Class VpnConnectionConfig

NetworkConfig / CustomerGatewayConfig / VpnConnectionConfig

Site-to-site VPN Connection configuration. Use this configuration to define the VPN connections that terminate either on a Transit Gateway or virtual private gateway. A VPN connection refers to the connection between your VPC and your own on-premises network. You can enable access to your remote network from your VPC by creating an AWS Site-to-Site VPN (Site-to-Site VPN) connection, and configuring routing to pass traffic through the connection.

Example

VPN termination at a Transit Gateway:

- name: accelerator-vpn
  transitGateway: Network-Main
  routeTableAssociations:
    - Network-Main-Core
  routeTablePropagations:
    - Network-Main-Core
  staticRoutesOnly: false
  # Tunnel specifications are optional
  tunnelSpecifications:
    - tunnelInsideCidr: 169.254.200.0/30
      preSharedKey: Key1-AbcXyz
    - tunnelInsideCidr: 169.254.200.100/30
      preSharedKey: Key1-AbcXyz

VPN termination at a VPC:

- name: accelerator-vpn
  vpc: Inspection-Vpc
  staticRoutesOnly: false
  # Tunnel specifications are optional
  tunnelSpecifications:
    - tunnelInsideCidr: 169.254.200.0/30
      preSharedKey: Key1-AbcXyz
    - tunnelInsideCidr: 169.254.200.100/30
      preSharedKey: Key1-AbcXyz

Hierarchy

  • VpnConnectionConfig

Implements

Constructors

constructor

Properties

name routeTableAssociations routeTablePropagations staticRoutesOnly tags transitGateway tunnelSpecifications vpc

Constructors

constructor

Properties

Readonly name

name: string = ''

The name of the VPN Connection.

The value of this property will be utilized as the logical id for this resource. Any references to this object should specify this value.

Remarks

CAUTION: Changing this property value after initial deployment causes the VPN to be recreated. Please be aware that any downstream dependencies may cause this property update to fail.

Readonly routeTableAssociations

routeTableAssociations: undefined | string[] = undefined

(OPTIONAL) An array of Transit Gateway route table names to associate the VPN attachment to

Remarks

This is the name property of the Transit Gateway route table

This property should only be defined if creating a VPN connection to a Transit Gateway. Leave undefined for VPN connections to virtual private gateways.

Readonly routeTablePropagations

routeTablePropagations: undefined | string[] = undefined

(OPTIONAL) An array of Transit Gateway route table names to propagate the VPN attachment to

Remarks

This is the name property of the Transit Gateway route table

This property should only be defined if creating a VPN connection to a Transit Gateway. Leave undefined for VPN connections to virtual private gateways.

Readonly staticRoutesOnly

staticRoutesOnly: undefined | boolean = undefined

(OPTIONAL) If creating a VPN connection for a device that doesn't support Border Gateway Protocol (BGP) declare true as a value, otherwise, use false.

Remarks

CAUTION: Changing this property value after initial deployment causes the VPN to be recreated. Please be aware that any downstream dependencies may cause this property update to fail.

Readonly tags

tags: undefined | Tag[] = undefined

(OPTIONAL) An array of tags for the VPN Connection.

Readonly transitGateway

transitGateway: undefined | string = undefined

The logical name of the Transit Gateway that the customer Gateway is attached to so that a VPN connection is established.

Remarks

CAUTION: Changing this property value after initial deployment causes the VPN to be recreated. Please be aware that any downstream dependencies may cause this property update to fail.

Must specify either the Transit Gateway name or the Virtual Private Gateway, not both.

Readonly tunnelSpecifications

tunnelSpecifications: undefined | VpnTunnelOptionsSpecificationsConfig[] = undefined

(OPTIONAL) Define the optional VPN Tunnel configuration

See

VpnTunnelOptionsSpecificationsConfig

Readonly vpc

vpc: undefined | string = undefined

The logical name of the Virtual Private Cloud that a Virtual Private Gateway is attached to.

Remarks

CAUTION: Changing this property value after initial deployment causes the VPN to be recreated. Please be aware that any downstream dependencies may cause this property update to fail.

Must specify either the Transit Gateway name or the Virtual Private Gateway, not both.

Settings

Member Visibility

Theme

Generated using TypeDoc