# ClientVpnAuthorizationRuleOptions

Options for a ClientVpnAuthorizationRule.

- Source: [`aws-ec2/lib/client-vpn-authorization-rule.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-ec2/lib/client-vpn-authorization-rule.ts#L12)

## Example

```ts
const endpoint = vpc.addClientVpnEndpoint('Endpoint', {
  cidr: '10.100.0.0/16',
  serverCertificateArn: 'arn:aws:acm:us-east-1:123456789012:certificate/server-certificate-id',
  userBasedAuthentication: ec2.ClientVpnUserBasedAuthentication.federated(samlProvider),
  authorizeAllUsersToVpcCidr: false,
});

endpoint.addAuthorizationRule('Rule', {
  cidr: '10.0.10.0/32',
  groupId: 'group-id',
});
```

## Properties

- `cidr`: string (required) — The IPv4 address range, in CIDR notation, of the network for which access is being authorized.

- `description`: string — A brief description of the authorization rule.

  **Default:** no description

- `groupId`: string — The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group.

  **Default:** authorize all groups