Skip to content
v2.273.0

ClientVpnAuthorizationRuleOptions Struct ​

Options for a ClientVpnAuthorizationRule.

Example ​

ts
const endpoint = vpc.addClientVpnEndpoint('Endpoint', {
  cidr: '10.100.0.0/16',
  serverCertificateArn: 'arn:aws:acm:us-east-1:123456789012:certificate/server-certificate-id',
  userBasedAuthentication: ec2.ClientVpnUserBasedAuthentication.federated(samlProvider),
  authorizeAllUsersToVpcCidr: false,
});

endpoint.addAuthorizationRule('Rule', {
  cidr: '10.0.10.0/32',
  groupId: 'group-id',
});

Properties ​

cidrstringcidrstrcidrStringCidrstringCidr*stringrequired#
The IPv4 address range, in CIDR notation, of the network for which access is being authorized.
descriptionstringdescriptionstrdescriptionStringDescriptionstringDescription*string= no description#
A brief description of the authorization rule.
groupIdstringgroup_idstrgroupIdStringGroupIdstringGroupId*string= authorize all groups#
The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group.