---
type: resource-type
title: VPCEncryptionControl
description: aws resource type AWS::EC2::VPCEncryptionControl
name: VPCEncryptionControl
lexicon: aws
resource_type: AWS::EC2::VPCEncryptionControl
---
`AWS::EC2::VPCEncryptionControl`, a resource type of the aws lexicon.

## Properties

- `EgressOnlyInternetGatewayExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable EIGW exclusion
- `ElasticFileSystemExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable EFS exclusion
- `InternetGatewayExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable IGW exclusion
- `LambdaExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable Lambda exclusion
- `Mode` (`"enforce" | "monitor"`, optional): The VPC encryption control mode, either monitor or enforce.
- `NatGatewayExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable Nat gateway exclusion
- `ResourceExclusions` (`VPCEncryptionControl_ResourceExclusions`, optional): Enumerates the states of all the VPC encryption control resource exclusions
- `State` (`"available" | "creating" | "delete-failed" | "deleted" | "deleting" | "enforce-failed" | "enforce-in-progress" | "monitor-failed" | "monitor-in-progress"`, optional): The current state of the VPC encryption control.
- `StateMessage` (`string`, optional): Provides additional context on the state of the VPC encryption control.
- `Tags` (`VPCEncryptionControl_Tag[]`, optional): The tags to assign to the VPC encryption control.
- `VirtualPrivateGatewayExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable VGW exclusion
- `VpcEncryptionControlId` (`string`, optional): The VPC encryption control resource id.
- `VpcId` (`string`, optional): The VPC on which this VPC encryption control is applied.
- `VpcLatticeExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable Vpc Lattice exclusion
- `VpcPeeringExclusionInput` (`"disable" | "enable"`, optional): Used to enable or disable VPC peering exclusion

## Attributes

- `ResourceExclusions`
- `ResourceExclusions.EgressOnlyInternetGateway`
- `ResourceExclusions.EgressOnlyInternetGateway.State`
- `ResourceExclusions.EgressOnlyInternetGateway.StateMessage`
- `ResourceExclusions.ElasticFileSystem`
- `ResourceExclusions.ElasticFileSystem.State`
- `ResourceExclusions.ElasticFileSystem.StateMessage`
- `ResourceExclusions.InternetGateway`
- `ResourceExclusions.InternetGateway.State`
- `ResourceExclusions.InternetGateway.StateMessage`
- `ResourceExclusions.Lambda`
- `ResourceExclusions.Lambda.State`
- `ResourceExclusions.Lambda.StateMessage`
- `ResourceExclusions.NatGateway`
- `ResourceExclusions.NatGateway.State`
- `ResourceExclusions.NatGateway.StateMessage`
- `ResourceExclusions.VirtualPrivateGateway`
- `ResourceExclusions.VirtualPrivateGateway.State`
- `ResourceExclusions.VirtualPrivateGateway.StateMessage`
- `ResourceExclusions.VpcLattice`
- `ResourceExclusions.VpcLattice.State`
- `ResourceExclusions.VpcLattice.StateMessage`
- `ResourceExclusions.VpcPeering`
- `ResourceExclusions.VpcPeering.State`
- `ResourceExclusions.VpcPeering.StateMessage`
- `State`
- `StateMessage`
- `VpcEncryptionControlId`