View a markdown version of this page

Considerations when writing policies - AWS Client VPN

Considerations when writing policies

Keep the following in mind when you write authorization policies.

  • A policy document can be a maximum of 10,000 bytes.

  • Namespace availability depends on your trust provider configuration. A namespace is available only when you have configured the corresponding trust provider on the endpoint.

  • User identity signals are captured once when the device connects, and do not change during a session.