AWS v6.73.0 published on Wednesday, Mar 19, 2025 by Pulumi
aws.ec2clientvpn.getEndpoint
Explore with Pulumi AI
Get information on an EC2 Client VPN endpoint.
Example Usage
By Filter
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = aws.ec2clientvpn.getEndpoint({
    filters: [{
        name: "tag:Name",
        values: ["ExampleVpn"],
    }],
});
import pulumi
import pulumi_aws as aws
example = aws.ec2clientvpn.get_endpoint(filters=[{
    "name": "tag:Name",
    "values": ["ExampleVpn"],
}])
package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ec2clientvpn"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ec2clientvpn.LookupEndpoint(ctx, &ec2clientvpn.LookupEndpointArgs{
			Filters: []ec2clientvpn.GetEndpointFilter{
				{
					Name: "tag:Name",
					Values: []string{
						"ExampleVpn",
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() => 
{
    var example = Aws.Ec2ClientVpn.GetEndpoint.Invoke(new()
    {
        Filters = new[]
        {
            new Aws.Ec2ClientVpn.Inputs.GetEndpointFilterInputArgs
            {
                Name = "tag:Name",
                Values = new[]
                {
                    "ExampleVpn",
                },
            },
        },
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ec2clientvpn.Ec2clientvpnFunctions;
import com.pulumi.aws.ec2clientvpn.inputs.GetEndpointArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = Ec2clientvpnFunctions.getEndpoint(GetEndpointArgs.builder()
            .filters(GetEndpointFilterArgs.builder()
                .name("tag:Name")
                .values("ExampleVpn")
                .build())
            .build());
    }
}
variables:
  example:
    fn::invoke:
      function: aws:ec2clientvpn:getEndpoint
      arguments:
        filters:
          - name: tag:Name
            values:
              - ExampleVpn
By Identifier
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = aws.ec2clientvpn.getEndpoint({
    clientVpnEndpointId: "cvpn-endpoint-083cf50d6eb314f21",
});
import pulumi
import pulumi_aws as aws
example = aws.ec2clientvpn.get_endpoint(client_vpn_endpoint_id="cvpn-endpoint-083cf50d6eb314f21")
package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ec2clientvpn"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ec2clientvpn.LookupEndpoint(ctx, &ec2clientvpn.LookupEndpointArgs{
			ClientVpnEndpointId: pulumi.StringRef("cvpn-endpoint-083cf50d6eb314f21"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() => 
{
    var example = Aws.Ec2ClientVpn.GetEndpoint.Invoke(new()
    {
        ClientVpnEndpointId = "cvpn-endpoint-083cf50d6eb314f21",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ec2clientvpn.Ec2clientvpnFunctions;
import com.pulumi.aws.ec2clientvpn.inputs.GetEndpointArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var example = Ec2clientvpnFunctions.getEndpoint(GetEndpointArgs.builder()
            .clientVpnEndpointId("cvpn-endpoint-083cf50d6eb314f21")
            .build());
    }
}
variables:
  example:
    fn::invoke:
      function: aws:ec2clientvpn:getEndpoint
      arguments:
        clientVpnEndpointId: cvpn-endpoint-083cf50d6eb314f21
Using getEndpoint
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getEndpoint(args: GetEndpointArgs, opts?: InvokeOptions): Promise<GetEndpointResult>
function getEndpointOutput(args: GetEndpointOutputArgs, opts?: InvokeOptions): Output<GetEndpointResult>def get_endpoint(client_vpn_endpoint_id: Optional[str] = None,
                 filters: Optional[Sequence[GetEndpointFilter]] = None,
                 tags: Optional[Mapping[str, str]] = None,
                 opts: Optional[InvokeOptions] = None) -> GetEndpointResult
def get_endpoint_output(client_vpn_endpoint_id: Optional[pulumi.Input[str]] = None,
                 filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetEndpointFilterArgs]]]] = None,
                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                 opts: Optional[InvokeOptions] = None) -> Output[GetEndpointResult]func LookupEndpoint(ctx *Context, args *LookupEndpointArgs, opts ...InvokeOption) (*LookupEndpointResult, error)
func LookupEndpointOutput(ctx *Context, args *LookupEndpointOutputArgs, opts ...InvokeOption) LookupEndpointResultOutput> Note: This function is named LookupEndpoint in the Go SDK.
public static class GetEndpoint 
{
    public static Task<GetEndpointResult> InvokeAsync(GetEndpointArgs args, InvokeOptions? opts = null)
    public static Output<GetEndpointResult> Invoke(GetEndpointInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetEndpointResult> getEndpoint(GetEndpointArgs args, InvokeOptions options)
public static Output<GetEndpointResult> getEndpoint(GetEndpointArgs args, InvokeOptions options)
fn::invoke:
  function: aws:ec2clientvpn/getEndpoint:getEndpoint
  arguments:
    # arguments dictionaryThe following arguments are supported:
- ClientVpn stringEndpoint Id 
- ID of the Client VPN endpoint.
- Filters
List<GetEndpoint Filter> 
- One or more configuration blocks containing name-values filters. Detailed below.
- Dictionary<string, string>
- Map of tags, each pair of which must exactly match a pair on the desired endpoint.
- ClientVpn stringEndpoint Id 
- ID of the Client VPN endpoint.
- Filters
[]GetEndpoint Filter 
- One or more configuration blocks containing name-values filters. Detailed below.
- map[string]string
- Map of tags, each pair of which must exactly match a pair on the desired endpoint.
- clientVpn StringEndpoint Id 
- ID of the Client VPN endpoint.
- filters
List<GetEndpoint Filter> 
- One or more configuration blocks containing name-values filters. Detailed below.
- Map<String,String>
- Map of tags, each pair of which must exactly match a pair on the desired endpoint.
- clientVpn stringEndpoint Id 
- ID of the Client VPN endpoint.
- filters
GetEndpoint Filter[] 
- One or more configuration blocks containing name-values filters. Detailed below.
- {[key: string]: string}
- Map of tags, each pair of which must exactly match a pair on the desired endpoint.
- client_vpn_ strendpoint_ id 
- ID of the Client VPN endpoint.
- filters
Sequence[GetEndpoint Filter] 
- One or more configuration blocks containing name-values filters. Detailed below.
- Mapping[str, str]
- Map of tags, each pair of which must exactly match a pair on the desired endpoint.
- clientVpn StringEndpoint Id 
- ID of the Client VPN endpoint.
- filters List<Property Map>
- One or more configuration blocks containing name-values filters. Detailed below.
- Map<String>
- Map of tags, each pair of which must exactly match a pair on the desired endpoint.
getEndpoint Result
The following output properties are available:
- Arn string
- The ARN of the Client VPN endpoint.
- AuthenticationOptions List<GetEndpoint Authentication Option> 
- Information about the authentication method used by the Client VPN endpoint.
- ClientCidr stringBlock 
- IPv4 address range, in CIDR notation, from which client IP addresses are assigned.
- ClientConnect List<GetOptions Endpoint Client Connect Option> 
- The options for managing connection authorization for new client connections.
- 
List<GetEndpoint Client Login Banner Option> 
- Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
- ClientVpn stringEndpoint Id 
- ConnectionLog List<GetOptions Endpoint Connection Log Option> 
- Information about the client connection logging options for the Client VPN endpoint.
- Description string
- Brief description of the endpoint.
- DnsName string
- DNS name to be used by clients when connecting to the Client VPN endpoint.
- DnsServers List<string>
- Information about the DNS servers to be used for DNS resolution.
- Id string
- The provider-assigned unique ID for this managed resource.
- SecurityGroup List<string>Ids 
- IDs of the security groups for the target network associated with the Client VPN endpoint.
- SelfService stringPortal 
- Whether the self-service portal for the Client VPN endpoint is enabled.
- SelfService stringPortal Url 
- The URL of the self-service portal.
- ServerCertificate stringArn 
- The ARN of the server certificate.
- SessionTimeout intHours 
- The maximum VPN session duration time in hours.
- SplitTunnel bool
- Whether split-tunnel is enabled in the AWS Client VPN endpoint.
- Dictionary<string, string>
- TransportProtocol string
- Transport protocol used by the Client VPN endpoint.
- VpcId string
- ID of the VPC associated with the Client VPN endpoint.
- VpnPort int
- Port number for the Client VPN endpoint.
- Filters
List<GetEndpoint Filter> 
- Arn string
- The ARN of the Client VPN endpoint.
- AuthenticationOptions []GetEndpoint Authentication Option 
- Information about the authentication method used by the Client VPN endpoint.
- ClientCidr stringBlock 
- IPv4 address range, in CIDR notation, from which client IP addresses are assigned.
- ClientConnect []GetOptions Endpoint Client Connect Option 
- The options for managing connection authorization for new client connections.
- 
[]GetEndpoint Client Login Banner Option 
- Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
- ClientVpn stringEndpoint Id 
- ConnectionLog []GetOptions Endpoint Connection Log Option 
- Information about the client connection logging options for the Client VPN endpoint.
- Description string
- Brief description of the endpoint.
- DnsName string
- DNS name to be used by clients when connecting to the Client VPN endpoint.
- DnsServers []string
- Information about the DNS servers to be used for DNS resolution.
- Id string
- The provider-assigned unique ID for this managed resource.
- SecurityGroup []stringIds 
- IDs of the security groups for the target network associated with the Client VPN endpoint.
- SelfService stringPortal 
- Whether the self-service portal for the Client VPN endpoint is enabled.
- SelfService stringPortal Url 
- The URL of the self-service portal.
- ServerCertificate stringArn 
- The ARN of the server certificate.
- SessionTimeout intHours 
- The maximum VPN session duration time in hours.
- SplitTunnel bool
- Whether split-tunnel is enabled in the AWS Client VPN endpoint.
- map[string]string
- TransportProtocol string
- Transport protocol used by the Client VPN endpoint.
- VpcId string
- ID of the VPC associated with the Client VPN endpoint.
- VpnPort int
- Port number for the Client VPN endpoint.
- Filters
[]GetEndpoint Filter 
- arn String
- The ARN of the Client VPN endpoint.
- authenticationOptions List<GetEndpoint Authentication Option> 
- Information about the authentication method used by the Client VPN endpoint.
- clientCidr StringBlock 
- IPv4 address range, in CIDR notation, from which client IP addresses are assigned.
- clientConnect List<GetOptions Endpoint Client Connect Option> 
- The options for managing connection authorization for new client connections.
- 
List<GetEndpoint Client Login Banner Option> 
- Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
- clientVpn StringEndpoint Id 
- connectionLog List<GetOptions Endpoint Connection Log Option> 
- Information about the client connection logging options for the Client VPN endpoint.
- description String
- Brief description of the endpoint.
- dnsName String
- DNS name to be used by clients when connecting to the Client VPN endpoint.
- dnsServers List<String>
- Information about the DNS servers to be used for DNS resolution.
- id String
- The provider-assigned unique ID for this managed resource.
- securityGroup List<String>Ids 
- IDs of the security groups for the target network associated with the Client VPN endpoint.
- selfService StringPortal 
- Whether the self-service portal for the Client VPN endpoint is enabled.
- selfService StringPortal Url 
- The URL of the self-service portal.
- serverCertificate StringArn 
- The ARN of the server certificate.
- sessionTimeout IntegerHours 
- The maximum VPN session duration time in hours.
- splitTunnel Boolean
- Whether split-tunnel is enabled in the AWS Client VPN endpoint.
- Map<String,String>
- transportProtocol String
- Transport protocol used by the Client VPN endpoint.
- vpcId String
- ID of the VPC associated with the Client VPN endpoint.
- vpnPort Integer
- Port number for the Client VPN endpoint.
- filters
List<GetEndpoint Filter> 
- arn string
- The ARN of the Client VPN endpoint.
- authenticationOptions GetEndpoint Authentication Option[] 
- Information about the authentication method used by the Client VPN endpoint.
- clientCidr stringBlock 
- IPv4 address range, in CIDR notation, from which client IP addresses are assigned.
- clientConnect GetOptions Endpoint Client Connect Option[] 
- The options for managing connection authorization for new client connections.
- 
GetEndpoint Client Login Banner Option[] 
- Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
- clientVpn stringEndpoint Id 
- connectionLog GetOptions Endpoint Connection Log Option[] 
- Information about the client connection logging options for the Client VPN endpoint.
- description string
- Brief description of the endpoint.
- dnsName string
- DNS name to be used by clients when connecting to the Client VPN endpoint.
- dnsServers string[]
- Information about the DNS servers to be used for DNS resolution.
- id string
- The provider-assigned unique ID for this managed resource.
- securityGroup string[]Ids 
- IDs of the security groups for the target network associated with the Client VPN endpoint.
- selfService stringPortal 
- Whether the self-service portal for the Client VPN endpoint is enabled.
- selfService stringPortal Url 
- The URL of the self-service portal.
- serverCertificate stringArn 
- The ARN of the server certificate.
- sessionTimeout numberHours 
- The maximum VPN session duration time in hours.
- splitTunnel boolean
- Whether split-tunnel is enabled in the AWS Client VPN endpoint.
- {[key: string]: string}
- transportProtocol string
- Transport protocol used by the Client VPN endpoint.
- vpcId string
- ID of the VPC associated with the Client VPN endpoint.
- vpnPort number
- Port number for the Client VPN endpoint.
- filters
GetEndpoint Filter[] 
- arn str
- The ARN of the Client VPN endpoint.
- authentication_options Sequence[GetEndpoint Authentication Option] 
- Information about the authentication method used by the Client VPN endpoint.
- client_cidr_ strblock 
- IPv4 address range, in CIDR notation, from which client IP addresses are assigned.
- client_connect_ Sequence[Getoptions Endpoint Client Connect Option] 
- The options for managing connection authorization for new client connections.
- 
Sequence[GetEndpoint Client Login Banner Option] 
- Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
- client_vpn_ strendpoint_ id 
- connection_log_ Sequence[Getoptions Endpoint Connection Log Option] 
- Information about the client connection logging options for the Client VPN endpoint.
- description str
- Brief description of the endpoint.
- dns_name str
- DNS name to be used by clients when connecting to the Client VPN endpoint.
- dns_servers Sequence[str]
- Information about the DNS servers to be used for DNS resolution.
- id str
- The provider-assigned unique ID for this managed resource.
- security_group_ Sequence[str]ids 
- IDs of the security groups for the target network associated with the Client VPN endpoint.
- self_service_ strportal 
- Whether the self-service portal for the Client VPN endpoint is enabled.
- self_service_ strportal_ url 
- The URL of the self-service portal.
- server_certificate_ strarn 
- The ARN of the server certificate.
- session_timeout_ inthours 
- The maximum VPN session duration time in hours.
- split_tunnel bool
- Whether split-tunnel is enabled in the AWS Client VPN endpoint.
- Mapping[str, str]
- transport_protocol str
- Transport protocol used by the Client VPN endpoint.
- vpc_id str
- ID of the VPC associated with the Client VPN endpoint.
- vpn_port int
- Port number for the Client VPN endpoint.
- filters
Sequence[GetEndpoint Filter] 
- arn String
- The ARN of the Client VPN endpoint.
- authenticationOptions List<Property Map>
- Information about the authentication method used by the Client VPN endpoint.
- clientCidr StringBlock 
- IPv4 address range, in CIDR notation, from which client IP addresses are assigned.
- clientConnect List<Property Map>Options 
- The options for managing connection authorization for new client connections.
- List<Property Map>
- Options for enabling a customizable text banner that will be displayed on AWS provided clients when a VPN session is established.
- clientVpn StringEndpoint Id 
- connectionLog List<Property Map>Options 
- Information about the client connection logging options for the Client VPN endpoint.
- description String
- Brief description of the endpoint.
- dnsName String
- DNS name to be used by clients when connecting to the Client VPN endpoint.
- dnsServers List<String>
- Information about the DNS servers to be used for DNS resolution.
- id String
- The provider-assigned unique ID for this managed resource.
- securityGroup List<String>Ids 
- IDs of the security groups for the target network associated with the Client VPN endpoint.
- selfService StringPortal 
- Whether the self-service portal for the Client VPN endpoint is enabled.
- selfService StringPortal Url 
- The URL of the self-service portal.
- serverCertificate StringArn 
- The ARN of the server certificate.
- sessionTimeout NumberHours 
- The maximum VPN session duration time in hours.
- splitTunnel Boolean
- Whether split-tunnel is enabled in the AWS Client VPN endpoint.
- Map<String>
- transportProtocol String
- Transport protocol used by the Client VPN endpoint.
- vpcId String
- ID of the VPC associated with the Client VPN endpoint.
- vpnPort Number
- Port number for the Client VPN endpoint.
- filters List<Property Map>
Supporting Types
GetEndpointAuthenticationOption   
- ActiveDirectory stringId 
- RootCertificate stringChain Arn 
- SamlProvider stringArn 
- SelfService stringSaml Provider Arn 
- Type string
- ActiveDirectory stringId 
- RootCertificate stringChain Arn 
- SamlProvider stringArn 
- SelfService stringSaml Provider Arn 
- Type string
- activeDirectory StringId 
- rootCertificate StringChain Arn 
- samlProvider StringArn 
- selfService StringSaml Provider Arn 
- type String
- activeDirectory stringId 
- rootCertificate stringChain Arn 
- samlProvider stringArn 
- selfService stringSaml Provider Arn 
- type string
- activeDirectory StringId 
- rootCertificate StringChain Arn 
- samlProvider StringArn 
- selfService StringSaml Provider Arn 
- type String
GetEndpointClientConnectOption    
- Enabled bool
- LambdaFunction stringArn 
- Enabled bool
- LambdaFunction stringArn 
- enabled Boolean
- lambdaFunction StringArn 
- enabled boolean
- lambdaFunction stringArn 
- enabled bool
- lambda_function_ strarn 
- enabled Boolean
- lambdaFunction StringArn 
GetEndpointClientLoginBannerOption     
- string
- Enabled bool
- string
- Enabled bool
- String
- enabled Boolean
- string
- enabled boolean
- str
- enabled bool
- String
- enabled Boolean
GetEndpointConnectionLogOption    
- CloudwatchLog stringGroup 
- CloudwatchLog stringStream 
- Enabled bool
- CloudwatchLog stringGroup 
- CloudwatchLog stringStream 
- Enabled bool
- cloudwatchLog StringGroup 
- cloudwatchLog StringStream 
- enabled Boolean
- cloudwatchLog stringGroup 
- cloudwatchLog stringStream 
- enabled boolean
- cloudwatch_log_ strgroup 
- cloudwatch_log_ strstream 
- enabled bool
- cloudwatchLog StringGroup 
- cloudwatchLog StringStream 
- enabled Boolean
GetEndpointFilter  
- Name string
- Name of the field to filter by, as defined by the underlying AWS API.
- Values List<string>
- Set of values that are accepted for the given field. An endpoint will be selected if any one of the given values matches.
- Name string
- Name of the field to filter by, as defined by the underlying AWS API.
- Values []string
- Set of values that are accepted for the given field. An endpoint will be selected if any one of the given values matches.
- name String
- Name of the field to filter by, as defined by the underlying AWS API.
- values List<String>
- Set of values that are accepted for the given field. An endpoint will be selected if any one of the given values matches.
- name string
- Name of the field to filter by, as defined by the underlying AWS API.
- values string[]
- Set of values that are accepted for the given field. An endpoint will be selected if any one of the given values matches.
- name str
- Name of the field to filter by, as defined by the underlying AWS API.
- values Sequence[str]
- Set of values that are accepted for the given field. An endpoint will be selected if any one of the given values matches.
- name String
- Name of the field to filter by, as defined by the underlying AWS API.
- values List<String>
- Set of values that are accepted for the given field. An endpoint will be selected if any one of the given values matches.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the awsTerraform Provider.