import { Value } from '../../cloudformation/Value';
import { AwsResource } from '../../cloudformation/resources/AwsResource';
/**
  Specifies an ingress authorization rule to add to a Client VPN endpoint. Ingress authorization rules act as firewall rules that grant access to networks. You must configure ingress authorization rules to enable clients to access resources in AWS or on-premises networks.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html">the AWS Docs</a>
*/
export type ClientVpnAuthorizationRule = AwsResource<'AWS::EC2::ClientVpnAuthorizationRule', ClientVpnAuthorizationRuleProperties>;
export declare function clientVpnAuthorizationRule(clientVpnAuthorizationRuleProps: ClientVpnAuthorizationRuleProperties): ClientVpnAuthorizationRule;
/**
  Specifies an ingress authorization rule to add to a Client VPN endpoint. Ingress authorization rules act as firewall rules that grant access to networks. You must configure ingress authorization rules to enable clients to access resources in AWS or on-premises networks.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnauthorizationrule.html">the AWS Docs</a>
*/
export interface ClientVpnAuthorizationRuleProperties {
    /** <code>ClientVpnEndpointId</code>  <a name="cfn-ec2-clientvpnauthorizationrule-clientvpnendpointid"></a>
  The ID of the Client VPN endpoint.<br />
  
  Required: Yes<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement">Replacement</a> */
    clientVpnEndpointId: Value<string>;
    /** <code>Description</code>  <a name="cfn-ec2-clientvpnauthorizationrule-description"></a>
  A brief description of the authorization rule.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement">Replacement</a> */
    description?: Value<string>;
    /** <code>AccessGroupId</code>  <a name="cfn-ec2-clientvpnauthorizationrule-accessgroupid"></a>
  The ID of the group to grant access to, for example, the Active Directory group or identity provider (IdP) group. Required if <code>AuthorizeAllGroups</code> is <code>false</code> or not specified.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement">Replacement</a> */
    accessGroupId?: Value<string>;
    /** <code>TargetNetworkCidr</code>  <a name="cfn-ec2-clientvpnauthorizationrule-targetnetworkcidr"></a>
  The IPv4 address range, in CIDR notation, of the network for which access is being authorized.<br />
  
  Required: Yes<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement">Replacement</a> */
    targetNetworkCidr: Value<string>;
    /** <code>AuthorizeAllGroups</code>  <a name="cfn-ec2-clientvpnauthorizationrule-authorizeallgroups"></a>
  Indicates whether to grant access to all clients. Specify <code>true</code> to grant all clients who successfully establish a VPN connection access to the network. Must be set to <code>true</code> if <code>AccessGroupId</code> is not specified.<br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement">Replacement</a> */
    authorizeAllGroups?: Value<boolean>;
}
