AWS cli documentation change

Service: cli · 2026-04-22 · Documentation low

File: cli/latest/reference/ec2/create-client-vpn-endpoint.md

Summary

Added new --transit-gateway-configuration parameter to associate Client VPN endpoints with Transit Gateways instead of VPCs, and added 'pending' status for Transit Gateway attachment acceptance

Security assessment

This change adds a new networking feature (Transit Gateway integration) but doesn't address any security vulnerabilities or weaknesses. The 'pending' status indicates a new operational state, not a security fix. No security implications are mentioned in the change.

Diff

diff --git a/cli/latest/reference/ec2/create-client-vpn-endpoint.md b/cli/latest/reference/ec2/create-client-vpn-endpoint.md
index 1f2f0dd55..3452dd9e6 100644
--- a//cli/latest/reference/ec2/create-client-vpn-endpoint.md
+++ b//cli/latest/reference/ec2/create-client-vpn-endpoint.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »
@@ -89,0 +90 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20
+    [--transit-gateway-configuration <value>]
@@ -614,0 +616,36 @@ JSON Syntax:
+`--transit-gateway-configuration` (structure)
+
+> The Transit Gateway configuration for the Client VPN endpoint. Use this parameter to associate the endpoint with a Transit Gateway instead of a VPC. You cannot specify both `TransitGatewayConfiguration` and `VpcId` /`SecurityGroupIds` .
+> 
+> TransitGatewayId -> (string)
+>
+>> The ID of the Transit Gateway to associate with the Client VPN endpoint.
+> 
+> AvailabilityZones -> (list)
+>
+>> The Availability Zone names for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both `AvailabilityZones` and `AvailabilityZoneIds` .
+>> 
+>> (string)
+> 
+> AvailabilityZoneIds -> (list)
+>
+>> The Availability Zone IDs for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both `AvailabilityZones` and `AvailabilityZoneIds` .
+>> 
+>> (string)
+
+Shorthand Syntax:
+    
+    
+    TransitGatewayId=string,AvailabilityZones=string,string,AvailabilityZoneIds=string,string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "TransitGatewayId": "string",
+      "AvailabilityZones": ["string", ...],
+      "AvailabilityZoneIds": ["string", ...]
+    }
+    
+
@@ -777,0 +815 @@ Status -> (structure)
+>>   * `pending` \- The Client VPN endpoint has been created with a Transit Gateway configuration and is waiting for the Transit Gateway attachment to be accepted. The Client VPN endpoint cannot accept connections.
@@ -786,0 +825 @@ Status -> (structure)
+>>   * `pending`
@@ -808 +847 @@ DnsName -> (string)
-  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.34 Command Reference](../../index.html) »