---
type: resource-type
title: VerifiedAccessEndpoint
description: aws resource type AWS::EC2::VerifiedAccessEndpoint
name: VerifiedAccessEndpoint
lexicon: aws
resource_type: AWS::EC2::VerifiedAccessEndpoint
---
`AWS::EC2::VerifiedAccessEndpoint`, a resource type of the aws lexicon.

## Properties

- `AttachmentType` (`string`, required): The type of attachment used to provide connectivity between the AWS Verified Access endpoint and the application.
- `EndpointType` (`string`, required): The type of AWS Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.The type of AWS Verified Access endpoint. Incoming application requests will be sent to an IP address, load balancer or a network interface depending on the endpoint type specified.
- `VerifiedAccessGroupId` (`string`, required): The ID of the AWS Verified Access group.
- `ApplicationDomain` (`string`, optional): The DNS name for users to reach your application.
- `CidrOptions` (`VerifiedAccessEndpoint_CidrOptions`, optional): The options for cidr type endpoint.
- `CreationTime` (`string`, optional): The creation time.
- `Description` (`string`, optional): A description for the AWS Verified Access endpoint.
- `DeviceValidationDomain` (`string`, optional): Returned if endpoint has a device trust provider attached.
- `DomainCertificateArn` (`string`, optional): The ARN of a public TLS/SSL certificate imported into or created with ACM.
- `EndpointDomain` (`string`, optional): A DNS name that is generated for the endpoint.
- `EndpointDomainPrefix` (`string`, optional): A custom identifier that gets prepended to a DNS name that is generated for the endpoint.
- `LastUpdatedTime` (`string`, optional): The last updated time.
- `LoadBalancerOptions` (`VerifiedAccessEndpoint_LoadBalancerOptions`, optional): The load balancer details if creating the AWS Verified Access endpoint as load-balancer type.
- `NetworkInterfaceOptions` (`VerifiedAccessEndpoint_NetworkInterfaceOptions`, optional): The options for network-interface type endpoint.
- `PolicyDocument` (`string`, optional): The AWS Verified Access policy document.
- `PolicyEnabled` (`boolean`, optional): The status of the Verified Access policy.
- `RdsOptions` (`VerifiedAccessEndpoint_RdsOptions`, optional): The options for rds type endpoint.
- `SecurityGroupIds` (`string[]`, optional): The IDs of the security groups for the endpoint.
- `SseSpecification` (`VerifiedAccessEndpoint_SseSpecification`, optional): The configuration options for customer provided KMS encryption.
- `Status` (`string`, optional): The endpoint status.
- `Tags` (`VerifiedAccessEndpoint_Tag[]`, optional): An array of key-value pairs to apply to this resource.
- `VerifiedAccessEndpointId` (`string`, optional): The ID of the AWS Verified Access endpoint.
- `VerifiedAccessInstanceId` (`string`, optional): The ID of the AWS Verified Access instance.

## Attributes

- `CreationTime`
- `DeviceValidationDomain`
- `EndpointDomain`
- `LastUpdatedTime`
- `Status`
- `VerifiedAccessEndpointId`
- `VerifiedAccessInstanceId`
