Package com.pulumi.aws.ec2.inputs

Class VpnConnectionState

  • public final class VpnConnectionState
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • arn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> arn()
        Returns:
        ARN of the VPN Connection.

      • coreNetworkArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> coreNetworkArn()
        Returns:
        ARN of the core network.

      • coreNetworkAttachmentArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> coreNetworkAttachmentArn()
        Returns:
        ARN of the core network attachment.

      • customerGatewayConfiguration

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> customerGatewayConfiguration()
        Returns:
        Configuration information for the VPN connection's customer gateway (in the native XML format).

      • customerGatewayId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> customerGatewayId()
        Returns:
        ID of the customer gateway.

      • enableAcceleration

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> enableAcceleration()
        Returns:
        Whether to enable acceleration for the VPN connection. Supports only EC2 Transit Gateway.

      • localIpv4NetworkCidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> localIpv4NetworkCidr()
        Returns:
        IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection.

      • localIpv6NetworkCidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> localIpv6NetworkCidr()
        Returns:
        IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection.

      • outsideIpAddressType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> outsideIpAddressType()
        Returns:
        Type of VPN endpoint, either a public Site-to-Site VPN or a private Site-to-Site VPN over AWS Direct Connect. Valid values are `PublicIpv4 | PrivateIpv4`.

      • presharedKeyArn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> presharedKeyArn()
        Returns:
        ARN of the Secrets Manager secret storing the pre-shared key(s) for the VPN connection. Note that even if it returns a valid Secrets Manager ARN, the pre-shared key(s) will not be stored in Secrets Manager unless the `presharedKeyStorage` argument is set to `SecretsManager`.

      • presharedKeyStorage

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> presharedKeyStorage()
        Returns:
        Storage mode for the pre-shared key (PSK). Valid values are `Standard` (stored in the Site-to-Site VPN service) or `SecretsManager` (stored in AWS Secrets Manager).

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • remoteIpv4NetworkCidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> remoteIpv4NetworkCidr()
        Returns:
        IPv4 CIDR on the AWS side of the VPN connection.

      • remoteIpv6NetworkCidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> remoteIpv6NetworkCidr()
        Returns:
        IPv6 CIDR on the AWS side of the VPN connection.

      • routes

        public java.util.Optional<com.pulumi.core.Output<java.util.List<VpnConnectionRouteArgs>>> routes()
        Returns:
        Static routes associated with the VPN connection. Detailed below.

      • staticRoutesOnly

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> staticRoutesOnly()
        Returns:
        Whether the VPN connection uses static routes exclusively. Static routes must be used for devices that don't support BGP.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Tags to apply to the connection. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • tagsAll

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tagsAll()
        Returns:
        Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.

      • transitGatewayAttachmentId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> transitGatewayAttachmentId()
        Returns:
        When associated with an EC2 Transit Gateway (`transitGatewayId` argument), the attachment ID. See also the `aws.ec2.Tag` resource for tagging the EC2 Transit Gateway VPN Attachment.

      • transitGatewayId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> transitGatewayId()
        Returns:
        ID of the EC2 Transit Gateway.

      • transportTransitGatewayAttachmentId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> transportTransitGatewayAttachmentId()
        Returns:
        Attachment ID of the Transit Gateway attachment to Direct Connect Gateway. Required when `outsideIpAddressType` is set to `PrivateIpv4`. The ID is obtained through a data source only.

      • tunnel1Address

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1Address()
        Returns:
        Public IP address of the first VPN tunnel.

      • tunnel1BgpAsn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1BgpAsn()
        Returns:
        BGP ASN number of the first VPN tunnel.

      • tunnel1BgpHoldtime

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel1BgpHoldtime()
        Returns:
        BGP holdtime of the first VPN tunnel.

      • tunnel1CgwInsideAddress

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1CgwInsideAddress()
        Returns:
        RFC 6890 link-local address of the first VPN tunnel (Customer Gateway Side).

      • tunnel1DpdTimeoutAction

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1DpdTimeoutAction()
        Returns:
        Action to take after DPD timeout occurs for the first VPN tunnel. Specify restart to restart the IKE initiation. Specify clear to end the IKE session. Valid values are `clear | none | restart`.

      • tunnel1DpdTimeoutSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel1DpdTimeoutSeconds()
        Returns:
        Number of seconds after which a DPD timeout occurs for the first VPN tunnel. Valid value is equal or higher than `30`.

      • tunnel1EnableTunnelLifecycleControl

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> tunnel1EnableTunnelLifecycleControl()
        Returns:
        Whether to enable the tunnel endpoint lifecycle control feature for the first VPN tunnel. Valid values are `true | false`.

      • tunnel1IkeVersions

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel1IkeVersions()
        Returns:
        IKE versions that are permitted for the first VPN tunnel. Valid values are `ikev1 | ikev2`.

      • tunnel1InsideCidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1InsideCidr()
        Returns:
        CIDR block of the inside IP addresses for the first VPN tunnel. Valid value is a size /30 CIDR block from the 169.254.0.0/16 range.

      • tunnel1InsideIpv6Cidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1InsideIpv6Cidr()
        Returns:
        Range of inside IPv6 addresses for the first VPN tunnel. Supports only EC2 Transit Gateway. Valid value is a size /126 CIDR block from the local fd00::/8 range.

      • tunnel1LogOptions

        public java.util.Optional<com.pulumi.core.Output<VpnConnectionTunnel1LogOptionsArgs>> tunnel1LogOptions()
        Returns:
        Options for logging VPN tunnel activity. See `tunnel1LogOptions` below for more details.

      • tunnel1Phase1DhGroupNumbers

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.Integer>>> tunnel1Phase1DhGroupNumbers()
        Returns:
        List of one or more Diffie-Hellman group numbers that are permitted for the first VPN tunnel for phase 1 IKE negotiations. Valid values are ` 2 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 `.

      • tunnel1Phase1EncryptionAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel1Phase1EncryptionAlgorithms()
        Returns:
        List of one or more encryption algorithms that are permitted for the first VPN tunnel for phase 1 IKE negotiations. Valid values are `AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16`.

      • tunnel1Phase1IntegrityAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel1Phase1IntegrityAlgorithms()
        Returns:
        One or more integrity algorithms that are permitted for the first VPN tunnel for phase 1 IKE negotiations. Valid values are `SHA1 | SHA2-256 | SHA2-384 | SHA2-512`.

      • tunnel1Phase1LifetimeSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel1Phase1LifetimeSeconds()
        Returns:
        Lifetime for phase 1 of the IKE negotiation for the first VPN tunnel, in seconds. Valid value is between `900` and `28800`.

      • tunnel1Phase2DhGroupNumbers

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.Integer>>> tunnel1Phase2DhGroupNumbers()
        Returns:
        List of one or more Diffie-Hellman group numbers that are permitted for the first VPN tunnel for phase 2 IKE negotiations. Valid values are `2 | 5 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24`.

      • tunnel1Phase2EncryptionAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel1Phase2EncryptionAlgorithms()
        Returns:
        List of one or more encryption algorithms that are permitted for the first VPN tunnel for phase 2 IKE negotiations. Valid values are `AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16`.

      • tunnel1Phase2IntegrityAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel1Phase2IntegrityAlgorithms()
        Returns:
        List of one or more integrity algorithms that are permitted for the first VPN tunnel for phase 2 IKE negotiations. Valid values are `SHA1 | SHA2-256 | SHA2-384 | SHA2-512`.

      • tunnel1Phase2LifetimeSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel1Phase2LifetimeSeconds()
        Returns:
        Lifetime for phase 2 of the IKE negotiation for the first VPN tunnel, in seconds. Valid value is between `900` and `3600`.

      • tunnel1PresharedKey

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1PresharedKey()
        Returns:
        Preshared key of the first VPN tunnel. The preshared key must be between 8 and 64 characters in length and cannot start with zero(0). Allowed characters are alphanumeric characters, periods(.) and underscores(_).

      • tunnel1RekeyFuzzPercentage

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel1RekeyFuzzPercentage()
        Returns:
        Percentage of the rekey window for the first VPN tunnel (determined by `tunnel1RekeyMarginTimeSeconds`) during which the rekey time is randomly selected. Valid value is between `0` and `100`.

      • tunnel1RekeyMarginTimeSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel1RekeyMarginTimeSeconds()
        Returns:
        Margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the first VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for `tunnel1RekeyFuzzPercentage`. Valid value is between `60` and half of `tunnel1Phase2LifetimeSeconds`.

      • tunnel1ReplayWindowSize

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel1ReplayWindowSize()
        Returns:
        Number of packets in an IKE replay window for the first VPN tunnel. Valid value is between `64` and `2048`.

      • tunnel1StartupAction

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1StartupAction()
        Returns:
        Action to take when the establishing the tunnel for the first VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify start for AWS to initiate the IKE negotiation. Valid values are `add | start`.

      • tunnel1VgwInsideAddress

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel1VgwInsideAddress()
        Returns:
        RFC 6890 link-local address of the first VPN tunnel (VPN Gateway Side).

      • tunnel2Address

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2Address()
        Returns:
        Public IP address of the second VPN tunnel.

      • tunnel2BgpAsn

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2BgpAsn()
        Returns:
        BGP ASN number of the second VPN tunnel.

      • tunnel2BgpHoldtime

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel2BgpHoldtime()
        Returns:
        BGP holdtime of the second VPN tunnel.

      • tunnel2CgwInsideAddress

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2CgwInsideAddress()
        Returns:
        RFC 6890 link-local address of the second VPN tunnel (Customer Gateway Side).

      • tunnel2DpdTimeoutAction

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2DpdTimeoutAction()
        Returns:
        Action to take after DPD timeout occurs for the second VPN tunnel. Specify restart to restart the IKE initiation. Specify clear to end the IKE session. Valid values are `clear | none | restart`.

      • tunnel2DpdTimeoutSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel2DpdTimeoutSeconds()
        Returns:
        Number of seconds after which a DPD timeout occurs for the second VPN tunnel. Valid value is equal or higher than `30`.

      • tunnel2EnableTunnelLifecycleControl

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> tunnel2EnableTunnelLifecycleControl()
        Returns:
        Whether to enable the tunnel endpoint lifecycle control feature for the second VPN tunnel. Valid values are `true | false`.

      • tunnel2IkeVersions

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel2IkeVersions()
        Returns:
        IKE versions that are permitted for the second VPN tunnel. Valid values are `ikev1 | ikev2`.

      • tunnel2InsideCidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2InsideCidr()
        Returns:
        CIDR block of the inside IP addresses for the second VPN tunnel. Valid value is a size /30 CIDR block from the 169.254.0.0/16 range.

      • tunnel2InsideIpv6Cidr

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2InsideIpv6Cidr()
        Returns:
        Range of inside IPv6 addresses for the second VPN tunnel. Supports only EC2 Transit Gateway. Valid value is a size /126 CIDR block from the local fd00::/8 range.

      • tunnel2LogOptions

        public java.util.Optional<com.pulumi.core.Output<VpnConnectionTunnel2LogOptionsArgs>> tunnel2LogOptions()
        Returns:
        Options for logging VPN tunnel activity. See `tunnel2LogOptions` below for more details.

      • tunnel2Phase1DhGroupNumbers

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.Integer>>> tunnel2Phase1DhGroupNumbers()
        Returns:
        List of one or more Diffie-Hellman group numbers that are permitted for the second VPN tunnel for phase 1 IKE negotiations. Valid values are ` 2 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 `.

      • tunnel2Phase1EncryptionAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel2Phase1EncryptionAlgorithms()
        Returns:
        List of one or more encryption algorithms that are permitted for the second VPN tunnel for phase 1 IKE negotiations. Valid values are `AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16`.

      • tunnel2Phase1IntegrityAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel2Phase1IntegrityAlgorithms()
        Returns:
        One or more integrity algorithms that are permitted for the second VPN tunnel for phase 1 IKE negotiations. Valid values are `SHA1 | SHA2-256 | SHA2-384 | SHA2-512`.

      • tunnel2Phase1LifetimeSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel2Phase1LifetimeSeconds()
        Returns:
        Lifetime for phase 1 of the IKE negotiation for the second VPN tunnel, in seconds. Valid value is between `900` and `28800`.

      • tunnel2Phase2DhGroupNumbers

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.Integer>>> tunnel2Phase2DhGroupNumbers()
        Returns:
        List of one or more Diffie-Hellman group numbers that are permitted for the second VPN tunnel for phase 2 IKE negotiations. Valid values are `2 | 5 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24`.

      • tunnel2Phase2EncryptionAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel2Phase2EncryptionAlgorithms()
        Returns:
        List of one or more encryption algorithms that are permitted for the second VPN tunnel for phase 2 IKE negotiations. Valid values are `AES128 | AES256 | AES128-GCM-16 | AES256-GCM-16`.

      • tunnel2Phase2IntegrityAlgorithms

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> tunnel2Phase2IntegrityAlgorithms()
        Returns:
        List of one or more integrity algorithms that are permitted for the second VPN tunnel for phase 2 IKE negotiations. Valid values are `SHA1 | SHA2-256 | SHA2-384 | SHA2-512`.

      • tunnel2Phase2LifetimeSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel2Phase2LifetimeSeconds()
        Returns:
        Lifetime for phase 2 of the IKE negotiation for the second VPN tunnel, in seconds. Valid value is between `900` and `3600`.

      • tunnel2PresharedKey

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2PresharedKey()
        Returns:
        Preshared key of the second VPN tunnel. The preshared key must be between 8 and 64 characters in length and cannot start with zero(0). Allowed characters are alphanumeric characters, periods(.) and underscores(_).

      • tunnel2RekeyFuzzPercentage

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel2RekeyFuzzPercentage()
        Returns:
        Percentage of the rekey window for the second VPN tunnel (determined by `tunnel2RekeyMarginTimeSeconds`) during which the rekey time is randomly selected. Valid value is between `0` and `100`.

      • tunnel2RekeyMarginTimeSeconds

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel2RekeyMarginTimeSeconds()
        Returns:
        Margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the second VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for `tunnel2RekeyFuzzPercentage`. Valid value is between `60` and half of `tunnel2Phase2LifetimeSeconds`.

      • tunnel2ReplayWindowSize

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> tunnel2ReplayWindowSize()
        Returns:
        Number of packets in an IKE replay window for the second VPN tunnel. Valid value is between `64` and `2048`.

      • tunnel2StartupAction

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2StartupAction()
        Returns:
        Action to take when the establishing the tunnel for the second VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify start for AWS to initiate the IKE negotiation. Valid values are `add | start`.

      • tunnel2VgwInsideAddress

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnel2VgwInsideAddress()
        Returns:
        RFC 6890 link-local address of the second VPN tunnel (VPN Gateway Side).

      • tunnelBandwidth

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnelBandwidth()
        Returns:
        Desired bandwidth specification for the VPN tunnel. Valid values are `standard | large`. `standard` supports up to 1.25 Gbps per tunnel, while `large` supports up to 5 Gbps per tunnel. Not supported when `vpnGatewayId` is specified, or `enableAcceleration` is `true`.

      • tunnelInsideIpVersion

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> tunnelInsideIpVersion()
        Returns:
        Indicate whether the VPN tunnels process IPv4 or IPv6 traffic. Valid values are `ipv4 | ipv6`. `ipv6` Supports only EC2 Transit Gateway.

      • type

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> type()
        Returns:
        Type of VPN connection. The only type AWS supports at this time is "ipsec.1".

      • vgwTelemetries

        public java.util.Optional<com.pulumi.core.Output<java.util.List<VpnConnectionVgwTelemetryArgs>>> vgwTelemetries()
        Returns:
        Telemetry for the VPN tunnels. Detailed below.

      • vpnConcentratorId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> vpnConcentratorId()
        Returns:
        ID of the VPN concentrator to associate with the VPN connection.

      • vpnGatewayId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> vpnGatewayId()
        Returns:
        ID of the Virtual Private Gateway.