2026/08/19 - Amazon VPC Lattice - 1 updated api methods
Changes Amazon VPC Lattice now supports modification of private DNS options on Service Network VPC Associations
{'dnsOptions': {'privateDnsPreference': 'VERIFIED_DOMAINS_ONLY | ALL_DOMAINS | '
'VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS '
'| SPECIFIED_DOMAINS_ONLY',
'privateDnsSpecifiedDomains': ['string']},
'privateDnsEnabled': 'boolean'}
Updates the service network and VPC association. If you add a security group to the service network and VPC association, the association must continue to have at least one security group. You can add or edit security groups at any time. However, to remove all security groups, you must first delete the association and then recreate it without security groups.
See also: AWS API Documentation
Request Syntax
client.update_service_network_vpc_association(
serviceNetworkVpcAssociationIdentifier='string',
securityGroupIds=[
'string',
],
privateDnsEnabled=True|False,
dnsOptions={
'privateDnsPreference': 'VERIFIED_DOMAINS_ONLY'|'ALL_DOMAINS'|'VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS'|'SPECIFIED_DOMAINS_ONLY',
'privateDnsSpecifiedDomains': [
'string',
]
}
)
string
[REQUIRED]
The ID or ARN of the association.
list
The IDs of the security groups.
(string) --
boolean
Indicates if private DNS is enabled for the VPC association.
dict
DNS options for the service network VPC association.
privateDnsPreference (string) --
The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
ALL_DOMAINS - VPC Lattice provisions private hosted zones for all custom domain names.
VERIFIED_DOMAINS_ONLY - VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS - VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
SPECIFIED_DOMAINS_ONLY - VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
privateDnsSpecifiedDomains (list) --
Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS or SPECIFIED_DOMAINS_ONLY.
(string) --
dict
Response Syntax
{
'id': 'string',
'arn': 'string',
'status': 'CREATE_IN_PROGRESS'|'ACTIVE'|'UPDATE_IN_PROGRESS'|'DELETE_IN_PROGRESS'|'CREATE_FAILED'|'DELETE_FAILED'|'UPDATE_FAILED',
'createdBy': 'string',
'securityGroupIds': [
'string',
],
'privateDnsEnabled': True|False,
'dnsOptions': {
'privateDnsPreference': 'VERIFIED_DOMAINS_ONLY'|'ALL_DOMAINS'|'VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS'|'SPECIFIED_DOMAINS_ONLY',
'privateDnsSpecifiedDomains': [
'string',
]
}
}
Response Structure
(dict) --
id (string) --
The ID of the association.
arn (string) --
The Amazon Resource Name (ARN) of the association.
status (string) --
The status. You can retry the operation if the status is DELETE_FAILED. However, if you retry it while the status is DELETE_IN_PROGRESS, there is no change in the status.
createdBy (string) --
The account that created the association.
securityGroupIds (list) --
The IDs of the security groups.
(string) --
privateDnsEnabled (boolean) --
Indicates if private DNS is enabled for the VPC association.
dnsOptions (dict) --
DNS options for the service network VPC association.
privateDnsPreference (string) --
The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
ALL_DOMAINS - VPC Lattice provisions private hosted zones for all custom domain names.
VERIFIED_DOMAINS_ONLY - VPC Lattice provisions a private hosted zone only if custom domain name has been verified by the provider.
VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS - VPC Lattice provisions private hosted zones for all verified custom domain names and other domain names that the resource consumer specifies. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
SPECIFIED_DOMAINS_ONLY - VPC Lattice provisions a private hosted zone for domain names specified by the resource consumer. The resource consumer specifies the domain names in the privateDnsSpecifiedDomains parameter.
privateDnsSpecifiedDomains (list) --
Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS or SPECIFIED_DOMAINS_ONLY.
(string) --