{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-iam-access-analyzer/refs/heads/main/json-schema/iam-access-analyzer-network-origin-configuration-schema.json",
  "title": "NetworkOriginConfiguration",
  "description": "The proposed <code>InternetConfiguration</code> or <code>VpcConfiguration</code> to apply to the Amazon S3 access point. <code>VpcConfiguration</code> does not apply to multi-region access points. You can make the access point accessible from the internet, or you can specify that all requests made through that access point must originate from a specific virtual private cloud (VPC). You can specify only one type of network configuration. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/creating-access-points.html\">Creating access points</a>.",
  "type": "object",
  "properties": {
    "vpcConfiguration": {
      "type": "object",
      "required": [
        "vpcId"
      ],
      "properties": {
        "vpcId": {
          "allOf": [
            {
              "$ref": "#/components/schemas/VpcId"
            },
            {
              "description": " If this field is specified, this access point will only allow connections from the specified VPC ID. "
            }
          ]
        }
      },
      "description": "The proposed virtual private cloud (VPC) configuration for the Amazon S3 access point. VPC configuration does not apply to multi-region access points. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_VpcConfiguration.html\">VpcConfiguration</a>. "
    },
    "internetConfiguration": {
      "allOf": [
        {
          "$ref": "#/components/schemas/InternetConfiguration"
        },
        {
          "description": "The configuration for the Amazon S3 access point or multi-region access point with an <code>Internet</code> origin."
        }
      ]
    }
  }
}