Amazon EC2

Amazon EC2 Ec2 Vpc API

The Ec2 Vpc API from Amazon EC2 — 3 operation(s) for ec2 vpc.

GitHub OpenAPI
Business capability
IT Infrastructure Management BC-600.50

Operations 3

POST /?Action=CreateVpc Create Vpc #
POST /?Action=DeleteVpc Delete Vpc #
POST /?Action=DescribeVpcs Describe Vpcs #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/amazon-ec2/openapi/amazon-ec2-vpc-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/amazon-ec2:amazon-ec2-vpc-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-ec2-vpc-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Amazon Elastic Compute Cloud Vpc API
  version: '2016-11-15'
  description: Generated from AWS's published Smithy model for Amazon Elastic Compute Cloud. 3 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://ec2.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Vpc
paths:
  /?Action=CreateVpc:
    post:
      operationId: CreateVpc
      summary: Create Vpc
      description: Creates a VPC with the specified CIDR blocks. A VPC must have an associated IPv4 CIDR block. You can choose an IPv4 CIDR block or an IPAM-allocated IPv4 CIDR block. You can optionally associate an IPv6 CIDR block with a VPC. You can choose an IPv6 CIDR block, an Amazon-provided IPv6 CIDR block, an IPAM-allocated IPv6 CIDR block, or an IPv6 CIDR block that you brought to Amazon Web Services. For more information, see IP addressing for your VPCs and subnets in the Amazon VPC User Guide. By default, each instance that you launch in the VPC has the default DHCP options, which include only a default DNS server that we provide (AmazonProvidedDNS). For more information, see DHCP option sets in the Amazon VPC User Guide. You can specify DNS options and tenancy for a VPC when you create it. You can't change the tenancy of a VPC after you create it. For more information, see VPC configuration options in the Amazon VPC User Guide.
      responses:
        '200':
          description: Success
          content:
            text/xml:
              schema:
                $ref: '#/components/schemas/CreateVpcResult'
              example:
                Vpc:
                  InstanceTenancy: default
                  State: pending
                  VpcId: vpc-a01106c2
                  CidrBlock: 10.0.0.0/16
                  DhcpOptionsId: dopt-7a8b9c2d
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              allOf:
              - type: object
                required:
                - Action
                - Version
                properties:
                  Action:
                    type: string
                    const: CreateVpc
                  Version:
                    type: string
                    const: '2016-11-15'
              - $ref: '#/components/schemas/CreateVpcRequest'
            example:
              CidrBlock: 10.0.0.0/16
      tags:
      - Vpc
  /?Action=DeleteVpc:
    post:
      operationId: DeleteVpc
      summary: Delete Vpc
      description: Deletes the specified VPC. You must detach or delete all gateways and resources that are associated with the VPC before you can delete it. For example, you must terminate all instances running in the VPC, delete all security groups associated with the VPC (except the default one), delete all route tables associated with the VPC (except the default one), and so on. When you delete the VPC, it deletes the default security group, network ACL, and route table for the VPC. If you created a flow log for the VPC that you are deleting, note that flow logs for deleted VPCs are eventually automatically removed.
      responses:
        '200':
          description: Success
          content:
            text/xml:
              schema:
                type: string
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              allOf:
              - type: object
                required:
                - Action
                - Version
                properties:
                  Action:
                    type: string
                    const: DeleteVpc
                  Version:
                    type: string
                    const: '2016-11-15'
              - $ref: '#/components/schemas/DeleteVpcRequest'
            example:
              VpcId: vpc-a01106c2
      tags:
      - Vpc
  /?Action=DescribeVpcs:
    post:
      operationId: DescribeVpcs
      summary: Describe Vpcs
      description: Describes your VPCs. The default is to describe all your VPCs. Alternatively, you can specify specific VPC IDs or filter the results to include only the VPCs that match specific criteria.
      responses:
        '200':
          description: Success
          content:
            text/xml:
              schema:
                $ref: '#/components/schemas/DescribeVpcsResult'
              example:
                Vpcs:
                - VpcId: vpc-a01106c2
                  InstanceTenancy: default
                  Tags:
                  - Value: MyVPC
                    Key: Name
                  State: available
                  DhcpOptionsId: dopt-7a8b9c2d
                  CidrBlock: 10.0.0.0/16
                  IsDefault: false
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              allOf:
              - type: object
                required:
                - Action
                - Version
                properties:
                  Action:
                    type: string
                    const: DescribeVpcs
                  Version:
                    type: string
                    const: '2016-11-15'
              - $ref: '#/components/schemas/DescribeVpcsRequest'
            example:
              VpcIds:
              - vpc-a01106c2
      tags:
      - Vpc
components:
  schemas:
    CreateVpcResult:
      type: object
      properties:
        Vpc:
          $ref: '#/components/schemas/Vpc'
    Tag:
      type: object
      properties:
        Key:
          type: string
          description: 'The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:.'
        Value:
          type: string
          description: 'The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.'
    BlockPublicAccessStates:
      type: object
      properties:
        InternetGatewayBlockMode:
          type: string
          enum:
          - 'off'
          - block-bidirectional
          - block-ingress
          description: 'The mode of VPC BPA. off: VPC BPA is not enabled and traffic is allowed to and from internet gateways and egress-only internet gateways in this Region. block-bidirectional: Block all traffic to and from internet gateways and egress-only internet gateways in this Region (except for excluded VPCs and subnets). block-ingress: Block all internet traffic to the VPCs in this Region (except for VPCs or subnets which are excluded). Only traffic to and from NAT gateways and egress-only internet gateways is allowed because these gateways only allow outbound connections to be established.'
    VpcEncryptionControl:
      type: object
      properties:
        VpcId:
          type: string
          description: The ID of the VPC associated with the encryption control configuration.
        VpcEncryptionControlId:
          type: string
          description: The ID of the VPC Encryption Control configuration.
        Mode:
          type: string
          enum:
          - monitor
          - enforce
          description: The encryption mode for the VPC Encryption Control configuration.
        State:
          type: string
          enum:
          - enforce-in-progress
          - monitor-in-progress
          - enforce-failed
          - monitor-failed
          - deleting
          - deleted
          - available
          - creating
          - delete-failed
          description: The current state of the VPC Encryption Control configuration.
        StateMessage:
          type: string
          description: A message providing additional information about the encryption control state.
        ResourceExclusions:
          $ref: '#/components/schemas/VpcEncryptionControlExclusions'
        Tags:
          type: array
          items:
            $ref: '#/components/schemas/Tag'
          description: The tags assigned to the VPC Encryption Control configuration.
    VpcEncryptionControlConfiguration:
      type: object
      properties:
        Mode:
          type: string
          enum:
          - monitor
          - enforce
          description: The encryption mode for the VPC Encryption Control configuration.
        InternetGatewayExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude internet gateway traffic from encryption enforcement.
        EgressOnlyInternetGatewayExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
        NatGatewayExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude NAT gateway traffic from encryption enforcement.
        VirtualPrivateGatewayExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
        VpcPeeringExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
        LambdaExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude Lambda function traffic from encryption enforcement.
        VpcLatticeExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
        ElasticFileSystemExclusion:
          type: string
          enum:
          - enable
          - disable
          description: Specifies whether to exclude Elastic File System traffic from encryption enforcement.
      required:
      - Mode
    Vpc:
      type: object
      properties:
        OwnerId:
          type: string
          description: The ID of the Amazon Web Services account that owns the VPC.
        InstanceTenancy:
          type: string
          enum:
          - default
          - dedicated
          - host
          description: The allowed tenancy of instances launched into the VPC.
        Ipv6CidrBlockAssociationSet:
          type: array
          items:
            $ref: '#/components/schemas/VpcIpv6CidrBlockAssociation'
          description: Information about the IPv6 CIDR blocks associated with the VPC.
        CidrBlockAssociationSet:
          type: array
          items:
            $ref: '#/components/schemas/VpcCidrBlockAssociation'
          description: Information about the IPv4 CIDR blocks associated with the VPC.
        IsDefault:
          type: boolean
          description: Indicates whether the VPC is the default VPC.
        EncryptionControl:
          $ref: '#/components/schemas/VpcEncryptionControl'
        Tags:
          type: array
          items:
            $ref: '#/components/schemas/Tag'
          description: Any tags assigned to the VPC.
        BlockPublicAccessStates:
          $ref: '#/components/schemas/BlockPublicAccessStates'
        VpcId:
          type: string
          description: The ID of the VPC.
        State:
          type: string
          enum:
          - pending
          - available
          - deleting
          description: The current state of the VPC.
        CidrBlock:
          type: string
          description: The primary IPv4 CIDR block for the VPC.
        DhcpOptionsId:
          type: string
          description: The ID of the set of DHCP options you've associated with the VPC.
    VpcEncryptionControlExclusion:
      type: object
      properties:
        State:
          type: string
          enum:
          - enabling
          - enabled
          - disabling
          - disabled
          description: The current state of the exclusion configuration.
        StateMessage:
          type: string
          description: A message providing additional information about the exclusion state.
    VpcCidrBlockAssociation:
      type: object
      properties:
        AssociationId:
          type: string
          description: The association ID for the IPv4 CIDR block.
        CidrBlock:
          type: string
          description: The IPv4 CIDR block.
        CidrBlockState:
          $ref: '#/components/schemas/VpcCidrBlockState'
    VpcEncryptionControlExclusions:
      type: object
      properties:
        InternetGateway:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
        EgressOnlyInternetGateway:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
        NatGateway:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
        VirtualPrivateGateway:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
        VpcPeering:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
        Lambda:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
        VpcLattice:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
        ElasticFileSystem:
          $ref: '#/components/schemas/VpcEncryptionControlExclusion'
    DescribeVpcsResult:
      type: object
      properties:
        NextToken:
          type: string
          description: The token to include in another request to get the next page of items. This value is null when there are no more items to return.
        Vpcs:
          type: array
          items:
            $ref: '#/components/schemas/Vpc'
          description: Information about the VPCs.
    CreateVpcRequest:
      type: object
      properties:
        CidrBlock:
          type: string
          description: The IPv4 network range for the VPC, in CIDR notation. For example, 10.0.0.0/16. We modify the specified CIDR block to its canonical form; for example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18.
        Ipv6Pool:
          type: string
          description: The ID of an IPv6 address pool from which to allocate the IPv6 CIDR block.
        Ipv6CidrBlock:
          type: string
          description: The IPv6 CIDR block from the IPv6 address pool. You must also specify Ipv6Pool in the request. To let Amazon choose the IPv6 CIDR block for you, omit this parameter.
        Ipv4IpamPoolId:
          type: string
          description: The ID of an IPv4 IPAM pool you want to use for allocating this VPC's CIDR. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide.
        Ipv4NetmaskLength:
          type: integer
          description: The netmask length of the IPv4 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
        Ipv6IpamPoolId:
          type: string
          description: The ID of an IPv6 IPAM pool which will be used to allocate this VPC an IPv6 CIDR. IPAM is a VPC feature that you can use to automate your IP address management workflows including assigning, tracking, troubleshooting, and auditing IP addresses across Amazon Web Services Regions and accounts throughout your Amazon Web Services Organization. For more information, see What is IPAM? in the Amazon VPC IPAM User Guide.
        Ipv6NetmaskLength:
          type: integer
          description: The netmask length of the IPv6 CIDR you want to allocate to this VPC from an Amazon VPC IP Address Manager (IPAM) pool. For more information about IPAM, see What is IPAM? in the Amazon VPC IPAM User Guide.
        Ipv6CidrBlockNetworkBorderGroup:
          type: string
          description: The name of the location from which we advertise the IPV6 CIDR block. Use this parameter to limit the address to this location. You must set AmazonProvidedIpv6CidrBlock to true to use this parameter.
        VpcEncryptionControl:
          $ref: '#/components/schemas/VpcEncryptionControlConfiguration'
        TagSpecifications:
          type: array
          items:
            $ref: '#/components/schemas/TagSpecification'
          description: The tags to assign to the VPC.
        DryRun:
          type: boolean
          description: Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
        InstanceTenancy:
          type: string
          enum:
          - default
          - dedicated
          - host
          description: 'The tenancy options for instances launched into the VPC. For default, instances are launched with shared tenancy by default. You can launch instances with any tenancy into a shared tenancy VPC. For dedicated, instances are launched as dedicated tenancy instances by default. You can only launch instances with a tenancy of dedicated or host into a dedicated tenancy VPC. Important: The host value cannot be used with this parameter. Use the default or dedicated values only. Default: default'
        AmazonProvidedIpv6CidrBlock:
          type: boolean
          description: Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length for the VPC. You cannot specify the range of IP addresses, or the size of the CIDR block.
    DeleteVpcRequest:
      type: object
      properties:
        VpcId:
          type: string
          description: The ID of the VPC.
        DryRun:
          type: boolean
          description: Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
      required:
      - VpcId
    TagSpecification:
      type: object
      properties:
        ResourceType:
          type: string
          enum:
          - capacity-reservation
          - client-vpn-endpoint
          - customer-gateway
          - carrier-gateway
          - coip-pool
          - declarative-policies-report
          - dedicated-host
          - dhcp-options
          - egress-only-internet-gateway
          - elastic-ip
          - elastic-gpu
          - export-image-task
          - export-instance-task
          - fleet
          - fpga-image
          - host-reservation
          - image
          - image-usage-report
          - import-image-task
          - import-snapshot-task
          - instance
          - instance-event-window
          - internet-gateway
          - ipam
          - ipam-pool
          - ipam-scope
          - ipv4pool-ec2
          - ipv6pool-ec2
          - key-pair
          - launch-template
          - local-gateway
          - local-gateway-route-table
          - local-gateway-virtual-interface
          - local-gateway-virtual-interface-group
          - local-gateway-route-table-vpc-association
          - local-gateway-route-table-virtual-interface-group-association
          - natgateway
          - network-acl
          - network-interface
          - network-insights-analysis
          - network-insights-path
          - network-insights-access-scope
          - network-insights-access-scope-analysis
          - outpost-lag
          - placement-group
          - prefix-list
          - replace-root-volume-task
          - reserved-instances
          - route-table
          - security-group
          - security-group-rule
          - service-link-virtual-interface
          - snapshot
          - spot-fleet-request
          - spot-instances-request
          - subnet
          - subnet-cidr-reservation
          - traffic-mirror-filter
          - traffic-mirror-session
          - traffic-mirror-target
          - transit-gateway
          - transit-gateway-attachment
          - transit-gateway-connect-peer
          - transit-gateway-multicast-domain
          - transit-gateway-policy-table
          - transit-gateway-metering-policy
          - transit-gateway-route-table
          - transit-gateway-route-table-announcement
          - volume
          - vpc
          - vpc-endpoint
          - vpc-endpoint-connection
          - vpc-endpoint-service
          - vpc-endpoint-service-permission
          - vpc-peering-connection
          - vpn-connection
          - vpn-gateway
          - vpc-flow-log
          - capacity-reservation-fleet
          - traffic-mirror-filter-rule
          - vpc-endpoint-connection-device-type
          - verified-access-instance
          - verified-access-group
          - verified-access-endpoint
          - verified-access-policy
          - verified-access-trust-provider
          - vpn-connection-device-type
          - vpc-block-public-access-exclusion
          - vpc-encryption-control
          - route-server
          - route-server-endpoint
          - route-server-peer
          - ipam-resource-discovery
          - ipam-resource-discovery-association
          - instance-connect-endpoint
          - verified-access-endpoint-target
          - ipam-external-resource-verification-token
          - capacity-block
          - mac-modification-task
          - ipam-prefix-list-resolver
          - ipam-policy
          - ipam-prefix-list-resolver-target
          - ipam-internet-registry-association
          - secondary-interface
          - secondary-network
          - secondary-subnet
          - capacity-manager-data-export
          - vpn-concentrator
          - ipam-pool-allocation
          - capacity-reservation-cancellation-quote
          - application-status-check
          - capacity-reservation-modification-quote
          description: The type of resource to tag on creation.
        Tags:
          type: array
          items:
            $ref: '#/components/schemas/Tag'
          description: The tags to apply to the resource.
    DescribeVpcsRequest:
      type: object
      properties:
        Filters:
          type: array
          items:
            $ref: '#/components/schemas/Filter'
          description: The filters. cidr - The primary IPv4 CIDR block of the VPC. The CIDR block you specify must exactly match the VPC's CIDR block for information to be returned for the VPC. Must contain the slash followed by one or two digits (for example, /28). cidr-block-association.cidr-block - An IPv4 CIDR block associated with the VPC. cidr-block-association.association-id - The association ID for an IPv4 CIDR block associated with the VPC. cidr-block-association.state - The state of an IPv4 CIDR block associated with the VPC. dhcp-options-id - The ID of a set of DHCP options. ipv6-cidr-block-association.ip
        VpcIds:
          type: array
          items:
            type: string
          description: The IDs of the VPCs.
        NextToken:
          type: string
          description: The token returned from a previous paginated request. Pagination continues from the end of the items returned by the previous request.
        MaxResults:
          type: integer
          description: The maximum number of items to return for this request. To get the next page of items, make another request with the token returned in the output. For more information, see Pagination.
        DryRun:
          type: boolean
          description: Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
    VpcIpv6CidrBlockAssociation:
      type: object
      properties:
        AssociationId:
          type: string
          description: The association ID for the IPv6 CIDR block.
        Ipv6CidrBlock:
          type: string
          description: The IPv6 CIDR block.
        Ipv6CidrBlockState:
          $ref: '#/components/schemas/VpcCidrBlockState'
        NetworkBorderGroup:
          type: string
          description: The name of the unique set of Availability Zones, Local Zones, or Wavelength Zones from which Amazon Web Services advertises IP addresses, for example, us-east-1-wl1-bos-wlz-1.
        Ipv6Pool:
          type: string
          description: The ID of the IPv6 address pool from which the IPv6 CIDR block is allocated.
        Ipv6AddressAttribute:
          type: string
          enum:
          - public
          - private
          description: Public IPv6 addresses are those advertised on the internet from Amazon Web Services. Private IP addresses are not and cannot be advertised on the internet from Amazon Web Services.
        IpSource:
          type: string
          enum:
          - amazon
          - byoip
          - none
          description: The source that allocated the IP address space. byoip or amazon indicates public IP address space allocated by Amazon or space that you have allocated with Bring your own IP (BYOIP). none indicates private space.
    VpcCidrBlockState:
      type: object
      properties:
        State:
          type: string
          enum:
          - associating
          - associated
          - disassociating
          - disassociated
          - failing
          - failed
          description: The state of the CIDR block.
        StatusMessage:
          type: string
          description: A message about the status of the CIDR block, if applicable.
    Filter:
      type: object
      properties:
        Name:
          type: string
          description: The name of the filter. Filter names are case-sensitive.
        Values:
          type: array
          items:
            type: string
          description: The filter values. Filter values are case-sensitive. If you specify multiple values for a filter, the values are joined with an OR, and the request returns all results that match any of the specified values.
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: ec2
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/ec2/service/2016-11-15/ec2-2016-11-15.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)