# ClientRouteEnforcementOptions

Options for Client Route Enforcement.

- Source: [`aws-ec2/lib/client-vpn-endpoint.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-ec2/lib/client-vpn-endpoint.ts#L34)
- Type last changed: v2.203.0 · 1 Jul 2025

## Example

```ts
const endpoint = vpc.addClientVpnEndpoint('Endpoint', {
  cidr: '10.100.0.0/16',
  serverCertificateArn: 'arn:aws:acm:us-east-1:123456789012:certificate/server-certificate-id',
  clientCertificateArn: 'arn:aws:acm:us-east-1:123456789012:certificate/client-certificate-id',
  clientRouteEnforcementOptions: {
    enforced: true,
  },
});
```

## Properties

- `enforced`: boolean (required) — Enable or disable Client Route Enforcement.

  The state can either be true (enabled) or false (disabled).