---
type: resource-type
title: VPNConnection
description: aws resource type AWS::EC2::VPNConnection
name: VPNConnection
lexicon: aws
resource_type: AWS::EC2::VPNConnection
---
`AWS::EC2::VPNConnection`, a resource type of the aws lexicon.

## Properties

- `CustomerGatewayId` (`string`, required): The ID of the customer gateway at your end of the VPN connection.
- `Type` (`string`, required): The type of VPN connection.
- `EnableAcceleration` (`boolean`, optional): Indicate whether to enable acceleration for the VPN connection. Default: ``false``
- `LocalIpv4NetworkCidr` (`string`, optional): The IPv4 CIDR on the customer gateway (on-premises) side of the VPN connection. Default: ``0.0.0.0/0``
- `LocalIpv6NetworkCidr` (`string`, optional): The IPv6 CIDR on the customer gateway (on-premises) side of the VPN connection. Default: ``::/0``
- `OutsideIpAddressType` (`string`, optional): The type of IP address assigned to the outside interface of the customer gateway device. Valid values: ``PrivateIpv4`` | ``PublicIpv4`` | ``Ipv6`` Default: ``PublicIpv4``
- `PreSharedKeyStorage` (`"SecretsManager" | "Standard"`, optional): Describes the storage location for an instance store-backed AMI.
- `RemoteIpv4NetworkCidr` (`string`, optional): The IPv4 CIDR on the AWS side of the VPN connection. Default: ``0.0.0.0/0``
- `RemoteIpv6NetworkCidr` (`string`, optional): The IPv6 CIDR on the AWS side of the VPN connection. Default: ``::/0``
- `StaticRoutesOnly` (`boolean`, optional): Indicates whether the VPN connection uses static routes only. Static routes must be used for devices that don't support BGP. If you are creating a VPN connection for a device that does not support Border Gateway Protocol (BGP), you must specify ``true``.
- `Tags` (`VPNConnection_Tag[]`, optional): Any tags assigned to the VPN connection.
- `TransitGatewayId` (`string`, optional): The ID of the transit gateway associated with the VPN connection. You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both.
- `TransportTransitGatewayAttachmentId` (`string`, optional): The transit gateway attachment ID to use for the VPN tunnel. Required if ``OutsideIpAddressType`` is set to ``PrivateIpv4``.
- `TunnelBandwidth` (`"large" | "standard"`, optional): The desired bandwidth specification for the VPN tunnel, used when creating or modifying VPN connection options to set the tunnel's throughput capacity. ``standard`` supports up to 1.25 Gbps per tunnel, while ``large`` supports up to 5 Gbps per tunnel. The default value is ``standard``. Existing VPN connections without a bandwidth setting will automatically default to ``standard``.
- `TunnelInsideIpVersion` (`string`, optional): Indicate whether the VPN tunnels process IPv4 or IPv6 traffic. Default: ``ipv4``
- `VpnConcentratorId` (`string`, optional): The ID of the VPN concentrator to associate with the VPN connection.
- `VpnConnectionId` (`string`, optional)
- `VpnGatewayId` (`string`, optional): The ID of the virtual private gateway at the AWS side of the VPN connection. You must specify either ``TransitGatewayId`` or ``VpnGatewayId``, but not both.
- `VpnTunnelOptionsSpecifications` (`VPNConnection_VpnTunnelOptionsSpecification[]`, optional): The tunnel options for the VPN connection.

## Attributes

- `VpnConnectionId`