Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS
  3. API Docs
  4. ec2
  5. getVpcEndpoint
AWS v6.60.0 published on Tuesday, Nov 19, 2024 by Pulumi
pulumi/pulumi-aws

aws.ec2.getVpcEndpoint

Explore with Pulumi AI

aws logo
AWS v6.60.0 published on Tuesday, Nov 19, 2024 by Pulumi
pulumi/pulumi-aws

    The VPC Endpoint data source provides details about a specific VPC endpoint.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

// Declare the data source
const s3 = aws.ec2.getVpcEndpoint({
    vpcId: foo.id,
    serviceName: "com.amazonaws.us-west-2.s3",
});
const privateS3 = new aws.ec2.VpcEndpointRouteTableAssociation("private_s3", {
    vpcEndpointId: s3.then(s3 => s3.id),
    routeTableId: _private.id,
});

    import pulumi
import pulumi_aws as aws

# Declare the data source
s3 = aws.ec2.get_vpc_endpoint(vpc_id=foo["id"],
    service_name="com.amazonaws.us-west-2.s3")
private_s3 = aws.ec2.VpcEndpointRouteTableAssociation("private_s3",
    vpc_endpoint_id=s3.id,
    route_table_id=private["id"])

    package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ec2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Declare the data source
		s3, err := ec2.LookupVpcEndpoint(ctx, &ec2.LookupVpcEndpointArgs{
			VpcId:       pulumi.StringRef(foo.Id),
			ServiceName: pulumi.StringRef("com.amazonaws.us-west-2.s3"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = ec2.NewVpcEndpointRouteTableAssociation(ctx, "private_s3", &ec2.VpcEndpointRouteTableAssociationArgs{
			VpcEndpointId: pulumi.String(s3.Id),
			RouteTableId:  pulumi.Any(private.Id),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    // Declare the data source
    var s3 = Aws.Ec2.GetVpcEndpoint.Invoke(new()
    {
        VpcId = foo.Id,
        ServiceName = "com.amazonaws.us-west-2.s3",
    });

    var privateS3 = new Aws.Ec2.VpcEndpointRouteTableAssociation("private_s3", new()
    {
        VpcEndpointId = s3.Apply(getVpcEndpointResult => getVpcEndpointResult.Id),
        RouteTableId = @private.Id,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ec2.Ec2Functions;
import com.pulumi.aws.ec2.inputs.GetVpcEndpointArgs;
import com.pulumi.aws.ec2.VpcEndpointRouteTableAssociation;
import com.pulumi.aws.ec2.VpcEndpointRouteTableAssociationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Declare the data source
        final var s3 = Ec2Functions.getVpcEndpoint(GetVpcEndpointArgs.builder()
            .vpcId(foo.id())
            .serviceName("com.amazonaws.us-west-2.s3")
            .build());

        var privateS3 = new VpcEndpointRouteTableAssociation("privateS3", VpcEndpointRouteTableAssociationArgs.builder()
            .vpcEndpointId(s3.applyValue(getVpcEndpointResult -> getVpcEndpointResult.id()))
            .routeTableId(private_.id())
            .build());

    }
}

    resources:
  privateS3:
    type: aws:ec2:VpcEndpointRouteTableAssociation
    name: private_s3
    properties:
      vpcEndpointId: ${s3.id}
      routeTableId: ${private.id}
variables:
  # Declare the data source
  s3:
    fn::invoke:
      Function: aws:ec2:getVpcEndpoint
      Arguments:
        vpcId: ${foo.id}
        serviceName: com.amazonaws.us-west-2.s3

    Using getVpcEndpoint

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getVpcEndpoint(args: GetVpcEndpointArgs, opts?: InvokeOptions): Promise<GetVpcEndpointResult>
function getVpcEndpointOutput(args: GetVpcEndpointOutputArgs, opts?: InvokeOptions): Output<GetVpcEndpointResult>
    def get_vpc_endpoint(filters: Optional[Sequence[GetVpcEndpointFilter]] = None,
                     id: Optional[str] = None,
                     service_name: Optional[str] = None,
                     state: Optional[str] = None,
                     tags: Optional[Mapping[str, str]] = None,
                     vpc_id: Optional[str] = None,
                     opts: Optional[InvokeOptions] = None) -> GetVpcEndpointResult
def get_vpc_endpoint_output(filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetVpcEndpointFilterArgs]]]] = None,
                     id: Optional[pulumi.Input[str]] = None,
                     service_name: Optional[pulumi.Input[str]] = None,
                     state: Optional[pulumi.Input[str]] = None,
                     tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                     vpc_id: Optional[pulumi.Input[str]] = None,
                     opts: Optional[InvokeOptions] = None) -> Output[GetVpcEndpointResult]
    func LookupVpcEndpoint(ctx *Context, args *LookupVpcEndpointArgs, opts ...InvokeOption) (*LookupVpcEndpointResult, error)
func LookupVpcEndpointOutput(ctx *Context, args *LookupVpcEndpointOutputArgs, opts ...InvokeOption) LookupVpcEndpointResultOutput

    > Note: This function is named LookupVpcEndpoint in the Go SDK.

    public static class GetVpcEndpoint 
{
    public static Task<GetVpcEndpointResult> InvokeAsync(GetVpcEndpointArgs args, InvokeOptions? opts = null)
    public static Output<GetVpcEndpointResult> Invoke(GetVpcEndpointInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetVpcEndpointResult> getVpcEndpoint(GetVpcEndpointArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet

    fn::invoke:
  function: aws:ec2/getVpcEndpoint:getVpcEndpoint
  arguments:
    # arguments dictionary

    The following arguments are supported:

    Filters List<GetVpcEndpointFilter>
    Custom filter block as described below.
    Id string
    ID of the specific VPC Endpoint to retrieve.
    ServiceName string
    Service name of the specific VPC Endpoint to retrieve. For AWS services the service name is usually in the form com.amazonaws.<region>.<service> (the SageMaker Notebook service is an exception to this rule, the service name is in the form aws.sagemaker.<region>.notebook).
    State string
    State of the specific VPC Endpoint to retrieve.
    Tags Dictionary<string, string>
    Map of tags, each pair of which must exactly match a pair on the specific VPC Endpoint to retrieve.
    VpcId string

    ID of the VPC in which the specific VPC Endpoint is used.

    More complex filters can be expressed using one or more filter sub-blocks, which take the following arguments:

    Filters []GetVpcEndpointFilter
    Custom filter block as described below.
    Id string
    ID of the specific VPC Endpoint to retrieve.
    ServiceName string
    Service name of the specific VPC Endpoint to retrieve. For AWS services the service name is usually in the form com.amazonaws.<region>.<service> (the SageMaker Notebook service is an exception to this rule, the service name is in the form aws.sagemaker.<region>.notebook).
    State string
    State of the specific VPC Endpoint to retrieve.
    Tags map[string]string
    Map of tags, each pair of which must exactly match a pair on the specific VPC Endpoint to retrieve.
    VpcId string

    ID of the VPC in which the specific VPC Endpoint is used.

    More complex filters can be expressed using one or more filter sub-blocks, which take the following arguments:

    filters List<GetVpcEndpointFilter>
    Custom filter block as described below.
    id String
    ID of the specific VPC Endpoint to retrieve.
    serviceName String
    Service name of the specific VPC Endpoint to retrieve. For AWS services the service name is usually in the form com.amazonaws.<region>.<service> (the SageMaker Notebook service is an exception to this rule, the service name is in the form aws.sagemaker.<region>.notebook).
    state String
    State of the specific VPC Endpoint to retrieve.
    tags Map<String,String>
    Map of tags, each pair of which must exactly match a pair on the specific VPC Endpoint to retrieve.
    vpcId String

    ID of the VPC in which the specific VPC Endpoint is used.

    More complex filters can be expressed using one or more filter sub-blocks, which take the following arguments:

    filters GetVpcEndpointFilter[]
    Custom filter block as described below.
    id string
    ID of the specific VPC Endpoint to retrieve.
    serviceName string
    Service name of the specific VPC Endpoint to retrieve. For AWS services the service name is usually in the form com.amazonaws.<region>.<service> (the SageMaker Notebook service is an exception to this rule, the service name is in the form aws.sagemaker.<region>.notebook).
    state string
    State of the specific VPC Endpoint to retrieve.
    tags {[key: string]: string}
    Map of tags, each pair of which must exactly match a pair on the specific VPC Endpoint to retrieve.
    vpcId string

    ID of the VPC in which the specific VPC Endpoint is used.

    More complex filters can be expressed using one or more filter sub-blocks, which take the following arguments:

    filters Sequence[GetVpcEndpointFilter]
    Custom filter block as described below.
    id str
    ID of the specific VPC Endpoint to retrieve.
    service_name str
    Service name of the specific VPC Endpoint to retrieve. For AWS services the service name is usually in the form com.amazonaws.<region>.<service> (the SageMaker Notebook service is an exception to this rule, the service name is in the form aws.sagemaker.<region>.notebook).
    state str
    State of the specific VPC Endpoint to retrieve.
    tags Mapping[str, str]
    Map of tags, each pair of which must exactly match a pair on the specific VPC Endpoint to retrieve.
    vpc_id str

    ID of the VPC in which the specific VPC Endpoint is used.

    More complex filters can be expressed using one or more filter sub-blocks, which take the following arguments:

    filters List<Property Map>
    Custom filter block as described below.
    id String
    ID of the specific VPC Endpoint to retrieve.
    serviceName String
    Service name of the specific VPC Endpoint to retrieve. For AWS services the service name is usually in the form com.amazonaws.<region>.<service> (the SageMaker Notebook service is an exception to this rule, the service name is in the form aws.sagemaker.<region>.notebook).
    state String
    State of the specific VPC Endpoint to retrieve.
    tags Map<String>
    Map of tags, each pair of which must exactly match a pair on the specific VPC Endpoint to retrieve.
    vpcId String

    ID of the VPC in which the specific VPC Endpoint is used.

    More complex filters can be expressed using one or more filter sub-blocks, which take the following arguments:

    getVpcEndpoint Result

    The following output properties are available:

    Arn string
    ARN of the VPC endpoint.
    CidrBlocks List<string>
    List of CIDR blocks for the exposed AWS service. Applicable for endpoints of type Gateway.
    DnsEntries List<GetVpcEndpointDnsEntry>
    DNS entries for the VPC Endpoint. Applicable for endpoints of type Interface. DNS entry blocks are documented below.
    DnsOptions List<GetVpcEndpointDnsOption>
    DNS options for the VPC Endpoint. DNS options blocks are documented below.
    Id string
    IpAddressType string
    NetworkInterfaceIds List<string>
    One or more network interfaces for the VPC Endpoint. Applicable for endpoints of type Interface.
    OwnerId string
    ID of the AWS account that owns the VPC endpoint.
    Policy string
    Policy document associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    PrefixListId string
    Prefix list ID of the exposed AWS service. Applicable for endpoints of type Gateway.
    PrivateDnsEnabled bool
    Whether or not the VPC is associated with a private hosted zone - true or false. Applicable for endpoints of type Interface.
    RequesterManaged bool
    Whether or not the VPC Endpoint is being managed by its service - true or false.
    RouteTableIds List<string>
    One or more route tables associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    SecurityGroupIds List<string>
    One or more security groups associated with the network interfaces. Applicable for endpoints of type Interface.
    ServiceName string
    State string
    SubnetIds List<string>
    One or more subnets in which the VPC Endpoint is located. Applicable for endpoints of type Interface.
    Tags Dictionary<string, string>
    VpcEndpointType string
    VPC Endpoint type, Gateway or Interface.
    VpcId string
    Filters List<GetVpcEndpointFilter>
    Arn string
    ARN of the VPC endpoint.
    CidrBlocks []string
    List of CIDR blocks for the exposed AWS service. Applicable for endpoints of type Gateway.
    DnsEntries []GetVpcEndpointDnsEntry
    DNS entries for the VPC Endpoint. Applicable for endpoints of type Interface. DNS entry blocks are documented below.
    DnsOptions []GetVpcEndpointDnsOption
    DNS options for the VPC Endpoint. DNS options blocks are documented below.
    Id string
    IpAddressType string
    NetworkInterfaceIds []string
    One or more network interfaces for the VPC Endpoint. Applicable for endpoints of type Interface.
    OwnerId string
    ID of the AWS account that owns the VPC endpoint.
    Policy string
    Policy document associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    PrefixListId string
    Prefix list ID of the exposed AWS service. Applicable for endpoints of type Gateway.
    PrivateDnsEnabled bool
    Whether or not the VPC is associated with a private hosted zone - true or false. Applicable for endpoints of type Interface.
    RequesterManaged bool
    Whether or not the VPC Endpoint is being managed by its service - true or false.
    RouteTableIds []string
    One or more route tables associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    SecurityGroupIds []string
    One or more security groups associated with the network interfaces. Applicable for endpoints of type Interface.
    ServiceName string
    State string
    SubnetIds []string
    One or more subnets in which the VPC Endpoint is located. Applicable for endpoints of type Interface.
    Tags map[string]string
    VpcEndpointType string
    VPC Endpoint type, Gateway or Interface.
    VpcId string
    Filters []GetVpcEndpointFilter
    arn String
    ARN of the VPC endpoint.
    cidrBlocks List<String>
    List of CIDR blocks for the exposed AWS service. Applicable for endpoints of type Gateway.
    dnsEntries List<GetVpcEndpointDnsEntry>
    DNS entries for the VPC Endpoint. Applicable for endpoints of type Interface. DNS entry blocks are documented below.
    dnsOptions List<GetVpcEndpointDnsOption>
    DNS options for the VPC Endpoint. DNS options blocks are documented below.
    id String
    ipAddressType String
    networkInterfaceIds List<String>
    One or more network interfaces for the VPC Endpoint. Applicable for endpoints of type Interface.
    ownerId String
    ID of the AWS account that owns the VPC endpoint.
    policy String
    Policy document associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    prefixListId String
    Prefix list ID of the exposed AWS service. Applicable for endpoints of type Gateway.
    privateDnsEnabled Boolean
    Whether or not the VPC is associated with a private hosted zone - true or false. Applicable for endpoints of type Interface.
    requesterManaged Boolean
    Whether or not the VPC Endpoint is being managed by its service - true or false.
    routeTableIds List<String>
    One or more route tables associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    securityGroupIds List<String>
    One or more security groups associated with the network interfaces. Applicable for endpoints of type Interface.
    serviceName String
    state String
    subnetIds List<String>
    One or more subnets in which the VPC Endpoint is located. Applicable for endpoints of type Interface.
    tags Map<String,String>
    vpcEndpointType String
    VPC Endpoint type, Gateway or Interface.
    vpcId String
    filters List<GetVpcEndpointFilter>
    arn string
    ARN of the VPC endpoint.
    cidrBlocks string[]
    List of CIDR blocks for the exposed AWS service. Applicable for endpoints of type Gateway.
    dnsEntries GetVpcEndpointDnsEntry[]
    DNS entries for the VPC Endpoint. Applicable for endpoints of type Interface. DNS entry blocks are documented below.
    dnsOptions GetVpcEndpointDnsOption[]
    DNS options for the VPC Endpoint. DNS options blocks are documented below.
    id string
    ipAddressType string
    networkInterfaceIds string[]
    One or more network interfaces for the VPC Endpoint. Applicable for endpoints of type Interface.
    ownerId string
    ID of the AWS account that owns the VPC endpoint.
    policy string
    Policy document associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    prefixListId string
    Prefix list ID of the exposed AWS service. Applicable for endpoints of type Gateway.
    privateDnsEnabled boolean
    Whether or not the VPC is associated with a private hosted zone - true or false. Applicable for endpoints of type Interface.
    requesterManaged boolean
    Whether or not the VPC Endpoint is being managed by its service - true or false.
    routeTableIds string[]
    One or more route tables associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    securityGroupIds string[]
    One or more security groups associated with the network interfaces. Applicable for endpoints of type Interface.
    serviceName string
    state string
    subnetIds string[]
    One or more subnets in which the VPC Endpoint is located. Applicable for endpoints of type Interface.
    tags {[key: string]: string}
    vpcEndpointType string
    VPC Endpoint type, Gateway or Interface.
    vpcId string
    filters GetVpcEndpointFilter[]
    arn str
    ARN of the VPC endpoint.
    cidr_blocks Sequence[str]
    List of CIDR blocks for the exposed AWS service. Applicable for endpoints of type Gateway.
    dns_entries Sequence[GetVpcEndpointDnsEntry]
    DNS entries for the VPC Endpoint. Applicable for endpoints of type Interface. DNS entry blocks are documented below.
    dns_options Sequence[GetVpcEndpointDnsOption]
    DNS options for the VPC Endpoint. DNS options blocks are documented below.
    id str
    ip_address_type str
    network_interface_ids Sequence[str]
    One or more network interfaces for the VPC Endpoint. Applicable for endpoints of type Interface.
    owner_id str
    ID of the AWS account that owns the VPC endpoint.
    policy str
    Policy document associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    prefix_list_id str
    Prefix list ID of the exposed AWS service. Applicable for endpoints of type Gateway.
    private_dns_enabled bool
    Whether or not the VPC is associated with a private hosted zone - true or false. Applicable for endpoints of type Interface.
    requester_managed bool
    Whether or not the VPC Endpoint is being managed by its service - true or false.
    route_table_ids Sequence[str]
    One or more route tables associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    security_group_ids Sequence[str]
    One or more security groups associated with the network interfaces. Applicable for endpoints of type Interface.
    service_name str
    state str
    subnet_ids Sequence[str]
    One or more subnets in which the VPC Endpoint is located. Applicable for endpoints of type Interface.
    tags Mapping[str, str]
    vpc_endpoint_type str
    VPC Endpoint type, Gateway or Interface.
    vpc_id str
    filters Sequence[GetVpcEndpointFilter]
    arn String
    ARN of the VPC endpoint.
    cidrBlocks List<String>
    List of CIDR blocks for the exposed AWS service. Applicable for endpoints of type Gateway.
    dnsEntries List<Property Map>
    DNS entries for the VPC Endpoint. Applicable for endpoints of type Interface. DNS entry blocks are documented below.
    dnsOptions List<Property Map>
    DNS options for the VPC Endpoint. DNS options blocks are documented below.
    id String
    ipAddressType String
    networkInterfaceIds List<String>
    One or more network interfaces for the VPC Endpoint. Applicable for endpoints of type Interface.
    ownerId String
    ID of the AWS account that owns the VPC endpoint.
    policy String
    Policy document associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    prefixListId String
    Prefix list ID of the exposed AWS service. Applicable for endpoints of type Gateway.
    privateDnsEnabled Boolean
    Whether or not the VPC is associated with a private hosted zone - true or false. Applicable for endpoints of type Interface.
    requesterManaged Boolean
    Whether or not the VPC Endpoint is being managed by its service - true or false.
    routeTableIds List<String>
    One or more route tables associated with the VPC Endpoint. Applicable for endpoints of type Gateway.
    securityGroupIds List<String>
    One or more security groups associated with the network interfaces. Applicable for endpoints of type Interface.
    serviceName String
    state String
    subnetIds List<String>
    One or more subnets in which the VPC Endpoint is located. Applicable for endpoints of type Interface.
    tags Map<String>
    vpcEndpointType String
    VPC Endpoint type, Gateway or Interface.
    vpcId String
    filters List<Property Map>

    Supporting Types

    GetVpcEndpointDnsEntry

    DnsName string
    DNS name.
    HostedZoneId string
    ID of the private hosted zone.
    DnsName string
    DNS name.
    HostedZoneId string
    ID of the private hosted zone.
    dnsName String
    DNS name.
    hostedZoneId String
    ID of the private hosted zone.
    dnsName string
    DNS name.
    hostedZoneId string
    ID of the private hosted zone.
    dns_name str
    DNS name.
    hosted_zone_id str
    ID of the private hosted zone.
    dnsName String
    DNS name.
    hostedZoneId String
    ID of the private hosted zone.

    GetVpcEndpointDnsOption

    DnsRecordIpType string
    The DNS records created for the endpoint.
    PrivateDnsOnlyForInboundResolverEndpoint bool
    Indicates whether to enable private DNS only for inbound endpoints.
    DnsRecordIpType string
    The DNS records created for the endpoint.
    PrivateDnsOnlyForInboundResolverEndpoint bool
    Indicates whether to enable private DNS only for inbound endpoints.
    dnsRecordIpType String
    The DNS records created for the endpoint.
    privateDnsOnlyForInboundResolverEndpoint Boolean
    Indicates whether to enable private DNS only for inbound endpoints.
    dnsRecordIpType string
    The DNS records created for the endpoint.
    privateDnsOnlyForInboundResolverEndpoint boolean
    Indicates whether to enable private DNS only for inbound endpoints.
    dns_record_ip_type str
    The DNS records created for the endpoint.
    private_dns_only_for_inbound_resolver_endpoint bool
    Indicates whether to enable private DNS only for inbound endpoints.
    dnsRecordIpType String
    The DNS records created for the endpoint.
    privateDnsOnlyForInboundResolverEndpoint Boolean
    Indicates whether to enable private DNS only for inbound endpoints.

    GetVpcEndpointFilter

    Name string
    Name of the field to filter by, as defined by the underlying AWS API.
    Values List<string>
    Set of values that are accepted for the given field. A VPC Endpoint will be selected if any one of the given values matches.
    Name string
    Name of the field to filter by, as defined by the underlying AWS API.
    Values []string
    Set of values that are accepted for the given field. A VPC Endpoint will be selected if any one of the given values matches.
    name String
    Name of the field to filter by, as defined by the underlying AWS API.
    values List<String>
    Set of values that are accepted for the given field. A VPC Endpoint will be selected if any one of the given values matches.
    name string
    Name of the field to filter by, as defined by the underlying AWS API.
    values string[]
    Set of values that are accepted for the given field. A VPC Endpoint will be selected if any one of the given values matches.
    name str
    Name of the field to filter by, as defined by the underlying AWS API.
    values Sequence[str]
    Set of values that are accepted for the given field. A VPC Endpoint will be selected if any one of the given values matches.
    name String
    Name of the field to filter by, as defined by the underlying AWS API.
    values List<String>
    Set of values that are accepted for the given field. A VPC Endpoint will be selected if any one of the given values matches.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo
    AWS v6.60.0 published on Tuesday, Nov 19, 2024 by Pulumi
    pulumi/pulumi-aws