verified_access_endpoints
Used to retrieve a list of verified_access_endpoints
in a region or to create or delete a verified_access_endpoints
resource, use verified_access_endpoint
to read or update an individual resource.
Overview
Name | verified_access_endpoints |
Type | Resource |
Description | The AWS::EC2::VerifiedAccessEndpoint resource creates an AWS EC2 Verified Access Endpoint. |
Id | aws.ec2.verified_access_endpoints |
Fields
Name | Datatype | Description |
---|---|---|
verified_access_endpoint_id | string | The ID of the AWS Verified Access endpoint. |
region | string | AWS region. |
Methods
Name | Accessible by | Required Params |
---|---|---|
create_resource | INSERT | ApplicationDomain, AttachmentType, DomainCertificateArn, EndpointType, VerifiedAccessGroupId, EndpointDomainPrefix, region |
delete_resource | DELETE | data__Identifier, region |
list_resource | SELECT | region |
SELECT
Example
SELECT
region,
verified_access_endpoint_id
FROM aws.ec2.verified_access_endpoints
WHERE region = 'us-east-1';
INSERT
Example
Use the following StackQL query and manifest file to create a new verified_access_endpoint
resource, using stack-deploy
.
- Required Properties
- All Properties
- Manifest
/*+ create */
INSERT INTO aws.ec2.verified_access_endpoints (
VerifiedAccessGroupId,
EndpointType,
EndpointDomainPrefix,
DomainCertificateArn,
AttachmentType,
ApplicationDomain,
region
)
SELECT
'{{ VerifiedAccessGroupId }}',
'{{ EndpointType }}',
'{{ EndpointDomainPrefix }}',
'{{ DomainCertificateArn }}',
'{{ AttachmentType }}',
'{{ ApplicationDomain }}',
'{{ region }}';
/*+ create */
INSERT INTO aws.ec2.verified_access_endpoints (
VerifiedAccessGroupId,
SecurityGroupIds,
NetworkInterfaceOptions,
LoadBalancerOptions,
EndpointType,
EndpointDomainPrefix,
DomainCertificateArn,
AttachmentType,
ApplicationDomain,
Description,
PolicyDocument,
PolicyEnabled,
Tags,
SseSpecification,
region
)
SELECT
'{{ VerifiedAccessGroupId }}',
'{{ SecurityGroupIds }}',
'{{ NetworkInterfaceOptions }}',
'{{ LoadBalancerOptions }}',
'{{ EndpointType }}',
'{{ EndpointDomainPrefix }}',
'{{ DomainCertificateArn }}',
'{{ AttachmentType }}',
'{{ ApplicationDomain }}',
'{{ Description }}',
'{{ PolicyDocument }}',
'{{ PolicyEnabled }}',
'{{ Tags }}',
'{{ SseSpecification }}',
'{{ region }}';
version: 1
name: stack name
description: stack description
providers:
- aws
globals:
- name: region
value: '{{ vars.AWS_REGION }}'
resources:
- name: verified_access_endpoint
props:
- name: VerifiedAccessGroupId
value: '{{ VerifiedAccessGroupId }}'
- name: SecurityGroupIds
value:
- '{{ SecurityGroupIds[0] }}'
- name: NetworkInterfaceOptions
value:
NetworkInterfaceId: '{{ NetworkInterfaceId }}'
Port: '{{ Port }}'
Protocol: '{{ Protocol }}'
- name: LoadBalancerOptions
value:
LoadBalancerArn: '{{ LoadBalancerArn }}'
Port: '{{ Port }}'
Protocol: '{{ Protocol }}'
SubnetIds:
- '{{ SubnetIds[0] }}'
- name: EndpointType
value: '{{ EndpointType }}'
- name: EndpointDomainPrefix
value: '{{ EndpointDomainPrefix }}'
- name: DomainCertificateArn
value: '{{ DomainCertificateArn }}'
- name: AttachmentType
value: '{{ AttachmentType }}'
- name: ApplicationDomain
value: '{{ ApplicationDomain }}'
- name: Description
value: '{{ Description }}'
- name: PolicyDocument
value: '{{ PolicyDocument }}'
- name: PolicyEnabled
value: '{{ PolicyEnabled }}'
- name: Tags
value:
- Key: '{{ Key }}'
Value: '{{ Value }}'
- name: SseSpecification
value:
KmsKeyArn: '{{ KmsKeyArn }}'
CustomerManagedKeyEnabled: '{{ CustomerManagedKeyEnabled }}'
DELETE
Example
/*+ delete */
DELETE FROM aws.ec2.verified_access_endpoints
WHERE data__Identifier = '<VerifiedAccessEndpointId>'
AND region = 'us-east-1';
Permissions
To operate on the verified_access_endpoints
resource, the following permissions are required:
Create
ec2:CreateVerifiedAccessEndpoint,
ec2:DescribeVerifiedAccessEndpoints,
ec2:CreateTags,
ec2:DescribeTags,
iam:CreateServiceLinkedRole,
iam:ListRoles,
acm:GetCertificateWithPK,
acm:DescribeCertificate,
acm:CreateCertificateRelation,
sso:GetManagedApplicationInstance,
sso:GetPeregrineStatus,
sso:GetSharedSsoConfiguration,
sso:CreateManagedApplicationInstance,
ec2:DescribeSubnets,
ec2:DescribeSecurityGroups,
ec2:DescribeNetworkInterfaces,
ec2:DescribeAccountAttributes,
elasticloadbalancing:DescribeLoadBalancers,
elasticloadbalancing:DescribeListeners,
elasticloadbalancing:DescribeListenerCertificates,
acm:DeleteCertificateRelation,
ec2:DeleteTags,
ec2:DeleteVerifiedAccessEndpoint,
ec2:GetVerifiedAccessEndpointPolicy,
ec2:ModifyVerifiedAccessEndpoint,
ec2:ModifyVerifiedAccessEndpointPolicy,
sso:DeleteManagedApplicationInstance,
kms:DescribeKey,
kms:RetireGrant,
kms:CreateGrant,
kms:GenerateDataKey,
kms:Decrypt
Delete
ec2:DescribeVerifiedAccessEndpoints,
ec2:DescribeTags,
ec2:DeleteVerifiedAccessEndpoint,
ec2:DeleteTags,
sso:DeleteManagedApplicationInstance,
acm:DeleteCertificateRelation,
acm:DescribeCertificate,
acm:CreateCertificateRelation,
acm:GetCertificateWithPK,
ec2:CreateTags,
ec2:CreateVerifiedAccessEndpoint,
ec2:DescribeAccountAttributes,
ec2:DescribeNetworkInterfaces,
ec2:DescribeSecurityGroups,
ec2:DescribeSubnets,
ec2:GetVerifiedAccessEndpointPolicy,
ec2:ModifyVerifiedAccessEndpoint,
ec2:ModifyVerifiedAccessEndpointPolicy,
elasticloadbalancing:DescribeListenerCertificates,
elasticloadbalancing:DescribeListeners,
elasticloadbalancing:DescribeLoadBalancers,
iam:CreateServiceLinkedRole,
iam:ListRoles,
sso:CreateManagedApplicationInstance,
sso:GetManagedApplicationInstance,
sso:GetPeregrineStatus,
sso:GetSharedSsoConfiguration,
kms:DescribeKey,
kms:RetireGrant,
kms:CreateGrant,
kms:GenerateDataKey,
kms:Decrypt
List
ec2:DescribeVerifiedAccessEndpoints,
ec2:DescribeTags,
acm:CreateCertificateRelation,
acm:DeleteCertificateRelation,
acm:DescribeCertificate,
acm:GetCertificateWithPK,
ec2:CreateTags,
ec2:CreateVerifiedAccessEndpoint,
ec2:DeleteTags,
ec2:DeleteVerifiedAccessEndpoint,
ec2:DescribeAccountAttributes,
ec2:DescribeNetworkInterfaces,
ec2:DescribeSecurityGroups,
ec2:DescribeSubnets,
ec2:GetVerifiedAccessEndpointPolicy,
ec2:ModifyVerifiedAccessEndpoint,
ec2:ModifyVerifiedAccessEndpointPolicy,
elasticloadbalancing:DescribeListenerCertificates,
elasticloadbalancing:DescribeListeners,
elasticloadbalancing:DescribeLoadBalancers,
iam:CreateServiceLinkedRole,
iam:ListRoles,
sso:CreateManagedApplicationInstance,
sso:DeleteManagedApplicationInstance,
sso:GetManagedApplicationInstance,
sso:GetPeregrineStatus,
sso:GetSharedSsoConfiguration,
kms:DescribeKey,
kms:RetireGrant,
kms:CreateGrant,
kms:GenerateDataKey,
kms:Decrypt