NetworkConfig / CentralNetworkServicesConfig

Central network services configuration. Use this configuration to define centralized networking services for your environment. Central network services enables you to easily designate a central account that owns your core network infrastructure. These network resources can be shared with other accounts in your organization so that workload accounts can consume them.

centralNetworkServices:
delegatedAdminAccount: Network
gatewayLoadBalancers: []
ipams: []
networkFirewall:
firewalls: []
policies: []
rules: []
route53Resolver:
endpoints: []
firewallRuleGroups: []
queryLogs:
name: accelerator-query-logs
destinations:
- cloud-watch-logs
- s3
shareTargets:
organizationalUnits:
- Root
interface ICentralNetworkServicesConfig {
    delegatedAdminAccount: string;
    gatewayLoadBalancers?: IGwlbConfig[];
    ipams?: IIpamConfig[];
    networkFirewall?: INfwConfig;
    route53Resolver?: IResolverConfig;
}

Properties

delegatedAdminAccount: string

The friendly name of the delegated administrator account for network services. Resources configured under centralNetworkServices will be created in this account.

CAUTION: Changing this property value after initial deployment causes all central network services to be recreated. Please be aware that any downstream dependencies may cause this property update to fail.

This is the logical name property of the account as defined in accounts-config.yaml.

gatewayLoadBalancers?: IGwlbConfig[]

An array of Gateway Load Balancer configurations.

GwlbConfig

ipams?: IIpamConfig[]

An array of IPAM configurations.

IpamConfig

networkFirewall?: INfwConfig

A Network Firewall configuration.

NfwConfig

route53Resolver?: IResolverConfig

A Route 53 resolver configuration.

ResolverConfig