# ClientVpnAuthorizationRuleProps

Properties for a ClientVpnAuthorizationRule.

Extends: ClientVpnAuthorizationRuleProps
Extends: ClientVpnAuthorizationRuleOptions
Used as props by: ClientVpnAuthorizationRule

- Source: [`aws-ec2/lib/client-vpn-authorization-rule.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-ec2/lib/client-vpn-authorization-rule.ts#L38)
- Type last changed: v2.224.0 · 13 Nov 2025

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ec2 as ec2 } from 'aws-cdk-lib';
import { aws_ec2 as interfaces_ec2 } from 'aws-cdk-lib/interfaces';

declare const clientVpnEndpointRef: interfaces_ec2.IClientVpnEndpointRef;
const clientVpnAuthorizationRuleProps: ec2.ClientVpnAuthorizationRuleProps = {
  cidr: 'cidr',

  // the properties below are optional
  clientVpnEndpoint: clientVpnEndpointRef,
  description: 'description',
  groupId: 'groupId',
};
```

## Properties

- `cidr`: string (required) — The IPv4 address range, in CIDR notation, of the network for which access is being authorized.

- `clientVpnEndpoint`: [IClientVpnEndpointRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_ec2.IClientVpnEndpointRef.html) — The client VPN endpoint to which to add the rule.

  **Default:** clientVpnEndpoint is required

- `description`: string — A brief description of the authorization rule.

  **Default:** no description

- `groupId`: string — The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group.

  **Default:** authorize all groups