CfnClientVpnAuthorizationRuleProps¶

class aws_cdk.aws_ec2.CfnClientVpnAuthorizationRuleProps(*, client_vpn_endpoint_id, target_network_cidr, access_group_id=None, authorize_all_groups=None, description=None)¶

Bases: object

Properties for defining a CfnClientVpnAuthorizationRule.

Parameters

client_vpn_endpoint_id (str) – The ID of the Client VPN endpoint.
target_network_cidr (str) – The IPv4 address range, in CIDR notation, of the network for which access is being authorized.
access_group_id (Optional[str]) – The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group. Required if AuthorizeAllGroups is false or not specified.
authorize_all_groups (Union[bool, IResolvable, None]) – Indicates whether to grant access to all clients. Specify true to grant all clients who successfully establish a VPN connection access to the network. Must be set to true if AccessGroupId is not specified.
description (Optional[str]) – A brief description of the authorization rule.

Link

http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html

ExampleMetadata

fixture=_generated

Example:

# The code below shows an example of how to instantiate this type.
# The values are placeholders you should change.
import aws_cdk.aws_ec2 as ec2

cfn_client_vpn_authorization_rule_props = ec2.CfnClientVpnAuthorizationRuleProps(
    client_vpn_endpoint_id="clientVpnEndpointId",
    target_network_cidr="targetNetworkCidr",

    # the properties below are optional
    access_group_id="accessGroupId",
    authorize_all_groups=False,
    description="description"
)

Attributes

access_group_id¶

The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group.

Required if AuthorizeAllGroups is false or not specified.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html#cfn-ec2-clientvpnauthorizationrule-accessgroupid
Return type: Optional[str]

authorize_all_groups¶

Indicates whether to grant access to all clients.

Specify true to grant all clients who successfully establish a VPN connection access to the network. Must be set to true if AccessGroupId is not specified.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html#cfn-ec2-clientvpnauthorizationrule-authorizeallgroups
Return type: Union[bool, IResolvable, None]

client_vpn_endpoint_id¶

The ID of the Client VPN endpoint.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html#cfn-ec2-clientvpnauthorizationrule-clientvpnendpointid
Return type: str

description¶

A brief description of the authorization rule.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html#cfn-ec2-clientvpnauthorizationrule-description
Return type: Optional[str]

target_network_cidr¶

The IPv4 address range, in CIDR notation, of the network for which access is being authorized.

Link: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html#cfn-ec2-clientvpnauthorizationrule-targetnetworkcidr
Return type: str