Package com.pulumi.aws.ec2clientvpn

Class EndpointArgs

  • public final class EndpointArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • authenticationOptions

        public com.pulumi.core.Output<java.util.List<EndpointAuthenticationOptionArgs>> authenticationOptions()
        Returns:
        Information about the authentication method to be used to authenticate clients. See `authenticationOptions` Block Reference below for details.

      • clientCidrBlock

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> clientCidrBlock()
        Returns:
        The IPv4 address range, in CIDR notation, from which to assign client IP addresses. The address range cannot overlap with the local CIDR of the VPC in which the associated subnet is located, or the routes that you add manually. The address range cannot be changed after the Client VPN endpoint has been created. The CIDR block should be /22 or greater. When `trafficIpAddressType` is set to `ipv6`, it must not be specified. Otherwise, it is required.

      • clientConnectOptions

        public java.util.Optional<com.pulumi.core.Output<EndpointClientConnectOptionsArgs>> clientConnectOptions()
        Returns:
        The options for managing connection authorization for new client connections. See `clientConnectOptions` Block Reference below for details.

      • clientLoginBannerOptions

        public java.util.Optional<com.pulumi.core.Output<EndpointClientLoginBannerOptionsArgs>> clientLoginBannerOptions()
        Returns:
        Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established. See `clientLoginBannerOptions` Block Reference below for details.

      • clientRouteEnforcementOptions

        public java.util.Optional<com.pulumi.core.Output<EndpointClientRouteEnforcementOptionsArgs>> clientRouteEnforcementOptions()
        Returns:
        Options for enforce administrator defined routes on devices connected through the VPN. See `clientRouteEnforcementOptions` Block Reference below for details.

      • connectionLogOptions

        public com.pulumi.core.Output<EndpointConnectionLogOptionsArgs> connectionLogOptions()
        Returns:
        Information about the client connection logging options. See `connectionLogOptions` Block Reference below for details.

      • description

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> description()
        Returns:
        A brief description of the Client VPN endpoint.

      • disconnectOnSessionTimeout

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> disconnectOnSessionTimeout()
        Returns:
        Indicates whether the client VPN session is disconnected after the maximum `sessionTimeoutHours` is reached. If `true`, users are prompted to reconnect client VPN. If `false`, client VPN attempts to reconnect automatically. The default value is `false`.

      • dnsServers

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> dnsServers()
        Returns:
        Information about the DNS servers to be used for DNS resolution. A Client VPN endpoint can have up to two DNS servers. If no DNS server is specified, the DNS address of the connecting device is used.

      • endpointIpAddressType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> endpointIpAddressType()
        Returns:
        IP address type for the Client VPN endpoint. Valid values are `ipv4`, `ipv6`, or `dual-stack`. Defaults to `ipv4`.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • securityGroupIds

        public java.util.Optional<com.pulumi.core.Output<java.util.List<java.lang.String>>> securityGroupIds()
        Returns:
        The IDs of one or more security groups to apply to the target network. You must also specify the ID of the VPC that contains the security groups. Conflicts with `transitGatewayConfiguration`.

      • selfServicePortal

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> selfServicePortal()
        Returns:
        Specify whether to enable the self-service portal for the Client VPN endpoint. Values can be `enabled` or `disabled`. Default value is `disabled`.

      • serverCertificateArn

        public com.pulumi.core.Output<java.lang.String> serverCertificateArn()
        Returns:
        The ARN of the ACM server certificate.

      • sessionTimeoutHours

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> sessionTimeoutHours()
        Returns:
        The maximum session duration is a trigger by which end-users are required to re-authenticate prior to establishing a VPN session. Default value is `24` - Valid values: `8 | 10 | 12 | 24`

      • splitTunnel

        public java.util.Optional<com.pulumi.core.Output<java.lang.Boolean>> splitTunnel()
        Returns:
        Indicates whether split-tunnel is enabled on VPN endpoint. Default value is `false`.

      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        A mapping of tags to assign to the resource. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • trafficIpAddressType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> trafficIpAddressType()
        Returns:
        IP address type for traffic within the Client VPN tunnel. Valid values are `ipv4`, `ipv6`, or `dual-stack`. Defaults to `ipv4`. When it is set to `ipv6`, `clientCidrBlock` must not be specified.

      • transitGatewayConfiguration

        public java.util.Optional<com.pulumi.core.Output<EndpointTransitGatewayConfigurationArgs>> transitGatewayConfiguration()
        Returns:
        Configuration block for associating the Client VPN endpoint with a Transit Gateway. Conflicts with `vpcId` and `securityGroupIds`. See `transitGatewayConfiguration` Block Reference below for details.

      • transportProtocol

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> transportProtocol()
        Returns:
        The transport protocol to be used by the VPN session. Default value is `udp`.

      • vpcId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> vpcId()
        Returns:
        The ID of the VPC to associate with the Client VPN endpoint. If no security group IDs are specified in the request, the default security group for the VPC is applied. Conflicts with `transitGatewayConfiguration`.

      • vpnPort

        public java.util.Optional<com.pulumi.core.Output<java.lang.Integer>> vpnPort()
        Returns:
        The port number for the Client VPN endpoint. Valid values are `443` and `1194`. Default value is `443`.