aws ec2 authorize-client-vpn-ingress

Adds an ingress authorization rule to a Client VPN endpoint. AWS CLI reference

1 example 7 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To add an authorization rule for a Client VPN endpoint

The following authorize-client-vpn-ingress example adds an ingress authorization rule that permits all clients to access the internet (0.0.0.0/0).

aws ec2 authorize-client-vpn-ingress --client-vpn-endpoint-id cvpn-endpoint-123456789012abcde --target-network-cidr 0.0.0.0/0 --authorize-all-groups

Identify

--client-vpn-endpoint-idThe ID of the Client VPN endpoint.

--target-network-cidrThe IPv4 address range, in CIDR notation, of the network for which access is being authorized.

--authorize-all-groupsIndicates whether to grant access to all clients.

Its output

{
    "Status": {
        "Code": "authorizing"
    }
}

For more information, see Authorization Rules in the AWS Client VPN Administrator Guide.

Options

7 in the AWS CLI reference

--access-group-idThe ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group.

--authorize-all-groupsIndicates whether to grant access to all clients.

--client-tokenUnique, case-sensitive identifier that you provide to ensure the idempotency of the request.

--client-vpn-endpoint-idThe ID of the Client VPN endpoint.

--descriptionA brief description of the authorization rule.

--dry-runChecks whether you have the required permissions for the action, without actually making the request, and provides an error response.

--target-network-cidrThe IPv4 address range, in CIDR notation, of the network for which access is being authorized.