# CfnClientVpnAuthorizationRuleProps

Properties for defining a `CfnClientVpnAuthorizationRule`.

Extends: CfnClientVpnAuthorizationRuleProps
Used as props by: CfnClientVpnAuthorizationRule

- Source: Generated code

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ec2 as ec2 } from 'aws-cdk-lib';
const cfnClientVpnAuthorizationRuleProps: ec2.CfnClientVpnAuthorizationRuleProps = {
  clientVpnEndpointId: 'clientVpnEndpointId',
  targetNetworkCidr: 'targetNetworkCidr',

  // the properties below are optional
  accessGroupId: 'accessGroupId',
  authorizeAllGroups: false,
  description: 'description',
};
```

## Properties

- `accessGroupId`: string — The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group.

  Required if `AuthorizeAllGroups` is `false` or not specified.

- `authorizeAllGroups`: boolean | [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) — Indicates whether to grant access to all clients.

  Specify `true` to grant all clients who successfully establish a VPN connection access to the network. Must be set to `true` if `AccessGroupId` is not specified.

- `clientVpnEndpointId`: string (required) — The ID of the Client VPN endpoint.

- `description`: string — A brief description of the authorization rule.

- `targetNetworkCidr`: string (required) — The IPv4 address range, in CIDR notation, of the network for which access is being authorized.