VPC Lattice API
VPC Lattice API
API Reference
API Version 2022-11-30
Amazon VPC Lattice API Reference
Amazon's trademarks and trade dress may not be used in connection with any product or service that is not
Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or
discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may
or may not be affiliated with, connected to, or sponsored by Amazon.
Amazon VPC Lattice API Reference
Table of Contents
Welcome ........................................................................................................................................... 1
Actions ............................................................................................................................................. 2
BatchUpdateRule ....................................................................................................................... 4
Request Syntax .................................................................................................................. 4
URI Request Parameters ...................................................................................................... 4
Request Body .................................................................................................................... 4
Response Syntax ................................................................................................................ 5
Response Elements ............................................................................................................. 5
Errors ............................................................................................................................... 5
See Also ............................................................................................................................ 6
CreateAccessLogSubscription ....................................................................................................... 7
Request Syntax .................................................................................................................. 7
URI Request Parameters ...................................................................................................... 7
Request Body .................................................................................................................... 7
Response Syntax ................................................................................................................ 8
Response Elements ............................................................................................................. 8
Errors ............................................................................................................................... 9
See Also .......................................................................................................................... 10
CreateListener .......................................................................................................................... 11
Request Syntax ................................................................................................................ 11
URI Request Parameters .................................................................................................... 11
Request Body ................................................................................................................... 11
Response Syntax .............................................................................................................. 12
Response Elements ........................................................................................................... 13
Errors .............................................................................................................................. 14
See Also .......................................................................................................................... 15
CreateRule ............................................................................................................................... 16
Request Syntax ................................................................................................................ 16
URI Request Parameters .................................................................................................... 16
Request Body ................................................................................................................... 16
Response Syntax .............................................................................................................. 18
Response Elements ........................................................................................................... 18
Errors .............................................................................................................................. 19
See Also .......................................................................................................................... 20
CreateService ........................................................................................................................... 21
Request Syntax ................................................................................................................ 21
URI Request Parameters .................................................................................................... 21
Request Body ................................................................................................................... 21
Response Syntax .............................................................................................................. 22
Response Elements ........................................................................................................... 23
Errors .............................................................................................................................. 24
See Also .......................................................................................................................... 25
CreateServiceNetwork ............................................................................................................... 26
Request Syntax ................................................................................................................ 26
URI Request Parameters .................................................................................................... 26
Request Body ................................................................................................................... 26
Response Syntax .............................................................................................................. 27
Response Elements ........................................................................................................... 27
Errors .............................................................................................................................. 28
See Also .......................................................................................................................... 29
CreateServiceNetworkServiceAssociation ..................................................................................... 30
Request Syntax ................................................................................................................ 30
URI Request Parameters .................................................................................................... 30
Request Body ................................................................................................................... 30
Errors .............................................................................................................................. 72
See Also .......................................................................................................................... 73
GetAuthPolicy .......................................................................................................................... 74
Request Syntax ................................................................................................................ 74
URI Request Parameters .................................................................................................... 74
Request Body ................................................................................................................... 74
Response Syntax .............................................................................................................. 74
Response Elements ........................................................................................................... 74
Errors .............................................................................................................................. 75
See Also .......................................................................................................................... 75
GetListener .............................................................................................................................. 77
Request Syntax ................................................................................................................ 77
URI Request Parameters .................................................................................................... 77
Request Body ................................................................................................................... 77
Response Syntax .............................................................................................................. 77
Response Elements ........................................................................................................... 78
Errors .............................................................................................................................. 79
See Also .......................................................................................................................... 80
GetResourcePolicy .................................................................................................................... 81
Request Syntax ................................................................................................................ 81
URI Request Parameters .................................................................................................... 81
Request Body ................................................................................................................... 81
Response Syntax .............................................................................................................. 81
Response Elements ........................................................................................................... 81
Errors .............................................................................................................................. 82
See Also .......................................................................................................................... 82
GetRule ................................................................................................................................... 83
Request Syntax ................................................................................................................ 83
URI Request Parameters .................................................................................................... 83
Request Body ................................................................................................................... 83
Response Syntax .............................................................................................................. 83
Response Elements ........................................................................................................... 84
Errors .............................................................................................................................. 85
See Also .......................................................................................................................... 85
GetService ............................................................................................................................... 87
Request Syntax ................................................................................................................ 87
URI Request Parameters .................................................................................................... 87
Request Body ................................................................................................................... 87
Response Syntax .............................................................................................................. 87
Response Elements ........................................................................................................... 87
Errors .............................................................................................................................. 89
See Also .......................................................................................................................... 90
GetServiceNetwork ................................................................................................................... 91
Request Syntax ................................................................................................................ 91
URI Request Parameters .................................................................................................... 91
Request Body ................................................................................................................... 91
Response Syntax .............................................................................................................. 91
Response Elements ........................................................................................................... 91
Errors .............................................................................................................................. 92
See Also .......................................................................................................................... 93
GetServiceNetworkServiceAssociation ......................................................................................... 94
Request Syntax ................................................................................................................ 94
URI Request Parameters .................................................................................................... 94
Request Body ................................................................................................................... 94
Response Syntax .............................................................................................................. 94
Response Elements ........................................................................................................... 94
Errors .............................................................................................................................. 97
Welcome
Amazon VPC Lattice is a fully managed application networking service that you use to connect, secure,
and monitor all of your services across multiple accounts and virtual private clouds (VPCs). Amazon VPC
Lattice interconnects your microservices and legacy services within a logical boundary, so that you can
discover and manage them more efficiently. For more information, see the Amazon VPC Lattice User
Guide
Actions
The following actions are supported:
• BatchUpdateRule (p. 4)
• CreateAccessLogSubscription (p. 7)
• CreateListener (p. 11)
• CreateRule (p. 16)
• CreateService (p. 21)
• CreateServiceNetwork (p. 26)
• CreateServiceNetworkServiceAssociation (p. 30)
• CreateServiceNetworkVpcAssociation (p. 34)
• CreateTargetGroup (p. 38)
• DeleteAccessLogSubscription (p. 43)
• DeleteAuthPolicy (p. 45)
• DeleteListener (p. 47)
• DeleteResourcePolicy (p. 49)
• DeleteRule (p. 51)
• DeleteService (p. 54)
• DeleteServiceNetwork (p. 57)
• DeleteServiceNetworkServiceAssociation (p. 59)
• DeleteServiceNetworkVpcAssociation (p. 62)
• DeleteTargetGroup (p. 65)
• DeregisterTargets (p. 68)
• GetAccessLogSubscription (p. 71)
• GetAuthPolicy (p. 74)
• GetListener (p. 77)
• GetResourcePolicy (p. 81)
• GetRule (p. 83)
• GetService (p. 87)
• GetServiceNetwork (p. 91)
• GetServiceNetworkServiceAssociation (p. 94)
• GetServiceNetworkVpcAssociation (p. 98)
• GetTargetGroup (p. 102)
• ListAccessLogSubscriptions (p. 106)
• ListListeners (p. 109)
• ListRules (p. 112)
• ListServiceNetworks (p. 115)
• ListServiceNetworkServiceAssociations (p. 117)
• ListServiceNetworkVpcAssociations (p. 120)
• ListServices (p. 123)
• ListTagsForResource (p. 125)
• ListTargetGroups (p. 127)
• ListTargets (p. 130)
BatchUpdateRule
Updates the listener rules in a batch. You can use this operation to change the priority of listener rules.
This can be useful when bulk updating or swapping rule priority.
For more information, see How Amazon VPC Lattice works with IAM in the Amazon VPC Lattice User
Guide.
Request Syntax
PATCH /services/serviceIdentifier/listeners/listenerIdentifier/rules HTTP/1.1
Content-type: application/json
{
"rules": [
{
"action": { ... },
"match": { ... },
"priority": number,
"ruleIdentifier": "string"
}
]
}
listenerIdentifier (p. 4)
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 4)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
rules (p. 4)
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"successful": [
{
"action": { ... },
"arn": "string",
"id": "string",
"isDefault": boolean,
"match": { ... },
"name": "string",
"priority": number
}
],
"unsuccessful": [
{
"failureCode": "string",
"failureMessage": "string",
"ruleIdentifier": "string"
}
]
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
successful (p. 5)
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateAccessLogSubscription
Enables access logs to be sent to Amazon CloudWatch, Amazon S3, and Amazon Kinesis Data Firehose.
The service network owner can use the access logs to audit the services in the network. The service
network owner can only see access logs from clients and services that are associated with their service
network. Access log entries represent traffic originated from VPCs associated with that network. For
more information, see Access logs in the Amazon VPC Lattice User Guide.
Request Syntax
POST /accesslogsubscriptions HTTP/1.1
Content-type: application/json
{
"clientToken": "string",
"destinationArn": "string",
"resourceIdentifier": "string",
"tags": {
"string" : "string"
}
}
Request Body
The request accepts the following data in JSON format.
clientToken (p. 7)
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
destinationArn (p. 7)
The Amazon Resource Name (ARN) of the destination. The supported destination types are
CloudWatch Log groups, Kinesis Data Firehose delivery streams, and Amazon S3 buckets.
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:([^/].*)?$
Required: Yes
resourceIdentifier (p. 7)
Type: String
Pattern: ^((((sn)|(svc))-[0-9a-z]{17})|(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:
([a-z0-9]+([.-][a-z0-9]+)*)?){2}:((servicenetwork/sn)|(service/svc))-[0-9a-
z]{17}))$
Required: Yes
tags (p. 7)
Required: No
Response Syntax
HTTP/1.1 201
Content-type: application/json
{
"arn": "string",
"destinationArn": "string",
"id": "string",
"resourceArn": "string",
"resourceId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 201 response.
arn (p. 8)
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:accesslogsubscription/als-[0-9a-z]{17}$
destinationArn (p. 8)
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:([^/].*)?$
id (p. 8)
Type: String
Pattern: ^als-[0-9a-z]{17}$
resourceArn (p. 8)
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:((servicenetwork/sn)|(service/svc))-[0-9a-z]{17}$
resourceId (p. 8)
Type: String
Pattern: ^((sn)|(svc))-[0-9a-z]{17}$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateListener
Creates a listener for a service. Before you start using your Amazon VPC Lattice service, you must add
one or more listeners. A listener is a process that checks for connection requests to your services. For
more information, see Listeners in the Amazon VPC Lattice User Guide.
Request Syntax
POST /services/serviceIdentifier/listeners HTTP/1.1
Content-type: application/json
{
"clientToken": "string",
"defaultAction": { ... },
"name": "string",
"port": number,
"protocol": "string",
"tags": {
"string" : "string"
}
}
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
defaultAction (p. 11)
The action for the default rule. Each listener has a default rule. Each rule consists of a priority, one
or more actions, and one or more conditions. The default rule is the rule that's used if no other rules
match. Each rule must include exactly one of the following types of actions: forward or fixed-
response, and it must be the last action to be performed.
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: Yes
name (p. 11)
The name of the listener. A listener name must be unique within a service. The valid characters are
a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after
another hyphen.
Type: String
Pattern: ^(?!listener-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: Yes
port (p. 11)
The listener port. You can specify a value from 1 to 65535. For HTTP, the default is 80. For HTTPS,
the default is 443.
Type: Integer
Required: No
protocol (p. 11)
Type: String
Required: Yes
tags (p. 11)
Required: No
Response Syntax
HTTP/1.1 201
Content-type: application/json
{
"arn": "string",
"defaultAction": { ... },
"id": "string",
"name": "string",
"port": number,
"protocol": "string",
"serviceArn": "string",
"serviceId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 201 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}$
defaultAction (p. 12)
Note: This object is a Union. Only one member of this object can be specified or returned.
id (p. 12)
Type: String
Pattern: ^listener-[0-9a-z]{17}$
name (p. 12)
Type: String
Pattern: ^(?!listener-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
port (p. 12)
Type: Integer
Type: String
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
serviceId (p. 12)
Type: String
Pattern: ^svc-[0-9a-z]{17}$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
ThrottlingException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateRule
Creates a listener rule. Each listener has a default rule for checking connection requests, but you can
define additional rules. Each rule consists of a priority, one or more actions, and one or more conditions.
For more information, see Listener rules in the Amazon VPC Lattice User Guide.
Request Syntax
POST /services/serviceIdentifier/listeners/listenerIdentifier/rules HTTP/1.1
Content-type: application/json
{
"action": { ... },
"clientToken": "string",
"match": { ... },
"name": "string",
"priority": number,
"tags": {
"string" : "string"
}
}
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 16)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: Yes
clientToken (p. 16)
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
match (p. 16)
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: Yes
name (p. 16)
The name of the rule. The name must be unique within the listener. The valid characters are a-z, 0-9,
and hyphens (-). You can't use a hyphen as the first or last character, or immediately after another
hyphen.
Type: String
Pattern: ^(?!rule-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: Yes
priority (p. 16)
The priority assigned to the rule. Each rule for a specific listener must have a unique priority. The
lower the priority number the higher the priority.
Type: Integer
Required: Yes
tags (p. 16)
Required: No
Response Syntax
HTTP/1.1 201
Content-type: application/json
{
"action": { ... },
"arn": "string",
"id": "string",
"match": { ... },
"name": "string",
"priority": number
}
Response Elements
If the action is successful, the service sends back an HTTP 201 response.
The rule action. Each rule must include exactly one of the following types of actions: forward or
fixed-response, and it must be the last action to be performed.
Note: This object is a Union. Only one member of this object can be specified or returned.
arn (p. 18)
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-[0-9a-z]{17}$
id (p. 18)
Type: String
Pattern: ^rule-[0-9a-z]{17}$
match (p. 18)
The rule match. The RuleMatch must be an HttpMatch. This means that the rule should be an
exact match on HTTP constraints which are made up of the HTTP method, path, and header.
Note: This object is a Union. Only one member of this object can be specified or returned.
Type: String
Pattern: ^(?!rule-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
priority (p. 18)
The priority assigned to the rule. The lower the priority number the higher the priority.
Type: Integer
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateService
Creates a service. A service is any software application that can run on instances containers, or serverless
functions within an account or virtual private cloud (VPC).
For more information, see Services in the Amazon VPC Lattice User Guide.
Request Syntax
POST /services HTTP/1.1
Content-type: application/json
{
"authType": "string",
"certificateArn": "string",
"clientToken": "string",
"customDomainName": "string",
"name": "string",
"tags": {
"string" : "string"
}
}
Request Body
The request accepts the following data in JSON format.
Type: String
Required: No
certificateArn (p. 21)
Type: String
Pattern: ^(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:certificate/[0-9a-z-]+)?$
Required: No
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
customDomainName (p. 21)
Type: String
Required: No
name (p. 21)
The name of the service. The name must be unique within the account. The valid characters are a-
z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after
another hyphen.
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: Yes
tags (p. 21)
Required: No
Response Syntax
HTTP/1.1 201
Content-type: application/json
{
"arn": "string",
"authType": "string",
"certificateArn": "string",
"customDomainName": "string",
"dnsEntry": {
"domainName": "string",
"hostedZoneId": "string"
},
"id": "string",
"name": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 201 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
authType (p. 22)
Type: String
Type: String
Pattern: ^(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:certificate/[0-9a-z-]+)?$
customDomainName (p. 22)
Type: String
Type: String
Pattern: ^svc-[0-9a-z]{17}$
name (p. 22)
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
status (p. 22)
The status. If the status is CREATE_FAILED, you must delete and recreate the service.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateServiceNetwork
Creates a service network. A service network is a logical boundary for a collection of services. You can
associate services and VPCs with a service network.
For more information, see Service networks in the Amazon VPC Lattice User Guide.
Request Syntax
POST /servicenetworks HTTP/1.1
Content-type: application/json
{
"authType": "string",
"clientToken": "string",
"name": "string",
"tags": {
"string" : "string"
}
}
Request Body
The request accepts the following data in JSON format.
Type: String
Required: No
clientToken (p. 26)
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
The name of the service network. The name must be unique to the account. The valid characters are
a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after
another hyphen.
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: Yes
tags (p. 26)
Required: No
Response Syntax
HTTP/1.1 201
Content-type: application/json
{
"arn": "string",
"authType": "string",
"id": "string",
"name": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 201 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
authType (p. 27)
Type: String
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
name (p. 27)
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
ValidationException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateServiceNetworkServiceAssociation
Associates a service with a service network.
You can't use this operation if the service and service network are already associated or if there is a
disassociation or deletion in progress. If the association fails, you can retry the operation by deleting the
association and recreating it.
You cannot associate a service and service network that are shared with a caller. The caller must own
either the service or the service network.
As a result of this operation, the association is created in the service network account and the association
owner account.
Request Syntax
POST /servicenetworkserviceassociations HTTP/1.1
Content-type: application/json
{
"clientToken": "string",
"serviceIdentifier": "string",
"serviceNetworkIdentifier": "string",
"tags": {
"string" : "string"
}
}
Request Body
The request accepts the following data in JSON format.
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
serviceIdentifier (p. 30)
Type: String
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
serviceNetworkIdentifier (p. 30)
The ID or Amazon Resource Name (ARN) of the service network. You must use the ARN if the
resources specified in the operation are in different accounts.
Type: String
Pattern: ^((sn-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetwork/sn-[0-9a-z]{17}))$
Required: Yes
tags (p. 30)
Required: No
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"createdBy": "string",
"customDomainName": "string",
"dnsEntry": {
"domainName": "string",
"hostedZoneId": "string"
},
"id": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}$
createdBy (p. 31)
Type: String
Pattern: ^[0-9]{12}$
customDomainName (p. 31)
Type: String
Type: String
Pattern: ^((snsa-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}))$
status (p. 31)
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
ConflictException
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateServiceNetworkVpcAssociation
Associates a VPC with a service network. When you associate a VPC with the service network, it enables
all the resources within that VPC to be clients and communicate with other services in the service
network. For more information, see Manage VPC associations in the Amazon VPC Lattice User Guide.
You can't use this operation if there is a disassociation in progress. If the association fails, retry by
deleting the association and recreating it.
As a result of this operation, the association gets created in the service network account and the VPC
owner account.
If you add a security group to the service network and VPC association, the association must continue
to always have at least one security group. You can add or edit security groups at any time. However, to
remove all security groups, you must first delete the association and recreate it without security groups.
Request Syntax
POST /servicenetworkvpcassociations HTTP/1.1
Content-type: application/json
{
"clientToken": "string",
"securityGroupIds": [ "string" ],
"serviceNetworkIdentifier": "string",
"tags": {
"string" : "string"
},
"vpcIdentifier": "string"
}
Request Body
The request accepts the following data in JSON format.
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
securityGroupIds (p. 34)
The IDs of the security groups. Security groups aren't added by default. You can add a security group
to apply network level controls to control which resources in a VPC are allowed to access the service
network and its services. For more information, see Control traffic to resources using security groups
in the Amazon VPC User Guide.
Pattern: ^sg-(([0-9a-z]{8})|([0-9a-z]{17}))$
Required: No
serviceNetworkIdentifier (p. 34)
The ID or Amazon Resource Name (ARN) of the service network. You must use the ARN when the
resources specified in the operation are in different accounts.
Type: String
Pattern: ^((sn-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetwork/sn-[0-9a-z]{17}))$
Required: Yes
tags (p. 34)
Required: No
vpcIdentifier (p. 34)
Type: String
Pattern: ^vpc-(([0-9a-z]{8})|([0-9a-z]{17}))$
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"createdBy": "string",
"id": "string",
"securityGroupIds": [ "string" ],
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}$
createdBy (p. 35)
Type: String
Pattern: ^[0-9]{12}$
id (p. 35)
Type: String
Pattern: ^snva-[0-9a-z]{17}$
securityGroupIds (p. 35)
Pattern: ^sg-(([0-9a-z]{8})|([0-9a-z]{17}))$
status (p. 35)
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
CreateTargetGroup
Creates a target group. A target group is a collection of targets, or compute resources, that run your
application or service. A target group can only be used by a single service.
For more information, see Target groups in the Amazon VPC Lattice User Guide.
Request Syntax
POST /targetgroups HTTP/1.1
Content-type: application/json
{
"clientToken": "string",
"config": {
"healthCheck": {
"enabled": boolean,
"healthCheckIntervalSeconds": number,
"healthCheckTimeoutSeconds": number,
"healthyThresholdCount": number,
"matcher": { ... },
"path": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"unhealthyThresholdCount": number
},
"ipAddressType": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"vpcIdentifier": "string"
},
"name": "string",
"tags": {
"string" : "string"
},
"type": "string"
}
Request Body
The request accepts the following data in JSON format.
A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you
retry a request that completed successfully using the same client token and parameters, the retry
succeeds without performing any actions. If the parameters aren't identical, the retry fails.
Type: String
Pattern: [!-~]+
Required: No
config (p. 38)
The target group configuration. If the target group type is LAMBDA, this parameter doesn't apply.
Required: No
name (p. 38)
The name of the target group. The name must be unique within the account. The valid characters are
a-z, 0-9, and hyphens (-). You can't use a hyphen as the first or last character, or immediately after
another hyphen.
Type: String
Pattern: ^(?!tg-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: Yes
tags (p. 38)
Required: No
type (p. 38)
Type: String
Required: Yes
Response Syntax
HTTP/1.1 201
Content-type: application/json
{
"arn": "string",
"config": {
"healthCheck": {
"enabled": boolean,
"healthCheckIntervalSeconds": number,
"healthCheckTimeoutSeconds": number,
"healthyThresholdCount": number,
"matcher": { ... },
"path": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"unhealthyThresholdCount": number
},
"ipAddressType": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"vpcIdentifier": "string"
},
"id": "string",
"name": "string",
"status": "string",
"type": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 201 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:targetgroup/tg-
[0-9a-z]{17}$
config (p. 39)
The target group configuration. If the target group type is LAMBDA, this parameter doesn't apply.
Type: String
Pattern: ^tg-[0-9a-z]{17}$
name (p. 39)
Type: String
Pattern: ^(?!tg-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
status (p. 39)
The operation's status. You can retry the operation if the status is CREATE_FAILED. However, if you
retry it while the status is CREATE_IN_PROGRESS, there is no change in the status.
Type: String
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteAccessLogSubscription
Deletes the specified access log subscription.
Request Syntax
DELETE /accesslogsubscriptions/accessLogSubscriptionIdentifier HTTP/1.1
Pattern: ^((als-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:accesslogsubscription/als-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 204
Response Elements
If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteAuthPolicy
Deletes the specified auth policy. If an auth is set to AWS_IAM and the auth policy is deleted, all requests
are denied. If you are trying to remove the auth policy completely, you must set the auth_type to NONE.
If auth is enabled on the resource, but no auth policy is set, all requests are denied.
Request Syntax
DELETE /authpolicy/resourceIdentifier HTTP/1.1
Pattern: ^((((sn)|(svc))-[0-9a-z]{17})|(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:
([a-z0-9]+([.-][a-z0-9]+)*)?){2}:((servicenetwork/sn)|(service/svc))-[0-9a-
z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 204
Response Elements
If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
ResourceNotFoundException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteListener
Deletes the specified listener.
Request Syntax
DELETE /services/serviceIdentifier/listeners/listenerIdentifier HTTP/1.1
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 47)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 204
Response Elements
If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteResourcePolicy
Deletes the specified resource policy.
Request Syntax
DELETE /resourcepolicy/resourceArn HTTP/1.1
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:((servicenetwork/sn)|(service/svc))-[0-9a-z]{17}$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 204
Response Elements
If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteRule
Deletes a listener rule. Each listener has a default rule for checking connection requests, but you can
define additional rules. Each rule consists of a priority, one or more actions, and one or more conditions.
You can delete additional listener rules, but you cannot delete the default rule.
For more information, see Listener rules in the Amazon VPC Lattice User Guide.
Request Syntax
DELETE /services/serviceIdentifier/listeners/listenerIdentifier/rules/ruleIdentifier
HTTP/1.1
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
ruleIdentifier (p. 51)
Pattern: ^((rule-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-
[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 51)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 204
Response Elements
If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteService
Deletes a service. A service can't be deleted if it's associated with a service network. If you delete a
service, all resources related to the service, such as the resource policy, auth policy, listeners, listener
rules, and access log subscriptions, are also deleted. For more information, see Delete a service in the
Amazon VPC Lattice User Guide.
Request Syntax
DELETE /services/serviceIdentifier HTTP/1.1
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"id": "string",
"name": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
id (p. 54)
Type: String
Pattern: ^svc-[0-9a-z]{17}$
name (p. 54)
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
status (p. 54)
The status. You can retry the operation if the status is DELETE_FAILED. However, if you retry it
while the status is DELETE_IN_PROGRESS, the status doesn't change.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
ThrottlingException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteServiceNetwork
Deletes a service network. You can only delete the service network if there is no service or VPC
associated with it. If you delete a service network, all resources related to the service network, such as
the resource policy, auth policy, and access log subscriptions, are also deleted. For more information, see
Delete a service network in the Amazon VPC Lattice User Guide.
Request Syntax
DELETE /servicenetworks/serviceNetworkIdentifier HTTP/1.1
Pattern: ^((sn-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetwork/sn-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 204
Response Elements
If the action is successful, the service sends back an HTTP 204 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteServiceNetworkServiceAssociation
Deletes the association between a specified service and the specific service network. This operation fails
if an association is still in progress.
Request Syntax
DELETE /servicenetworkserviceassociations/serviceNetworkServiceAssociationIdentifier
HTTP/1.1
Pattern: ^((snsa-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"id": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}$
id (p. 59)
Type: String
Pattern: ^((snsa-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}))$
status (p. 59)
The operation's status. You can retry the operation if the status is DELETE_FAILED. However, if you
retry it when the status is DELETE_IN_PROGRESS, there is no change in the status.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteServiceNetworkVpcAssociation
Disassociates the VPC from the service network. You can't disassociate the VPC if there is a create or
update association in progress.
Request Syntax
DELETE /servicenetworkvpcassociations/serviceNetworkVpcAssociationIdentifier HTTP/1.1
Pattern: ^((snva-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"id": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}$
id (p. 62)
Type: String
Pattern: ^snva-[0-9a-z]{17}$
status (p. 62)
The status. You can retry the operation if the status is DELETE_FAILED. However, if you retry it
when the status is DELETE_IN_PROGRESS, there is no change in the status.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeleteTargetGroup
Deletes a target group. You can't delete a target group if it is used in a listener rule or if the target group
creation is in progress.
Request Syntax
DELETE /targetgroups/targetGroupIdentifier HTTP/1.1
Pattern: ^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:targetgroup/tg-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"id": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:targetgroup/tg-
[0-9a-z]{17}$
id (p. 65)
Type: String
Pattern: ^tg-[0-9a-z]{17}$
status (p. 65)
The status. You can retry the operation if the status is DELETE_FAILED. However, if you retry it
while the status is DELETE_IN_PROGRESS, the status doesn't change.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
ConflictException
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DeregisterTargets
Deregisters the specified targets from the specified target group.
Request Syntax
POST /targetgroups/targetGroupIdentifier/deregistertargets HTTP/1.1
Content-type: application/json
{
"targets": [
{
"id": "string",
"port": number
}
]
}
Pattern: ^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:targetgroup/tg-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"successful": [
{
"id": "string",
"port": number
}
],
"unsuccessful": [
{
"failureCode": "string",
"failureMessage": "string",
"id": "string",
"port": number
}
]
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
ThrottlingException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetAccessLogSubscription
Retrieves information about the specified access log subscription.
Request Syntax
GET /accesslogsubscriptions/accessLogSubscriptionIdentifier HTTP/1.1
Pattern: ^((als-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:accesslogsubscription/als-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"createdAt": "string",
"destinationArn": "string",
"id": "string",
"lastUpdatedAt": "string",
"resourceArn": "string",
"resourceId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:accesslogsubscription/als-[0-9a-z]{17}$
createdAt (p. 71)
The date and time that the access log subscription was created, specified in ISO-8601 format.
Type: Timestamp
destinationArn (p. 71)
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:([^/].*)?$
id (p. 71)
Type: String
Pattern: ^als-[0-9a-z]{17}$
lastUpdatedAt (p. 71)
The date and time that the access log subscription was last updated, specified in ISO-8601 format.
Type: Timestamp
resourceArn (p. 71)
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:((servicenetwork/sn)|(service/svc))-[0-9a-z]{17}$
resourceId (p. 71)
Type: String
Pattern: ^((sn)|(svc))-[0-9a-z]{17}$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetAuthPolicy
Retrieves information about the auth policy for the specified service or service network.
Request Syntax
GET /authpolicy/resourceIdentifier HTTP/1.1
Pattern: ^((((sn)|(svc))-[0-9a-z]{17})|(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:
([a-z0-9]+([.-][a-z0-9]+)*)?){2}:((servicenetwork/sn)|(service/svc))-[0-9a-
z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"createdAt": "string",
"lastUpdatedAt": "string",
"policy": "string",
"state": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The date and time that the auth policy was created, specified in ISO-8601 format.
Type: Timestamp
lastUpdatedAt (p. 74)
The date and time that the auth policy was last updated, specified in ISO-8601 format.
Type: Timestamp
policy (p. 74)
Type: String
Pattern: ^.*\S.*$
state (p. 74)
The state of the auth policy. The auth policy is only active when the auth type is set to AWS_IAM. If
you provide a policy, then authentication and authorization decisions are made based on this policy
and the client's IAM policy. If the auth type is NONE, then any auth policy that you provide remains
inactive. For more information, see Create a service network in the Amazon VPC Lattice User Guide.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetListener
Retrieves information about the specified listener for the specified service.
Request Syntax
GET /services/serviceIdentifier/listeners/listenerIdentifier HTTP/1.1
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 77)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"createdAt": "string",
"defaultAction": { ... },
"id": "string",
"lastUpdatedAt": "string",
"name": "string",
"port": number,
"protocol": "string",
"serviceArn": "string",
"serviceId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}$
createdAt (p. 77)
The date and time that the listener was created, specified in ISO-8601 format.
Type: Timestamp
defaultAction (p. 77)
Note: This object is a Union. Only one member of this object can be specified or returned.
id (p. 77)
Type: String
Pattern: ^listener-[0-9a-z]{17}$
lastUpdatedAt (p. 77)
The date and time that the listener was last updated, specified in ISO-8601 format.
Type: Timestamp
name (p. 77)
Type: String
Pattern: ^(?!listener-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
port (p. 77)
Type: Integer
Type: String
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
serviceId (p. 77)
Type: String
Pattern: ^svc-[0-9a-z]{17}$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetResourcePolicy
Retrieves information about the resource policy. The resource policy is an IAM policy created on behalf of
the resource owner when they share a resource.
Request Syntax
GET /resourcepolicy/resourceArn HTTP/1.1
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:((servicenetwork/sn)|(service/svc))-[0-9a-z]{17}$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"policy": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
An IAM policy.
Type: String
Pattern: ^.*\S.*$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetRule
Retrieves information about listener rules. You can also retrieve information about the default listener
rule. For more information, see Listener rules in the Amazon VPC Lattice User Guide.
Request Syntax
GET /services/serviceIdentifier/listeners/listenerIdentifier/rules/ruleIdentifier HTTP/1.1
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
ruleIdentifier (p. 83)
Pattern: ^((rule-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-
[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 83)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"action": { ... },
"arn": "string",
"createdAt": "string",
"id": "string",
"isDefault": boolean,
"lastUpdatedAt": "string",
"match": { ... },
"name": "string",
"priority": number
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Note: This object is a Union. Only one member of this object can be specified or returned.
arn (p. 83)
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-[0-9a-z]{17}$
createdAt (p. 83)
The date and time that the listener rule was created, specified in ISO-8601 format.
Type: Timestamp
id (p. 83)
Type: String
Pattern: ^rule-[0-9a-z]{17}$
isDefault (p. 83)
Type: Boolean
lastUpdatedAt (p. 83)
The date and time that the listener rule was last updated, specified in ISO-8601 format.
Type: Timestamp
Note: This object is a Union. Only one member of this object can be specified or returned.
name (p. 83)
Type: String
Pattern: ^(?!rule-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
priority (p. 83)
Type: Integer
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetService
Retrieves information about the specified service.
Request Syntax
GET /services/serviceIdentifier HTTP/1.1
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"authType": "string",
"certificateArn": "string",
"createdAt": "string",
"customDomainName": "string",
"dnsEntry": {
"domainName": "string",
"hostedZoneId": "string"
},
"failureCode": "string",
"failureMessage": "string",
"id": "string",
"lastUpdatedAt": "string",
"name": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
authType (p. 87)
Type: String
Type: String
Pattern: ^(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:certificate/[0-9a-z-]+)?$
createdAt (p. 87)
The date and time that the service was created, specified in ISO-8601 format.
Type: Timestamp
customDomainName (p. 87)
Type: String
Type: String
failureMessage (p. 87)
Type: String
id (p. 87)
Type: String
Pattern: ^svc-[0-9a-z]{17}$
lastUpdatedAt (p. 87)
The date and time that the service was last updated, specified in ISO-8601 format.
Type: Timestamp
name (p. 87)
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
status (p. 87)
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetServiceNetwork
Retrieves information about the specified service network.
Request Syntax
GET /servicenetworks/serviceNetworkIdentifier HTTP/1.1
Pattern: ^((sn-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetwork/sn-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"authType": "string",
"createdAt": "string",
"id": "string",
"lastUpdatedAt": "string",
"name": "string",
"numberOfAssociatedServices": number,
"numberOfAssociatedVPCs": number
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
authType (p. 91)
Type: String
The date and time that the service network was created, specified in ISO-8601 format.
Type: Timestamp
id (p. 91)
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
lastUpdatedAt (p. 91)
The date and time of the last update, specified in ISO-8601 format.
Type: Timestamp
name (p. 91)
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
numberOfAssociatedServices (p. 91)
Type: Long
numberOfAssociatedVPCs (p. 91)
Type: Long
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetServiceNetworkServiceAssociation
Retrieves information about the specified association between a service network and a service.
Request Syntax
GET /servicenetworkserviceassociations/serviceNetworkServiceAssociationIdentifier HTTP/1.1
Pattern: ^((snsa-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"createdAt": "string",
"createdBy": "string",
"customDomainName": "string",
"dnsEntry": {
"domainName": "string",
"hostedZoneId": "string"
},
"failureCode": "string",
"failureMessage": "string",
"id": "string",
"serviceArn": "string",
"serviceId": "string",
"serviceName": "string",
"serviceNetworkArn": "string",
"serviceNetworkId": "string",
"serviceNetworkName": "string",
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}$
createdAt (p. 94)
The date and time that the association was created, specified in ISO-8601 format.
Type: Timestamp
createdBy (p. 94)
Type: String
Pattern: ^[0-9]{12}$
customDomainName (p. 94)
Type: String
Type: String
failureMessage (p. 94)
Type: String
id (p. 94)
Type: String
Pattern: ^((snsa-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}))$
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
serviceId (p. 94)
Type: String
Pattern: ^svc-[0-9a-z]{17}$
serviceName (p. 94)
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
serviceNetworkArn (p. 94)
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
serviceNetworkId (p. 94)
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
serviceNetworkName (p. 94)
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
status (p. 94)
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetServiceNetworkVpcAssociation
Retrieves information about the association between a service network and a VPC.
Request Syntax
GET /servicenetworkvpcassociations/serviceNetworkVpcAssociationIdentifier HTTP/1.1
Pattern: ^((snva-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"createdAt": "string",
"createdBy": "string",
"failureCode": "string",
"failureMessage": "string",
"id": "string",
"lastUpdatedAt": "string",
"securityGroupIds": [ "string" ],
"serviceNetworkArn": "string",
"serviceNetworkId": "string",
"serviceNetworkName": "string",
"status": "string",
"vpcId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}$
createdAt (p. 98)
The date and time that the association was created, specified in ISO-8601 format.
Type: Timestamp
createdBy (p. 98)
Type: String
Pattern: ^[0-9]{12}$
failureCode (p. 98)
Type: String
failureMessage (p. 98)
Type: String
id (p. 98)
The ID of the specified association between the service network and the VPC.
Type: String
Pattern: ^snva-[0-9a-z]{17}$
lastUpdatedAt (p. 98)
The date and time that the association was last updated, specified in ISO-8601 format.
Type: Timestamp
securityGroupIds (p. 98)
Pattern: ^sg-(([0-9a-z]{8})|([0-9a-z]{17}))$
serviceNetworkArn (p. 98)
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
serviceNetworkId (p. 98)
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
serviceNetworkName (p. 98)
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
status (p. 98)
Type: String
Type: String
Pattern: ^vpc-(([0-9a-z]{8})|([0-9a-z]{17}))$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
GetTargetGroup
Retrieves information about the specified target group.
Request Syntax
GET /targetgroups/targetGroupIdentifier HTTP/1.1
Pattern: ^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:targetgroup/tg-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"config": {
"healthCheck": {
"enabled": boolean,
"healthCheckIntervalSeconds": number,
"healthCheckTimeoutSeconds": number,
"healthyThresholdCount": number,
"matcher": { ... },
"path": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"unhealthyThresholdCount": number
},
"ipAddressType": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"vpcIdentifier": "string"
},
"createdAt": "string",
"failureCode": "string",
"failureMessage": "string",
"id": "string",
"lastUpdatedAt": "string",
"name": "string",
"serviceArns": [ "string" ],
"status": "string",
"type": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:targetgroup/tg-
[0-9a-z]{17}$
config (p. 102)
The date and time that the target group was created, specified in ISO-8601 format.
Type: Timestamp
failureCode (p. 102)
Type: String
failureMessage (p. 102)
Type: String
id (p. 102)
Type: String
Pattern: ^tg-[0-9a-z]{17}$
lastUpdatedAt (p. 102)
The date and time that the target group was last updated, specified in ISO-8601 format.
Type: Timestamp
Type: String
Pattern: ^(?!tg-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
serviceArns (p. 102)
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
status (p. 102)
The status.
Type: String
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
InternalServerException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListAccessLogSubscriptions
Lists all access log subscriptions for the specified service network or service.
Request Syntax
GET /accesslogsubscriptions?
maxResults=maxResults&nextToken=nextToken&resourceIdentifier=resourceIdentifier HTTP/1.1
Pattern: ^((((sn)|(svc))-[0-9a-z]{17})|(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:
([a-z0-9]+([.-][a-z0-9]+)*)?){2}:((servicenetwork/sn)|(service/svc))-[0-9a-
z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"destinationArn": "string",
"id": "string",
"lastUpdatedAt": "string",
"resourceArn": "string",
"resourceId": "string"
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
InternalServerException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListListeners
Lists the listeners for the specified service.
Request Syntax
GET /services/serviceIdentifier/listeners?maxResults=maxResults&nextToken=nextToken
HTTP/1.1
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"id": "string",
"lastUpdatedAt": "string",
"name": "string",
"port": number,
"protocol": "string"
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListRules
Lists the rules for the listener.
Request Syntax
GET /services/serviceIdentifier/listeners/listenerIdentifier/rules?
maxResults=maxResults&nextToken=nextToken HTTP/1.1
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
maxResults (p. 112)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"id": "string",
"isDefault": boolean,
"lastUpdatedAt": "string",
"name": "string",
"priority": number
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
ValidationException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListServiceNetworks
Lists the service networks owned by the caller account or shared with the caller account. Also includes
the account ID in the ARN to show which account owns the service network.
Request Syntax
GET /servicenetworks?maxResults=maxResults&nextToken=nextToken HTTP/1.1
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"id": "string",
"lastUpdatedAt": "string",
"name": "string",
"numberOfAssociatedServices": number,
"numberOfAssociatedVPCs": number
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListServiceNetworkServiceAssociations
Lists the associations between the service network and the service. You can filter the list either by service
or service network. You must provide either the service network identifier or the service identifier.
Every association in Amazon VPC Lattice is given a unique Amazon Resource Name (ARN), such as when
a service network is associated with a VPC or when a service is associated with a service network. If
the association is for a resource that is shared with another account, the association includes the local
account ID as the prefix in the ARN for each account the resource is shared with.
Request Syntax
GET /servicenetworkserviceassociations?
maxResults=maxResults&nextToken=nextToken&serviceIdentifier=serviceIdentifier&serviceNetworkIdentifier=
HTTP/1.1
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
serviceNetworkIdentifier (p. 117)
Pattern: ^((sn-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetwork/sn-[0-9a-z]{17}))$
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"createdBy": "string",
"customDomainName": "string",
"dnsEntry": {
"domainName": "string",
"hostedZoneId": "string"
},
"id": "string",
"serviceArn": "string",
"serviceId": "string",
"serviceName": "string",
"serviceNetworkArn": "string",
"serviceNetworkId": "string",
"serviceNetworkName": "string",
"status": "string"
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
ThrottlingException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListServiceNetworkVpcAssociations
Lists the service network and VPC associations. You can filter the list either by VPC or service network.
You must provide either the service network identifier or the VPC identifier.
Request Syntax
GET /servicenetworkvpcassociations?
maxResults=maxResults&nextToken=nextToken&serviceNetworkIdentifier=serviceNetworkIdentifier&vpcIdentifi
HTTP/1.1
Pattern: ^((sn-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetwork/sn-[0-9a-z]{17}))$
vpcIdentifier (p. 120)
Pattern: ^vpc-(([0-9a-z]{8})|([0-9a-z]{17}))$
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"createdBy": "string",
"id": "string",
"lastUpdatedAt": "string",
"serviceNetworkArn": "string",
"serviceNetworkId": "string",
"serviceNetworkName": "string",
"status": "string",
"vpcId": "string"
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListServices
Lists the services owned by the caller account or shared with the caller account.
Request Syntax
GET /services?maxResults=maxResults&nextToken=nextToken HTTP/1.1
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"customDomainName": "string",
"dnsEntry": {
"domainName": "string",
"hostedZoneId": "string"
},
"id": "string",
"lastUpdatedAt": "string",
"name": "string",
"status": "string"
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The services.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListTagsForResource
Lists the tags for the specified resource.
Request Syntax
GET /tags/resourceArn HTTP/1.1
Pattern: ^arn:[a-z0-9][-.a-z0-9]{0,62}:vpc-lattice:([a-z0-9][-.a-z0-9]
{0,62})?:\d{12}?:[^/].{0,1023}$
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"tags": {
"string" : "string"
}
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The tags.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
InternalServerException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListTargetGroups
Lists your target groups. You can narrow your search by using the filters below in your request.
Request Syntax
GET /targetgroups?
maxResults=maxResults&nextToken=nextToken&targetGroupType=targetGroupType&vpcIdentifier=vpcIdentifier
HTTP/1.1
Pattern: ^vpc-(([0-9a-z]{8})|([0-9a-z]{17}))$
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"arn": "string",
"createdAt": "string",
"id": "string",
"ipAddressType": "string",
"lastUpdatedAt": "string",
"name": "string",
"port": number,
"protocol": "string",
"serviceArns": [ "string" ],
"status": "string",
"type": "string",
"vpcIdentifier": "string"
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListTargets
Lists the targets for the target group. By default, all targets are included. You can use this API to check
the health status of targets. You can also filter the results by target.
Request Syntax
POST /targetgroups/targetGroupIdentifier/listtargets?
maxResults=maxResults&nextToken=nextToken HTTP/1.1
Content-type: application/json
{
"targets": [
{
"id": "string",
"port": number
}
]
}
Pattern: ^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:targetgroup/tg-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Required: No
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"items": [
{
"id": "string",
"port": number,
"reasonCode": "string",
"status": "string"
}
],
"nextToken": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
If there are additional results, a pagination token for the next page of results.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
ThrottlingException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
PutAuthPolicy
Creates or updates the auth policy. The policy string in JSON must not contain newlines or blank lines.
Request Syntax
PUT /authpolicy/resourceIdentifier HTTP/1.1
Content-type: application/json
{
"policy": "string"
}
The ID or Amazon Resource Name (ARN) of the service network or service for which the policy is
created.
Pattern: ^((((sn)|(svc))-[0-9a-z]{17})|(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:
([a-z0-9]+([.-][a-z0-9]+)*)?){2}:((servicenetwork/sn)|(service/svc))-[0-9a-
z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
The auth policy. The policy string in JSON must not contain newlines or blank lines.
Type: String
Pattern: ^.*\S.*$
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"policy": "string",
"state": "string"
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
The auth policy. The policy string in JSON must not contain newlines or blank lines.
Type: String
Pattern: ^.*\S.*$
state (p. 133)
The state of the auth policy. The auth policy is only active when the auth type is set to AWS_IAM. If
you provide a policy, then authentication and authorization decisions are made based on this policy
and the client's IAM policy. If the Auth type is NONE, then, any auth policy that you provide remains
inactive. For more information, see Create a service network in the Amazon VPC Lattice User Guide.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
PutResourcePolicy
Attaches a resource-based permission policy to a service or service network. The policy must contain
the same actions and condition statements as the AWS Resource Access Manager permission for sharing
services and service networks.
Request Syntax
PUT /resourcepolicy/resourceArn HTTP/1.1
Content-type: application/json
{
"policy": "string"
}
The ID or Amazon Resource Name (ARN) of the service network or service for which the policy is
created.
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:((servicenetwork/sn)|(service/svc))-[0-9a-z]{17}$
Required: Yes
Request Body
The request accepts the following data in JSON format.
An IAM policy. The policy string in JSON must not contain newlines or blank lines.
Type: String
Pattern: ^.*\S.*$
Required: Yes
Response Syntax
HTTP/1.1 200
Response Elements
If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
RegisterTargets
Registers the targets with the target group. If it's a Lambda target, you can only have one target in a
target group.
Request Syntax
POST /targetgroups/targetGroupIdentifier/registertargets HTTP/1.1
Content-type: application/json
{
"targets": [
{
"id": "string",
"port": number
}
]
}
Pattern: ^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:targetgroup/tg-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
The targets.
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
"successful": [
{
"id": "string",
"port": number
}
],
"unsuccessful": [
{
"failureCode": "string",
"failureMessage": "string",
"id": "string",
"port": number
}
]
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
ServiceQuotaExceededException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
TagResource
Adds the specified tags to the specified resource.
Request Syntax
POST /tags/resourceArn HTTP/1.1
Content-type: application/json
{
"tags": {
"string" : "string"
}
}
Pattern: ^arn:[a-z0-9][-.a-z0-9]{0,62}:vpc-lattice:([a-z0-9][-.a-z0-9]
{0,62})?:\d{12}?:[^/].{0,1023}$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Required: Yes
Response Syntax
HTTP/1.1 200
Response Elements
If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UntagResource
Removes the specified tags from the specified resource.
Request Syntax
DELETE /tags/resourceArn?tagKeys=tagKeys HTTP/1.1
Pattern: ^arn:[a-z0-9][-.a-z0-9]{0,62}:vpc-lattice:([a-z0-9][-.a-z0-9]
{0,62})?:\d{12}?:[^/].{0,1023}$
Required: Yes
tagKeys (p. 143)
Required: Yes
Request Body
The request does not have a request body.
Response Syntax
HTTP/1.1 200
Response Elements
If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
InternalServerException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UpdateAccessLogSubscription
Updates the specified access log subscription.
Request Syntax
PATCH /accesslogsubscriptions/accessLogSubscriptionIdentifier HTTP/1.1
Content-type: application/json
{
"destinationArn": "string"
}
Pattern: ^((als-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:accesslogsubscription/als-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:([^/].*)?$
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"destinationArn": "string",
"id": "string",
"resourceArn": "string",
"resourceId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:accesslogsubscription/als-[0-9a-z]{17}$
destinationArn (p. 145)
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:([^/].*)?$
id (p. 145)
Type: String
Pattern: ^als-[0-9a-z]{17}$
resourceArn (p. 145)
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:((servicenetwork/sn)|(service/svc))-[0-9a-z]{17}$
resourceId (p. 145)
Type: String
Pattern: ^((sn)|(svc))-[0-9a-z]{17}$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UpdateListener
Updates the specified listener for the specified service.
Request Syntax
PATCH /services/serviceIdentifier/listeners/listenerIdentifier HTTP/1.1
Content-type: application/json
{
"defaultAction": { ... }
}
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 148)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"defaultAction": { ... },
"id": "string",
"name": "string",
"port": number,
"protocol": "string",
"serviceArn": "string",
"serviceId": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}$
defaultAction (p. 148)
Note: This object is a Union. Only one member of this object can be specified or returned.
id (p. 148)
Type: String
Pattern: ^listener-[0-9a-z]{17}$
name (p. 148)
Type: String
Pattern: ^(?!listener-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
port (p. 148)
Type: Integer
Type: String
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
serviceId (p. 148)
Type: String
Pattern: ^svc-[0-9a-z]{17}$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
ValidationException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UpdateRule
Updates a rule for the listener. You can't modify a default listener rule. To modify a default listener rule,
use UpdateListener.
Request Syntax
PATCH /services/serviceIdentifier/listeners/listenerIdentifier/rules/ruleIdentifier
HTTP/1.1
Content-type: application/json
{
"action": { ... },
"match": { ... },
"priority": number
}
Pattern: ^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-
Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$
Required: Yes
ruleIdentifier (p. 152)
Pattern: ^((rule-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-
[0-9a-z]{17}$))$
Required: Yes
serviceIdentifier (p. 152)
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: No
match (p. 152)
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: No
priority (p. 152)
The rule priority. A listener can't have multiple rules with the same priority.
Type: Integer
Required: No
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"action": { ... },
"arn": "string",
"id": "string",
"isDefault": boolean,
"match": { ... },
"name": "string",
"priority": number
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Note: This object is a Union. Only one member of this object can be specified or returned.
arn (p. 153)
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-[0-9a-z]{17}$
id (p. 153)
Type: String
Pattern: ^rule-[0-9a-z]{17}$
isDefault (p. 153)
Type: Boolean
match (p. 153)
Note: This object is a Union. Only one member of this object can be specified or returned.
name (p. 153)
Type: String
Pattern: ^(?!rule-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
priority (p. 153)
Type: Integer
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
InternalServerException
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UpdateService
Updates the specified service.
Request Syntax
PATCH /services/serviceIdentifier HTTP/1.1
Content-type: application/json
{
"authType": "string",
"certificateArn": "string"
}
Pattern: ^((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Type: String
Required: No
certificateArn (p. 156)
Type: String
Pattern: ^(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:certificate/[0-9a-z-]+)?$
Required: No
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"authType": "string",
"certificateArn": "string",
"customDomainName": "string",
"id": "string",
"name": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
authType (p. 157)
Type: String
Type: String
Pattern: ^(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:certificate/[0-9a-z-]+)?$
customDomainName (p. 157)
Type: String
id (p. 157)
Type: String
Pattern: ^svc-[0-9a-z]{17}$
name (p. 157)
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UpdateServiceNetwork
Updates the specified service network.
Request Syntax
PATCH /servicenetworks/serviceNetworkIdentifier HTTP/1.1
Content-type: application/json
{
"authType": "string"
}
Pattern: ^((sn-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetwork/sn-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Type: String
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"authType": "string",
"id": "string",
"name": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
authType (p. 160)
Type: String
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
name (p. 160)
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UpdateServiceNetworkVpcAssociation
Updates the service network and VPC association. If you add a security group to the service network and
VPC association, the association must continue to always have at least one security group. You can add
or edit security groups at any time. However, to remove all security groups, you must first delete the
association and recreate it without security groups.
Request Syntax
PATCH /servicenetworkvpcassociations/serviceNetworkVpcAssociationIdentifier HTTP/1.1
Content-type: application/json
{
"securityGroupIds": [ "string" ]
}
Pattern: ^((snva-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Pattern: ^sg-(([0-9a-z]{8})|([0-9a-z]{17}))$
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"createdBy": "string",
"id": "string",
"securityGroupIds": [ "string" ],
"status": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}$
createdBy (p. 163)
Type: String
Pattern: ^[0-9]{12}$
id (p. 163)
Type: String
Pattern: ^snva-[0-9a-z]{17}$
securityGroupIds (p. 163)
Pattern: ^sg-(([0-9a-z]{8})|([0-9a-z]{17}))$
status (p. 163)
The status. You can retry the operation if the status is DELETE_FAILED. However, if you retry it
while the status is DELETE_IN_PROGRESS, there is no change in the status.
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
AccessDeniedException
The user does not have sufficient access to perform this action.
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
UpdateTargetGroup
Updates the specified target group.
Request Syntax
PATCH /targetgroups/targetGroupIdentifier HTTP/1.1
Content-type: application/json
{
"healthCheck": {
"enabled": boolean,
"healthCheckIntervalSeconds": number,
"healthCheckTimeoutSeconds": number,
"healthyThresholdCount": number,
"matcher": { ... },
"path": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"unhealthyThresholdCount": number
}
}
Pattern: ^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:targetgroup/tg-[0-9a-z]{17}))$
Required: Yes
Request Body
The request accepts the following data in JSON format.
Required: Yes
Response Syntax
HTTP/1.1 200
Content-type: application/json
{
"arn": "string",
"config": {
"healthCheck": {
"enabled": boolean,
"healthCheckIntervalSeconds": number,
"healthCheckTimeoutSeconds": number,
"healthyThresholdCount": number,
"matcher": { ... },
"path": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"unhealthyThresholdCount": number
},
"ipAddressType": "string",
"port": number,
"protocol": "string",
"protocolVersion": "string",
"vpcIdentifier": "string"
},
"id": "string",
"name": "string",
"status": "string",
"type": "string"
}
Response Elements
If the action is successful, the service sends back an HTTP 200 response.
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:targetgroup/tg-
[0-9a-z]{17}$
config (p. 166)
Type: String
Pattern: ^tg-[0-9a-z]{17}$
name (p. 166)
Type: String
Pattern: ^(?!tg-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
status (p. 166)
The status.
Type: String
Type: String
Errors
For information about the errors that are common to all actions, see Common Errors (p. 219).
ConflictException
The request conflicts with the current state of the resource. Updating or deleting a resource can
cause an inconsistent state.
The input does not satisfy the constraints specified by an AWS service.
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
Data Types
The Amazon VPC Lattice API contains several data types that various actions use. This section describes
each data type in detail.
Note
The order of each element in a data type structure is not guaranteed. Applications should not
assume a particular order.
AccessLogSubscriptionSummary
Summary information about an access log subscription.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:accesslogsubscription/als-[0-9a-z]{17}$
Required: Yes
createdAt
The date and time that the access log subscription was created, specified in ISO-8601 format.
Type: Timestamp
Required: Yes
destinationArn
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:([^/].*)?$
Required: Yes
id
Type: String
Pattern: ^als-[0-9a-z]{17}$
Required: Yes
lastUpdatedAt
The date and time that the access log subscription was last updated, specified in ISO-8601 format.
Type: Timestamp
Required: Yes
resourceArn
Type: String
Pattern: ^arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?)
{2}:((servicenetwork/sn)|(service/svc))-[0-9a-z]{17}$
Required: Yes
resourceId
Type: String
Pattern: ^((sn)|(svc))-[0-9a-z]{17}$
Required: Yes
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
DnsEntry
Describes the DNS information of a service.
Contents
domainName
Type: String
Required: No
hostedZoneId
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
FixedResponseAction
Information about an action that returns a custom HTTP response.
Contents
statusCode
Type: Integer
Required: Yes
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ForwardAction
Describes a forward action. You can use forward actions to route requests to one or more target groups.
Contents
targetGroups
The target groups. Traffic matching the rule is forwarded to the specified target groups. With
forward actions, you can assign a weight that controls the prioritization and selection of each target
group. This means that requests are distributed to individual target groups based on their weights.
For example, if two target groups have the same weight, each target group receives half of the
traffic.
The default value is 1. This means that if only one target group is provided, there is no need to set
the weight; 100% of the traffic goes to that target group.
Required: Yes
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
HeaderMatch
Describes the constraints for a header match. Matches incoming requests with rule based on request
header value before applying rule action.
Contents
match
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: Yes
name
Type: String
Required: Yes
caseSensitive
Type: Boolean
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
HeaderMatchType
Describes a header match type. Only one can be provided.
Contents
Important
This data type is a UNION, so only one of the following members can be specified when used or
returned.
contains
Type: String
Required: No
exact
Type: String
Required: No
prefix
Specifies a prefix type match. Matches the value with the prefix.
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
HealthCheckConfig
The health check configuration of a target group. Health check configurations aren't used for target
groups of type LAMBDA or ALB.
Contents
enabled
Type: Boolean
Required: No
healthCheckIntervalSeconds
The approximate amount of time, in seconds, between health checks of an individual target. The
range is 5–300 seconds. The default is 30 seconds.
Type: Integer
Required: No
healthCheckTimeoutSeconds
The amount of time, in seconds, to wait before reporting a target as unhealthy. The range is 1–120
seconds. The default is 5 seconds.
Type: Integer
Required: No
healthyThresholdCount
The number of consecutive successful health checks required before considering an unhealthy target
healthy. The range is 2–10. The default is 5.
Type: Integer
Required: No
matcher
The codes to use when checking for a successful response from a target. These are called Success
codes in the console.
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: No
path
The destination for health checks on the targets. If the protocol version is HTTP/1.1 or HTTP/2,
specify a valid URI (for example, /path?query). The default path is /. Health checks are not
supported if the protocol version is gRPC, however, you can choose HTTP/1.1 or HTTP/2 and
specify a valid URI.
Type: String
Pattern: (^/[a-zA-Z0-9@:%_+.~#?&/=-]*$|(^$))
Required: No
port
The port used when performing health checks on targets. The default setting is the port that a
target receives traffic on.
Type: Integer
Required: No
protocol
The protocol used when performing health checks on targets. The possible protocols are HTTP and
HTTPS. The default is HTTP.
Type: String
Required: No
protocolVersion
The protocol version used when performing health checks on targets. The possible protocol versions
are HTTP1 and HTTP2.
Type: String
Required: No
unhealthyThresholdCount
The number of consecutive failed health checks required before considering a target unhealthy. The
range is 2–10. The default is 2.
Type: Integer
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
HttpMatch
Describes criteria that can be applied to incoming requests.
Contents
headerMatches
The header matches. Matches incoming requests with rule based on request header value before
applying rule action.
Required: No
method
Type: String
Required: No
pathMatch
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ListenerSummary
Summary information about a listener.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}$
Required: No
createdAt
The date and time that the listener was created, specified in ISO-8601 format.
Type: Timestamp
Required: No
id
Type: String
Pattern: ^listener-[0-9a-z]{17}$
Required: No
lastUpdatedAt
The date and time that the listener was last updated, specified in ISO-8601 format.
Type: Timestamp
Required: No
name
Type: String
Pattern: ^(?!listener-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
port
Type: Integer
Required: No
protocol
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
Matcher
The codes to use when checking for a successful response from a target for health checks.
Contents
Important
This data type is a UNION, so only one of the following members can be specified when used or
returned.
httpCode
The HTTP code to use when checking for a successful response from a target.
Type: String
Pattern: (^[0-9-,]+$|(^$))
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
PathMatch
Describes the conditions that can be applied when matching a path for incoming requests.
Contents
match
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: Yes
caseSensitive
Type: Boolean
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
PathMatchType
Describes a path match type. Each rule can include only one of the following types of paths.
Contents
Important
This data type is a UNION, so only one of the following members can be specified when used or
returned.
exact
Type: String
Pattern: ^/[a-zA-Z0-9@:%_+.~#?&/=-]*$
Required: No
prefix
Type: String
Pattern: ^/[a-zA-Z0-9@:%_+.~#?&/=-]*$
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
RuleAction
Describes the action for a rule. Each rule must include exactly one of the following types of actions:
forward or fixed-response, and it must be the last action to be performed.
Contents
Important
This data type is a UNION, so only one of the following members can be specified when used or
returned.
fixedResponse
Required: No
forward
The forward action. Traffic that matches the rule is forwarded to the specified target groups.
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
RuleMatch
Describes a rule match.
Contents
Important
This data type is a UNION, so only one of the following members can be specified when used or
returned.
httpMatch
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
RuleSummary
Summary information about the listener rule.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-[0-9a-z]{17}$
Required: No
createdAt
The date and time that the listener rule was created, specified in ISO-8601 format.
Type: Timestamp
Required: No
id
Type: String
Pattern: ^rule-[0-9a-z]{17}$
Required: No
isDefault
Indicates whether this is the default rule. Listener rules are created when you create a listener. Each
listener has a default rule for checking connection requests.
Type: Boolean
Required: No
lastUpdatedAt
The date and time that the listener rule was last updated, specified in ISO-8601 format.
Type: Timestamp
Required: No
name
Type: String
Pattern: ^(?!rule-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
priority
Type: Integer
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
RuleUpdate
Represents an object when updating a rule.
Contents
ruleIdentifier
Type: String
Pattern: ^((rule-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-
[0-9a-z]{17}$))$
Required: Yes
action
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: No
match
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: No
priority
The rule priority. A listener can't have multiple rules with the same priority.
Type: Integer
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
RuleUpdateFailure
Describes a rule update that failed.
Contents
failureCode
Type: String
Required: No
failureMessage
Type: String
Required: No
ruleIdentifier
Type: String
Pattern: ^((rule-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-
[0-9a-z]{17}$))$
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
RuleUpdateSuccess
Describes a successful rule update.
Contents
action
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: No
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-[0-9a-z]{17}$
Required: No
id
Type: String
Pattern: ^rule-[0-9a-z]{17}$
Required: No
isDefault
Type: Boolean
Required: No
match
Note: This object is a Union. Only one member of this object can be specified or returned.
Required: No
name
Type: String
Pattern: ^(?!rule-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
priority
Type: Integer
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ServiceNetworkServiceAssociationSummary
Summary information about the association between a service network and a service.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}$
Required: No
createdAt
The date and time that the association was created, specified in ISO-8601 format.
Type: Timestamp
Required: No
createdBy
Type: String
Pattern: ^[0-9]{12}$
Required: No
customDomainName
Type: String
Required: No
dnsEntry
Required: No
id
Type: String
Pattern: ^((snsa-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkserviceassociation/snsa-[0-9a-z]{17}))$
Required: No
serviceArn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
Required: No
serviceId
Type: String
Pattern: ^svc-[0-9a-z]{17}$
Required: No
serviceName
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
serviceNetworkArn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
Required: No
serviceNetworkId
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
Required: No
serviceNetworkName
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
status
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ServiceNetworkSummary
Summary information about a service network.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
Required: No
createdAt
The date and time that the service network was created, specified in ISO-8601 format.
Type: Timestamp
Required: No
id
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
Required: No
lastUpdatedAt
The date and time that the service network was last updated, specified in ISO-8601 format.
Type: Timestamp
Required: No
name
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
numberOfAssociatedServices
Type: Long
Required: No
numberOfAssociatedVPCs
Type: Long
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ServiceNetworkVpcAssociationSummary
Summary information about an association between a service network and a VPC.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}$
Required: No
createdAt
The date and time that the association was created, specified in ISO-8601 format.
Type: Timestamp
Required: No
createdBy
Type: String
Pattern: ^[0-9]{12}$
Required: No
id
Type: String
Pattern: ^snva-[0-9a-z]{17}$
Required: No
lastUpdatedAt
The date and time that the association was last updated, specified in ISO-8601 format.
Type: Timestamp
Required: No
serviceNetworkArn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetwork/sn-
[0-9a-z]{17}$
Required: No
serviceNetworkId
Type: String
Pattern: ^servicenetwork-[0-9a-z]{17}$
Required: No
serviceNetworkName
Type: String
Pattern: ^(?!servicenetwork-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
status
The status.
Type: String
Required: No
vpcId
Type: String
Pattern: ^vpc-(([0-9a-z]{8})|([0-9a-z]{17}))$
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ServiceSummary
Summary information about a service.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
Required: No
createdAt
The date and time that the service was created, specified in ISO-8601 format.
Type: Timestamp
Required: No
customDomainName
Type: String
Required: No
dnsEntry
Required: No
id
Type: String
Pattern: ^svc-[0-9a-z]{17}$
Required: No
lastUpdatedAt
The date and time that the service was last updated. The format is ISO-8601.
Type: Timestamp
Required: No
name
Type: String
Pattern: ^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
status
The status.
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
Target
Describes a target.
Contents
id
The ID of the target. If the target group type is INSTANCE, this is an instance ID. If the target group
type is IP, this is an IP address. If the target group type is LAMBDA, this is the ARN of a Lambda
function. If the target group type is ALB, this is the ARN of an Application Load Balancer.
Type: String
Required: Yes
port
The port on which the target is listening. For HTTP, the default is 80. For HTTPS, the default is 443.
Type: Integer
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
TargetFailure
Describes a target failure.
Contents
failureCode
Type: String
Required: No
failureMessage
Type: String
Required: No
id
The ID of the target. If the target group type is INSTANCE, this is an instance ID. If the target group
type is IP, this is an IP address. If the target group type is LAMBDA, this is the ARN of a Lambda
function. If the target group type is ALB, this is the ARN of an Application Load Balancer.
Type: String
Required: No
port
The port on which the target is listening. This parameter doesn't apply if the target is a Lambda
function.
Type: Integer
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
TargetGroupConfig
Describes the configuration of a target group. Lambda functions don't support target group
configuration.
Contents
port
The port on which the targets are listening. For HTTP, the default is 80. For HTTPS, the default is
443.
Type: Integer
Required: Yes
protocol
The protocol to use for routing traffic to the targets. Default is the protocol of a target group.
Type: String
Required: Yes
vpcIdentifier
Type: String
Pattern: ^vpc-(([0-9a-z]{8})|([0-9a-z]{17}))$
Required: Yes
healthCheck
Required: No
ipAddressType
The type of IP address used for the target group. The possible values are ipv4 and ipv6. This is an
optional parameter. If not specified, the default is ipv4.
Type: String
Required: No
protocolVersion
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
TargetGroupSummary
Summary information about a target group.
Contents
arn
Type: String
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:targetgroup/tg-
[0-9a-z]{17}$
Required: No
createdAt
The date and time that the target group was created, specified in ISO-8601 format.
Type: Timestamp
Required: No
id
Type: String
Pattern: ^tg-[0-9a-z]{17}$
Required: No
ipAddressType
The type of IP address used for the target group. The possible values are ipv4 and ipv6. This is an
optional parameter. If not specified, the default is ipv4.
Type: String
Required: No
lastUpdatedAt
The date and time that the target group was last updated, specified in ISO-8601 format.
Type: Timestamp
Required: No
name
Type: String
Pattern: ^(?!tg-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$
Required: No
port
Type: Integer
Required: No
protocol
Type: String
Required: No
serviceArns
Pattern: ^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-
z]{17}$
Required: No
status
The status.
Type: String
Required: No
type
Type: String
Required: No
vpcIdentifier
Type: String
Pattern: ^vpc-(([0-9a-z]{8})|([0-9a-z]{17}))$
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
TargetSummary
Summary information about a target.
Contents
id
The ID of the target. If the target group type is INSTANCE, this is an instance ID. If the target group
type is IP, this is an IP address. If the target group type is LAMBDA, this is the ARN of a Lambda
function. If the target type is ALB, this is the ARN of an Application Load Balancer.
Type: String
Required: No
port
Type: Integer
Required: No
reasonCode
Type: String
Required: No
status
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
ValidationExceptionField
Describes a validation failure.
Contents
message
Type: String
Required: Yes
name
Type: String
Required: Yes
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
WeightedTargetGroup
Describes the weight of a target group.
Contents
targetGroupIdentifier
Type: String
Pattern: ^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:
\d{12}:targetgroup/tg-[0-9a-z]{17}))$
Required: Yes
weight
Only required if you specify multiple target groups for a forward action. The "weight" determines
how requests are distributed to the target group. For example, if you specify two target groups, each
with a weight of 10, each target group receives half the requests. If you specify two target groups,
one with a weight of 10 and the other with a weight of 20, the target group with a weight of 20
receives twice as many requests as the other target group. If there's only one target group specified,
then the default value is 100.
Type: Integer
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
Common Parameters
The following list contains the parameters that all actions use for signing Signature Version 4 requests
with a query string. Any action-specific parameters are listed in the topic for that action. For more
information about Signature Version 4, see Signing AWS API requests in the IAM User Guide.
Action
Type: string
Required: Yes
Version
The API version that the request is written for, expressed in the format YYYY-MM-DD.
Type: string
Required: Yes
X-Amz-Algorithm
The hash algorithm that you used to create the request signature.
Condition: Specify this parameter when you include authentication information in a query string
instead of in the HTTP authorization header.
Type: string
Required: Conditional
X-Amz-Credential
The credential scope value, which is a string that includes your access key, the date, the region you
are targeting, the service you are requesting, and a termination string ("aws4_request"). The value is
expressed in the following format: access_key/YYYYMMDD/region/service/aws4_request.
For more information, see Create a signed AWS API request in the IAM User Guide.
Condition: Specify this parameter when you include authentication information in a query string
instead of in the HTTP authorization header.
Type: string
Required: Conditional
X-Amz-Date
The date that is used to create the signature. The format must be ISO 8601 basic format
(YYYYMMDD'T'HHMMSS'Z'). For example, the following date time is a valid X-Amz-Date value:
20120325T120000Z.
Condition: X-Amz-Date is optional for all requests; it can be used to override the date used for
signing requests. If the Date header is specified in the ISO 8601 basic format, X-Amz-Date is not
required. When X-Amz-Date is used, it always overrides the value of the Date header. For more
information, see Elements of an AWS API request signature in the IAM User Guide.
Type: string
Required: Conditional
X-Amz-Security-Token
The temporary security token that was obtained through a call to AWS Security Token Service (AWS
STS). For a list of services that support temporary security credentials from AWS STS, see AWS
services that work with IAM in the IAM User Guide.
Condition: If you're using temporary security credentials from AWS STS, you must include the
security token.
Type: string
Required: Conditional
X-Amz-Signature
Specifies the hex-encoded signature that was calculated from the string to sign and the derived
signing key.
Condition: Specify this parameter when you include authentication information in a query string
instead of in the HTTP authorization header.
Type: string
Required: Conditional
X-Amz-SignedHeaders
Specifies all the HTTP headers that were included as part of the canonical request. For more
information about specifying signed headers, see Create a signed AWS API request in the IAM User
Guide.
Condition: Specify this parameter when you include authentication information in a query string
instead of in the HTTP authorization header.
Type: string
Required: Conditional
Common Errors
This section lists the errors common to the API actions of all AWS services. For errors specific to an API
action for this service, see the topic for that API action.
AccessDeniedException
The request processing has failed because of an unknown error, exception or failure.
Problems with the request at the HTTP level, e.g. we can't decompress the body according to the
decompression algorithm specified by the content-encoding.
Convenient exception that can be used when a request is aborted before a reply is sent back (e.g.
client closed connection).
Problems with the request at the HTTP level. The request entity is too large.
RequestExpired
The request reached the service more than 15 minutes after the date stamp on the request or more
than 15 minutes after the request expiration date (such as for pre-signed URLs), or the date stamp
on the request is more than 15 minutes in the future.
Problems with the request at the HTTP level. Reading the Request timed out.
The X.509 certificate or AWS access key ID provided does not exist in our records.
The action or operation requested is invalid. Verify that the action is typed correctly.