v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1454734.4 KB

Updates the VPC configuration or operator role of an existing network connector. You can modify the subnet IDs, security group IDs, network protocol, or operator role. The connector must be in ACTIVE state to accept updates.

This operation is asynchronous. The connector remains in ACTIVE state during the update — existing workloads that reference this connector are not disrupted. Use GetNetworkConnector to monitor the LastUpdateStatus field, which transitions through InProgress to Successful or Failed. If the update fails, the LastUpdateStatusReasonCode field provides a specific error code for troubleshooting. This operation is idempotent when you provide a ClientToken.

put/2026-04-04/network-connectors/{Identifier}

Path parameters

Identifierstring required

A flexible identifier that accepts a network connector ID, name, or ARN

Request body

OperatorRolestring

The updated ARN of the IAM role that Lambda assumes to manage ENIs. Use this to change the operator role without recreating the connector.

ClientTokenstring

A unique, case-sensitive identifier to ensure idempotency of the update request.

Response

Success

Arnstring required

The Amazon Resource Name (ARN) of the network connector.

Namestring required

The name of the network connector.

Idstring required

The unique identifier for a network connector, assigned by the service at creation time

OperatorRolestring

The ARN of the IAM role that Lambda uses to manage the underlying ENI resources for this connector.

State'PENDING' | 'ACTIVE' | 'INACTIVE' | 'FAILED' | 'DELETING' | 'DELETE_FAILED'

The current state of the network connector.

LastUpdateStatus'Successful' | 'Failed' | 'InProgress'

The status of this update operation (typically <code>InProgress</code> immediately after the call).

LastUpdateStatusReasonstring

A human-readable explanation of the update status.

LastModifiedstring date-time

The timestamp of this update.