NetworkLinks Object
Relationships
graph LR
NetworkLinks -->|"account"| Accounts
NetworkLinks -->|"local_boundary"| NetworkBoundaries
NetworkLinks -->|"remote_boundary"| NetworkBoundaries
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
Whether traffic can transit to a third network through this link. Always false for AWS VPC peering. For transit gateways, it's derived from associations and propagations combined, not one attachment field.
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
For transit gateways, whether attachments associate with the default route table automatically. With default_route_table_propagation both true, every attached network can reach every other.
For transit gateways, whether attachment routes propagate into the default route table automatically.
The provider's own identifier for the link.
What kind of connection this is.
peeringtransit_attachmentshared_networkvpninterconnectother
The network on this side of the link.
The target's id.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
The account owning the far side of the link. Local/remote are assigned by account ownership, not by which side initiated the connection.
The network on the far side of the link. Resolves only when the far side is an account this connection also reads.
The target's id.
Raw data returned from the remote API call.
The region on the far side of the link.
Route exchange configuration, where the provider has one. AWS VPC peering has no real equivalent (only a DNS-resolution option survives); null with not_supported_by_provider there.
AWS allowDnsResolutionFromRemoteVpc. Whether the remote network can resolve private DNS on this side. This is DNS, not routing - AWS VPC peering exchanges no routes automatically.
Whether routes actually exist for this link. An active peering state doesn't mean routes were added — that's a separate, manual step on AWS.
The provider's own state string for the link, verbatim.
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.