AWS AWSCloudFormation documentation change
Summary
Added ClientRouteEnforcementOptions to enforce VPN client routing policies and prevent traffic outside the tunnel.
Security assessment
Enforces network traffic policies to prevent data exfiltration, improving security posture. This is a proactive security feature addition, not a response to a specific vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.md b/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.md index f8129fcd8..5c4f12a94 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.md +++ b//AWSCloudFormation/latest/UserGuide/aws-resource-ec2-clientvpnendpoint.md @@ -22,0 +23 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "ClientRouteEnforcementOptions" : [ClientRouteEnforcementOptions](./aws-properties-ec2-clientvpnendpoint-clientrouteenforcementoptions.html), @@ -51,0 +53,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + ClientRouteEnforcementOptions: + [ClientRouteEnforcementOptions](./aws-properties-ec2-clientvpnendpoint-clientrouteenforcementoptions.html) @@ -116,0 +120,13 @@ _Required_ : No +`ClientRouteEnforcementOptions` + + +Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel. + +Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table, reverting it back to the expected route configurations. + +_Required_ : No + + _Type_ : [ClientRouteEnforcementOptions](./aws-properties-ec2-clientvpnendpoint-clientrouteenforcementoptions.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) +