cartography 0.104.0rc2__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/aws/ec2/security_group_rules.py

@@ -0,0 +1,109 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class IpRuleNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("RuleId")
+    ruleid: PropertyRef = PropertyRef("RuleId", extra_index=True)
+    groupid: PropertyRef = PropertyRef("GroupId", extra_index=True)
+    protocol: PropertyRef = PropertyRef("Protocol")
+    fromport: PropertyRef = PropertyRef("FromPort")
+    toport: PropertyRef = PropertyRef("ToPort")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class IpRuleToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class IpRuleToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: IpRuleToAWSAccountRelProperties = IpRuleToAWSAccountRelProperties()
+
+
+@dataclass(frozen=True)
+class IpRuleToSecurityGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class IpRuleToSecurityGroupRel(CartographyRelSchema):
+    target_node_label: str = "EC2SecurityGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"groupid": PropertyRef("GroupId")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "MEMBER_OF_EC2_SECURITY_GROUP"
+    properties: IpRuleToSecurityGroupRelProperties = (
+        IpRuleToSecurityGroupRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class IpRangeNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("RangeId")
+    range: PropertyRef = PropertyRef("RangeId")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class IpRangeToIpRuleRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class IpRangeToIpRuleRel(CartographyRelSchema):
+    target_node_label: str = "IpRule"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"ruleid": PropertyRef("RuleId")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "MEMBER_OF_IP_RULE"
+    properties: IpRangeToIpRuleRelProperties = IpRangeToIpRuleRelProperties()
+
+
+@dataclass(frozen=True)
+class IpRuleSchema(CartographyNodeSchema):
+    label: str = "IpRule"
+    properties: IpRuleNodeProperties = IpRuleNodeProperties()
+    sub_resource_relationship: IpRuleToAWSAccountRel = IpRuleToAWSAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [IpRuleToSecurityGroupRel()]
+    )
+
+
+@dataclass(frozen=True)
+class IpPermissionInboundSchema(CartographyNodeSchema):
+    label: str = "IpRule"
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["IpPermissionInbound"])
+    properties: IpRuleNodeProperties = IpRuleNodeProperties()
+    sub_resource_relationship: IpRuleToAWSAccountRel = IpRuleToAWSAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [IpRuleToSecurityGroupRel()]
+    )
+
+
+@dataclass(frozen=True)
+class IpRangeSchema(CartographyNodeSchema):
+    label: str = "IpRange"
+    properties: IpRangeNodeProperties = IpRangeNodeProperties()
+    sub_resource_relationship: IpRuleToAWSAccountRel = IpRuleToAWSAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships([IpRangeToIpRuleRel()])

cartography/models/aws/ec2/security_groups.py

@@ -0,0 +1,90 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("GroupId")
+    groupid: PropertyRef = PropertyRef("GroupId", extra_index=True)
+    name: PropertyRef = PropertyRef("GroupName")
+    description: PropertyRef = PropertyRef("Description")
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EC2SecurityGroupToAWSAccountRelProperties = (
+        EC2SecurityGroupToAWSAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupToVpcRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupToVpcRel(CartographyRelSchema):
+    target_node_label: str = "AWSVpc"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"vpcid": PropertyRef("VpcId")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF_EC2_SECURITY_GROUP"
+    properties: EC2SecurityGroupToVpcRelProperties = (
+        EC2SecurityGroupToVpcRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupToSourceGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupToSourceGroupRel(CartographyRelSchema):
+    target_node_label: str = "EC2SecurityGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"groupid": PropertyRef("SOURCE_GROUP_IDS", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ALLOWS_TRAFFIC_FROM"
+    properties: EC2SecurityGroupToSourceGroupRelProperties = (
+        EC2SecurityGroupToSourceGroupRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EC2SecurityGroupSchema(CartographyNodeSchema):
+    label: str = "EC2SecurityGroup"
+    properties: EC2SecurityGroupNodeProperties = EC2SecurityGroupNodeProperties()
+    sub_resource_relationship: EC2SecurityGroupToAWSAccountRel = (
+        EC2SecurityGroupToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EC2SecurityGroupToVpcRel(),
+            EC2SecurityGroupToSourceGroupRel(),
+        ]
+    )

cartography/models/aws/ec2/snapshots.py

@@ -0,0 +1,58 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EBSSnapshotNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("SnapshotId")
+    snapshotid: PropertyRef = PropertyRef("SnapshotId", extra_index=True)
+    description: PropertyRef = PropertyRef("Description")
+    encrypted: PropertyRef = PropertyRef("Encrypted")
+    progress: PropertyRef = PropertyRef("Progress")
+    starttime: PropertyRef = PropertyRef("StartTime")
+    state: PropertyRef = PropertyRef("State")
+    statemessage: PropertyRef = PropertyRef("StateMessage")
+    volumeid: PropertyRef = PropertyRef("VolumeId")
+    volumesize: PropertyRef = PropertyRef("VolumeSize")
+    outpostarn: PropertyRef = PropertyRef("OutpostArn")
+    dataencryptionkeyid: PropertyRef = PropertyRef("DataEncryptionKeyId")
+    kmskeyid: PropertyRef = PropertyRef("KmsKeyId")
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EBSSnapshotToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EBSSnapshotToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("AWS_ID", set_in_kwargs=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: EBSSnapshotToAWSAccountRelProperties = (
+        EBSSnapshotToAWSAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class EBSSnapshotSchema(CartographyNodeSchema):
+    label: str = "EBSSnapshot"
+    properties: EBSSnapshotNodeProperties = EBSSnapshotNodeProperties()
+    sub_resource_relationship: EBSSnapshotToAWSAccountRel = EBSSnapshotToAWSAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships([])

cartography/models/aws/ec2/subnet_instance.py

@@ -15,7 +15,9 @@ from cartography.models.core.relationships import TargetNodeMatcher
 class EC2SubnetInstanceNodeProperties(CartographyNodeProperties):
     # arn: PropertyRef = PropertyRef('Arn', extra_index=True) TODO use arn; issue #1024
     id: PropertyRef = PropertyRef("SubnetId")
+    # TODO: remove subnetid once we have migrated to subnet_id
     subnetid: PropertyRef = PropertyRef("SubnetId", extra_index=True)
+    subnet_id: PropertyRef = PropertyRef("SubnetId", extra_index=True)
     region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
     lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
 

cartography/models/aws/ec2/subnet_networkinterface.py

@@ -16,6 +16,8 @@ from cartography.models.core.relationships import TargetNodeMatcher
 @dataclass(frozen=True)
 class EC2SubnetNetworkInterfaceNodeProperties(CartographyNodeProperties):
     id: PropertyRef = PropertyRef("SubnetId")
+    # TODO: remove subnetid once we have migrated to subnet_id
+    subnetid: PropertyRef = PropertyRef("SubnetId", extra_index=True)
     subnet_id: PropertyRef = PropertyRef("SubnetId", extra_index=True)
     region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
     lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)

cartography/models/aws/ec2/subnets.py

@@ -0,0 +1,65 @@
+from dataclasses import dataclass
+
+from cartography.models.aws.ec2.auto_scaling_groups import EC2SubnetToAWSAccountRel
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class EC2SubnetNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("SubnetId")
+    subnetid: PropertyRef = PropertyRef("SubnetId", extra_index=True)
+    subnet_id: PropertyRef = PropertyRef("SubnetId", extra_index=True)
+    subnet_arn: PropertyRef = PropertyRef("SubnetArn")
+    name: PropertyRef = PropertyRef("CidrBlock")
+    cidr_block: PropertyRef = PropertyRef("CidrBlock")
+    available_ip_address_count: PropertyRef = PropertyRef("AvailableIpAddressCount")
+    default_for_az: PropertyRef = PropertyRef("DefaultForAz")
+    map_customer_owned_ip_on_launch: PropertyRef = PropertyRef(
+        "MapCustomerOwnedIpOnLaunch"
+    )
+    state: PropertyRef = PropertyRef("State")
+    assignipv6addressoncreation: PropertyRef = PropertyRef(
+        "AssignIpv6AddressOnCreation"
+    )
+    map_public_ip_on_launch: PropertyRef = PropertyRef("MapPublicIpOnLaunch")
+    availability_zone: PropertyRef = PropertyRef("AvailabilityZone")
+    availability_zone_id: PropertyRef = PropertyRef("AvailabilityZoneId")
+    vpc_id: PropertyRef = PropertyRef("VpcId")
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SubnetToVpcRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EC2SubnetToVpcRel(CartographyRelSchema):
+    target_node_label: str = "AWSVpc"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("VpcId")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "MEMBER_OF_AWS_VPC"
+    properties: EC2SubnetToVpcRelProperties = EC2SubnetToVpcRelProperties()
+
+
+@dataclass(frozen=True)
+class EC2SubnetSchema(CartographyNodeSchema):
+    label: str = "EC2Subnet"
+    properties: EC2SubnetNodeProperties = EC2SubnetNodeProperties()
+    sub_resource_relationship: EC2SubnetToAWSAccountRel = EC2SubnetToAWSAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            EC2SubnetToVpcRel(),
+        ]
+    )

cartography/models/aws/ec2/volumes.py

@@ -68,6 +68,24 @@ class EBSVolumeToEC2InstanceRel(CartographyRelSchema):
     )
 
 
+@dataclass(frozen=True)
+class EBSVolumeToEBSSnapshotRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class EBSVolumeToEBSSnapshotRel(CartographyRelSchema):
+    target_node_label: str = "EBSSnapshot"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("SnapshotId")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CREATED_FROM"
+    properties: EBSVolumeToEBSSnapshotRelProperties = (
+        EBSVolumeToEBSSnapshotRelProperties()
+    )
+
+
 @dataclass(frozen=True)
 class EBSVolumeSchema(CartographyNodeSchema):
     """
@@ -80,6 +98,7 @@ class EBSVolumeSchema(CartographyNodeSchema):
     other_relationships: OtherRelationships = OtherRelationships(
         [
             EBSVolumeToEC2InstanceRel(),
+            EBSVolumeToEBSSnapshotRel(),
         ],
     )
 
@@ -110,5 +129,6 @@ class EBSVolumeInstanceSchema(CartographyNodeSchema):
     other_relationships: OtherRelationships = OtherRelationships(
         [
             EBSVolumeToEC2InstanceRel(),
+            EBSVolumeToEBSSnapshotRel(),
         ],
     )

cartography/models/aws/ec2/vpc.py

@@ -0,0 +1,46 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class VPCNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("VpcId")
+    vpcid: PropertyRef = PropertyRef("VpcId", extra_index=True)
+    primary_cidr_block: PropertyRef = PropertyRef("PrimaryCIDRBlock")
+    instance_tenancy: PropertyRef = PropertyRef("InstanceTenancy")
+    state: PropertyRef = PropertyRef("State")
+    is_default: PropertyRef = PropertyRef("IsDefault")
+    dhcp_options_id: PropertyRef = PropertyRef("DhcpOptionsId")
+    region: PropertyRef = PropertyRef("Region", set_in_kwargs=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class VPCToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class VPCToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: VPCToAWSAccountRelProperties = VPCToAWSAccountRelProperties()
+
+
+@dataclass(frozen=True)
+class AWSVpcSchema(CartographyNodeSchema):
+    label: str = "AWSVpc"
+    properties: VPCNodeProperties = VPCNodeProperties()
+    sub_resource_relationship: VPCToAWSAccountRel = VPCToAWSAccountRel()

cartography/models/aws/ec2/vpc_cidr.py

@@ -0,0 +1,102 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class AWSIPv4CidrBlockNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("Id")
+    vpcid: PropertyRef = PropertyRef("VpcId")
+    association_id: PropertyRef = PropertyRef("AssociationId")
+    cidr_block: PropertyRef = PropertyRef("CidrBlock")
+    block_state: PropertyRef = PropertyRef("BlockState")
+    block_state_message: PropertyRef = PropertyRef("BlockStateMessage")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSIPv4CidrBlockToAWSVpcRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSIPv4CidrBlockToAWSVpcRel(CartographyRelSchema):
+    target_node_label: str = "AWSVpc"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("VpcId")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "BLOCK_ASSOCIATION"
+    properties: AWSIPv4CidrBlockToAWSVpcRelProperties = (
+        AWSIPv4CidrBlockToAWSVpcRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSIPv4CidrBlockSchema(CartographyNodeSchema):
+    """
+    There is no sub-resource relationship here because a
+    CIDR block can be associated with more than one account
+    and it doesn't make sense to scope it to one.
+    """
+
+    label: str = "AWSCidrBlock"
+    properties: AWSIPv4CidrBlockNodeProperties = AWSIPv4CidrBlockNodeProperties()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [AWSIPv4CidrBlockToAWSVpcRel()]
+    )
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["AWSIpv4CidrBlock"])
+
+
+@dataclass(frozen=True)
+class AWSIPv6CidrBlockNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("Id")
+    vpcid: PropertyRef = PropertyRef("VpcId")
+    association_id: PropertyRef = PropertyRef("AssociationId")
+    cidr_block: PropertyRef = PropertyRef("CidrBlock")
+    block_state: PropertyRef = PropertyRef("BlockState")
+    block_state_message: PropertyRef = PropertyRef("BlockStateMessage")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSIPv6CidrBlockToAWSVpcRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSIPv6CidrBlockToAWSVpcRel(CartographyRelSchema):
+    target_node_label: str = "AWSVpc"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("VpcId")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "BLOCK_ASSOCIATION"
+    properties: AWSIPv6CidrBlockToAWSVpcRelProperties = (
+        AWSIPv6CidrBlockToAWSVpcRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AWSIPv6CidrBlockSchema(CartographyNodeSchema):
+    """
+    There is no sub-resource relationship here because a
+    CIDR block can be associated with more than one account
+    and it doesn't make sense to scope it to one.
+    """
+
+    label: str = "AWSCidrBlock"
+    properties: AWSIPv6CidrBlockNodeProperties = AWSIPv6CidrBlockNodeProperties()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [AWSIPv6CidrBlockToAWSVpcRel()]
+    )
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["AWSIpv6CidrBlock"])