| _key | core | string | |
| account_id | core | string | |
| attached_appliances | core | json | The proxy appliances attached to the NAT Gateway for filtering and inspecting traffic to prevent data exfiltration. |
| auto_provision_zones | core | string | For regional NAT gateways only: Indicates whether Amazon Web Services automatically manages AZ coverage. When enabled, the NAT gateway associates EIPs in all AZs where your VPC has subnets to handle outbound NAT traffic, expands to new AZs when you create subnets there, and retracts from AZs where you've removed all subnets. When disabled, you must manually manage which AZs the NAT gateway supports and their corresponding EIPs. A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html">Regional NAT gateways for automatic multi-AZ expansion</a> in the <i>Amazon VPC User Guide</i>. |
| auto_scaling_ips | core | string | For regional NAT gateways only: Indicates whether Amazon Web Services automatically allocates additional Elastic IP addresses (EIPs) in an AZ when the NAT gateway needs more ports due to increased concurrent connections to a single destination from that AZ. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html">Regional NAT gateways for automatic multi-AZ expansion</a> in the <i>Amazon VPC User Guide</i>. |
| availability_mode | core | string | Indicates whether this is a zonal (single-AZ) or regional (multi-AZ) NAT gateway. A zonal NAT gateway is a NAT Gateway that provides redundancy and scalability within a single availability zone. A regional NAT gateway is a single NAT Gateway that works across multiple availability zones (AZs) in your VPC, providing redundancy, scalability and availability across all the AZs in a Region. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateways-regional.html">Regional NAT gateways for automatic multi-AZ expansion</a> in the <i>Amazon VPC User Guide</i>. |
| connectivity_type | core | string | Indicates whether the NAT gateway supports public or private connectivity. |
| create_time | core | timestamp | The date and time the NAT gateway was created. |
| delete_time | core | timestamp | The date and time the NAT gateway was deleted, if applicable. |
| failure_code | core | string | If the NAT gateway could not be created, specifies the error code for the failure. (<code>InsufficientFreeAddressesInSubnet</code> | <code>Gateway.NotAttached</code> | <code>InvalidAllocationID.NotFound</code> | <code>Resource.AlreadyAssociated</code> | <code>InternalError</code> | <code>InvalidSubnetID.NotFound</code>) |
| failure_message | core | string | If the NAT gateway could not be created, specifies the error message for the failure, that corresponds to the error code. <ul> <li> For InsufficientFreeAddressesInSubnet: "Subnet has insufficient free addresses to create this NAT gateway" </li> <li> For Gateway.NotAttached: "Network vpc-xxxxxxxx has no Internet gateway attached" </li> <li> For InvalidAllocationID.NotFound: "Elastic IP address eipalloc-xxxxxxxx could not be associated with this NAT gateway" </li> <li> For Resource.AlreadyAssociated: "Elastic IP address eipalloc-xxxxxxxx is already associated" </li> <li> For InternalError: "Network interface eni-xxxxxxxx, created and used internally by this NAT gateway is in an invalid state. Please try again." </li> <li> For InvalidSubnetID.NotFound: "The specified subnet subnet-xxxxxxxx does not exist or could not be found." </li> </ul> |
| nat_gateway_addresses | core | json | Information about the IP addresses and network interface associated with the NAT gateway. |
| nat_gateway_arn | core | string | |
| nat_gateway_id | core | string | The ID of the NAT gateway. |
| provisioned_bandwidth | core | json | Reserved. If you need to sustain traffic greater than the <a href="https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html#vpc-limits-gateways">documented limits</a>, contact Amazon Web Services Support. |
| route_table_id | core | string | For regional NAT gateways only, this is the ID of the NAT gateway. |
| state | core | string | The state of the NAT gateway. <ul> <li> <code>pending</code>: The NAT gateway is being created and is not ready to process traffic. </li> <li> <code>failed</code>: The NAT gateway could not be created. Check the <code>failureCode</code> and <code>failureMessage</code> fields for the reason. </li> <li> <code>available</code>: The NAT gateway is able to process traffic. This status remains until you delete the NAT gateway, and does not indicate the health of the NAT gateway. </li> <li> <code>deleting</code>: The NAT gateway is in the process of being terminated and may still be processing traffic. </li> <li> <code>deleted</code>: The NAT gateway has been terminated and is no longer processing traffic. </li> </ul> |
| subnet_id | core | string | The ID of the subnet in which the NAT gateway is located. |
| tags | core | hstore_csv | |
| vpc_id | core | string | The ID of the VPC in which the NAT gateway is located. |
