkFunctionGroupName (string) --
The proposed name change for the network function group name.
CreatedAt (datetime) --
The timestamp when the attachment was created.
UpdatedAt (datetime) --
The timestamp when the attachment was last updated.
LastModificationErrors (list) --
Describes the error associated with the attachment request.
(dict) --
Describes the error associated with an attachment request.
Code (string) --
The error code for the attachment request.
Message (string) --
The message associated with the error code.
ResourceArn (string) --
The ARN of the requested attachment resource.
RequestId (string) --
The ID of the attachment request.
SubnetArns (list) --
The subnet ARNs.
(string) --
Options (dict) --
Provides details about the VPC attachment.
Ipv6Support (boolean) --
Indicates whether IPv6 is supported.
ApplianceModeSupport (boolean) --
Indicates whether appliance mode is supported. If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow. The default value is false.
DnsSupport (boolean) --
Indicates whether DNS is supported.
SecurityGroupReferencingSupport (boolean) --
Indicates whether security group referencing is enabled for this VPC attachment. The default is true. However, at the core network policy-level the default is set to false.
{'Options': {'DnsSupport': 'boolean',
'SecurityGroupReferencingSupport': 'boolean'}}
Response {'VpcAttachment': {'Options': {'DnsSupport': 'boolean',
'SecurityGroupReferencingSupport': 'boolean'}}}
Updates a VPC attachment.
See also: AWS API Documentation
Request Syntax
client.update_vpc_attachment(
AttachmentId='string',
AddSubnetArns=[
'string',
],
RemoveSubnetArns=[
'string',
],
Options={
'Ipv6Support': True|False,
'ApplianceModeSupport': True|False,
'DnsSupport': True|False,
'SecurityGroupReferencingSupport': True|False
}
)
string
[REQUIRED]
The ID of the attachment.
list
Adds a subnet ARN to the VPC attachment.
(string) --
list
Removes a subnet ARN from the attachment.
(string) --
dict
Additional options for updating the VPC attachment.
Ipv6Support (boolean) --
Indicates whether IPv6 is supported.
ApplianceModeSupport (boolean) --
Indicates whether appliance mode is supported. If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow. The default value is false.
DnsSupport (boolean) --
Indicates whether DNS is supported.
SecurityGroupReferencingSupport (boolean) --
Indicates whether security group referencing is enabled for this VPC attachment. The default is true. However, at the core network policy-level the default is set to false.
dict
Response Syntax
{
'VpcAttachment': {
'Attachment': {
'CoreNetworkId': 'string',
'CoreNetworkArn': 'string',
'AttachmentId': 'string',
'OwnerAccountId': 'string',
'AttachmentType': 'CONNECT'|'SITE_TO_SITE_VPN'|'VPC'|'DIRECT_CONNECT_GATEWAY'|'TRANSIT_GATEWAY_ROUTE_TABLE',
'State': 'REJECTED'|'PENDING_ATTACHMENT_ACCEPTANCE'|'CREATING'|'FAILED'|'AVAILABLE'|'UPDATING'|'PENDING_NETWORK_UPDATE'|'PENDING_TAG_ACCEPTANCE'|'DELETING',
'EdgeLocation': 'string',
'EdgeLocations': [
'string',
],
'ResourceArn': 'string',
'AttachmentPolicyRuleNumber': 123,
'SegmentName': 'string',
'NetworkFunctionGroupName': 'string',
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'ProposedSegmentChange': {
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'AttachmentPolicyRuleNumber': 123,
'SegmentName': 'string'
},
'ProposedNetworkFunctionGroupChange': {
'Tags': [
{
'Key': 'string',
'Value': 'string'
},
],
'AttachmentPolicyRuleNumber': 123,
'NetworkFunctionGroupName': 'string'
},
'CreatedAt': datetime(2015, 1, 1),
'UpdatedAt': datetime(2015, 1, 1),
'LastModificationErrors': [
{
'Code': 'VPC_NOT_FOUND'|'SUBNET_NOT_FOUND'|'SUBNET_DUPLICATED_IN_AVAILABILITY_ZONE'|'SUBNET_NO_FREE_ADDRESSES'|'SUBNET_UNSUPPORTED_AVAILABILITY_ZONE'|'SUBNET_NO_IPV6_CIDRS'|'VPN_CONNECTION_NOT_FOUND'|'MAXIMUM_NO_ENCAP_LIMIT_EXCEEDED'|'DIRECT_CONNECT_GATEWAY_NOT_FOUND'|'DIRECT_CONNECT_GATEWAY_EXISTING_ATTACHMENTS'|'DIRECT_CONNECT_GATEWAY_NO_PRIVATE_VIF',
'Message': 'string',
'ResourceArn': 'string',
'RequestId': 'string'
},
]
},
'SubnetArns': [
'string',
],
'Options': {
'Ipv6Support': True|False,
'ApplianceModeSupport': True|False,
'DnsSupport': True|False,
'SecurityGroupReferencingSupport': True|False
}
}
}
Response Structure
(dict) --
VpcAttachment (dict) --
Describes the updated VPC attachment.
Attachment (dict) --
Provides details about the VPC attachment.
CoreNetworkId (string) --
The ID of a core network.
CoreNetworkArn (string) --
The ARN of a core network.
AttachmentId (string) --
The ID of the attachment.
OwnerAccountId (string) --
The ID of the attachment account owner.
AttachmentType (string) --
The type of attachment.
State (string) --
The state of the attachment.
EdgeLocation (string) --
The Region where the edge is located. This is returned for all attachment types except a Direct Connect gateway attachment, which instead returns EdgeLocations.
EdgeLocations (list) --
The edge locations that the Direct Connect gateway is associated with. This is returned only for Direct Connect gateway attachments. All other attachment types retrun EdgeLocation.
(string) --
ResourceArn (string) --
The attachment resource ARN.
AttachmentPolicyRuleNumber (integer) --
The policy rule number associated with the attachment.
SegmentName (string) --
The name of the segment attachment.
NetworkFunctionGroupName (string) --
The name of the network function group.
Tags (list) --
The tags associated with the attachment.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
ProposedSegmentChange (dict) --
The attachment to move from one segment to another.
Tags (list) --
The list of key-value tags that changed for the segment.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
AttachmentPolicyRuleNumber (integer) --
The rule number in the policy document that applies to this change.
SegmentName (string) --
The name of the segment to change.
ProposedNetworkFunctionGroupChange (dict) --
Describes a proposed change to a network function group associated with the attachment.
Tags (list) --
The list of proposed changes to the key-value tags associated with the network function group.
(dict) --
Describes a tag.
Key (string) --
The tag key.
Constraints: Maximum length of 128 characters.
Value (string) --
The tag value.
Constraints: Maximum length of 256 characters.
AttachmentPolicyRuleNumber (integer) --
The proposed new attachment policy rule number for the network function group.
NetworkFunctionGroupName (string) --
The proposed name change for the network function group name.
CreatedAt (datetime) --
The timestamp when the attachment was created.
UpdatedAt (datetime) --
The timestamp when the attachment was last updated.
LastModificationErrors (list) --
Describes the error associated with the attachment request.
(dict) --
Describes the error associated with an attachment request.
Code (string) --
The error code for the attachment request.
Message (string) --
The message associated with the error code.
ResourceArn (string) --
The ARN of the requested attachment resource.
RequestId (string) --
The ID of the attachment request.
SubnetArns (list) --
The subnet ARNs.
(string) --
Options (dict) --
Provides details about the VPC attachment.
Ipv6Support (boolean) --
Indicates whether IPv6 is supported.
ApplianceModeSupport (boolean) --
Indicates whether appliance mode is supported. If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow. The default value is false.
DnsSupport (boolean) --
Indicates whether DNS is supported.
SecurityGroupReferencingSupport (boolean) --
Indicates whether security group referencing is enabled for this VPC attachment. The default is true. However, at the core network policy-level the default is set to false.