CreateClientVpnRoute - Amazon Elastic Compute Cloud


Adds a route to a network to a Client VPN endpoint. Each Client VPN endpoint has a route table that describes the available destination network routes. Each route in the route table specifies the path for traffic to specific resources or networks.

Request Parameters

The following parameters are for this specific action. For more information about required and optional parameters that are common to all actions, see Common Query Parameters.


Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see Ensuring idempotency.

Type: String

Required: No


The ID of the Client VPN endpoint to which to add the route.

Type: String

Required: Yes


A brief description of the route.

Type: String

Required: No


The IPv4 address range, in CIDR notation, of the route destination. For example:

  • To add a route for Internet access, enter

  • To add a route for a peered VPC, enter the peered VPC's IPv4 CIDR range

  • To add a route for an on-premises network, enter the AWS Site-to-Site VPN connection's IPv4 CIDR range

  • To add a route for the local network, enter the client CIDR range

Type: String

Required: Yes


Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

Type: Boolean

Required: No


The ID of the subnet through which you want to route traffic. The specified subnet must be an existing target network of the Client VPN endpoint.

Alternatively, if you're adding a route for the local network, specify local.

Type: String

Required: Yes

Response Elements

The following elements are returned by the service.


The ID of the request.

Type: String


The current state of the route.

Type: ClientVpnRouteStatus object


For information about the errors that are common to all actions, see Common client error codes.



This example adds a route for Internet access to the Client VPN endpoint.

Sample Request &ClientVpnEndpointId=cvpn-endpoint-00c5d11fc4EXAMPLE &DestinationCidrBlock= &TargetVpcSubnetId=subnet-057fa0918fEXAMPLE &AUTHPARAMS

Sample Response

<CreateClientVpnRouteResponse xmlns=""> <requestId>5b301186-e6d3-436b-87d6-7c400EXAMPLE</requestId> <status> <code>creating</code> </status> </CreateClientVpnRouteResponse>

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: