{
 "$schema": "https://raw.githubusercontent.com/aws-cloudformation/cloudformation-resource-schema/blob/master/src/main/resources/schema/provider.definition.schema.v1.json",
 "additionalProperties": false,
 "createOnlyProperties": [
  "/properties/Type",
  "/properties/VpnConcentratorId",
  "/properties/EnableAcceleration",
  "/properties/LocalIpv4NetworkCidr",
  "/properties/LocalIpv6NetworkCidr",
  "/properties/OutsideIpAddressType",
  "/properties/RemoteIpv4NetworkCidr",
  "/properties/RemoteIpv6NetworkCidr",
  "/properties/StaticRoutesOnly",
  "/properties/TransportTransitGatewayAttachmentId",
  "/properties/TunnelInsideIpVersion",
  "/properties/PreSharedKeyStorage",
  "/properties/TunnelBandwidth",
  "/properties/VpnTunnelOptionsSpecifications"
 ],
 "definitions": {
  "CloudwatchLogOptionsSpecification": {
   "additionalProperties": false,
   "properties": {
    "BgpLogEnabled": {
     "type": "boolean"
    },
    "BgpLogGroupArn": {
     "type": "string"
    },
    "BgpLogOutputFormat": {
     "enum": [
      "json",
      "text"
     ],
     "type": "string"
    },
    "LogEnabled": {
     "type": "boolean"
    },
    "LogGroupArn": {
     "type": "string"
    },
    "LogOutputFormat": {
     "enum": [
      "json",
      "text"
     ],
     "type": "string"
    }
   },
   "type": "object"
  },
  "IKEVersionsRequestListValue": {
   "additionalProperties": false,
   "properties": {
    "Value": {
     "enum": [
      "ikev1",
      "ikev2"
     ],
     "type": "string"
    }
   },
   "type": "object"
  },
  "Phase1DHGroupNumbersRequestListValue": {
   "additionalProperties": false,
   "properties": {
    "Value": {
     "enum": [
      2,
      14,
      15,
      16,
      17,
      18,
      19,
      20,
      21,
      22,
      23,
      24
     ],
     "type": "integer"
    }
   },
   "type": "object"
  },
  "Phase1EncryptionAlgorithmsRequestListValue": {
   "additionalProperties": false,
   "properties": {
    "Value": {
     "enum": [
      "AES128",
      "AES256",
      "AES128-GCM-16",
      "AES256-GCM-16"
     ],
     "type": "string"
    }
   },
   "type": "object"
  },
  "Phase1IntegrityAlgorithmsRequestListValue": {
   "additionalProperties": false,
   "properties": {
    "Value": {
     "enum": [
      "SHA1",
      "SHA2-256",
      "SHA2-384",
      "SHA2-512"
     ],
     "type": "string"
    }
   },
   "type": "object"
  },
  "Phase2DHGroupNumbersRequestListValue": {
   "additionalProperties": false,
   "properties": {
    "Value": {
     "enum": [
      2,
      5,
      14,
      15,
      16,
      17,
      18,
      19,
      20,
      21,
      22,
      23,
      24
     ],
     "type": "integer"
    }
   },
   "type": "object"
  },
  "Phase2EncryptionAlgorithmsRequestListValue": {
   "additionalProperties": false,
   "properties": {
    "Value": {
     "enum": [
      "AES128",
      "AES256",
      "AES128-GCM-16",
      "AES256-GCM-16"
     ],
     "type": "string"
    }
   },
   "type": "object"
  },
  "Phase2IntegrityAlgorithmsRequestListValue": {
   "additionalProperties": false,
   "properties": {
    "Value": {
     "enum": [
      "SHA1",
      "SHA2-256",
      "SHA2-384",
      "SHA2-512"
     ],
     "type": "string"
    }
   },
   "type": "object"
  },
  "Tag": {
   "additionalProperties": false,
   "properties": {
    "Key": {
     "type": "string"
    },
    "Value": {
     "type": "string"
    }
   },
   "required": [
    "Value",
    "Key"
   ],
   "type": "object"
  },
  "VpnTunnelLogOptionsSpecification": {
   "additionalProperties": false,
   "properties": {
    "CloudwatchLogOptions": {
     "$ref": "#/definitions/CloudwatchLogOptionsSpecification"
    }
   },
   "type": "object"
  },
  "VpnTunnelOptionsSpecification": {
   "additionalProperties": false,
   "properties": {
    "DPDTimeoutAction": {
     "enum": [
      "clear",
      "none",
      "restart"
     ],
     "type": "string"
    },
    "DPDTimeoutSeconds": {
     "minimum": 30,
     "type": "integer"
    },
    "EnableTunnelLifecycleControl": {
     "type": "boolean"
    },
    "IKEVersions": {
     "insertionOrder": false,
     "items": {
      "$ref": "#/definitions/IKEVersionsRequestListValue"
     },
     "type": "array",
     "uniqueItems": false
    },
    "LogOptions": {
     "$ref": "#/definitions/VpnTunnelLogOptionsSpecification"
    },
    "Phase1DHGroupNumbers": {
     "insertionOrder": false,
     "items": {
      "$ref": "#/definitions/Phase1DHGroupNumbersRequestListValue"
     },
     "type": "array",
     "uniqueItems": false
    },
    "Phase1EncryptionAlgorithms": {
     "insertionOrder": false,
     "items": {
      "$ref": "#/definitions/Phase1EncryptionAlgorithmsRequestListValue"
     },
     "type": "array",
     "uniqueItems": false
    },
    "Phase1IntegrityAlgorithms": {
     "insertionOrder": false,
     "items": {
      "$ref": "#/definitions/Phase1IntegrityAlgorithmsRequestListValue"
     },
     "type": "array",
     "uniqueItems": false
    },
    "Phase1LifetimeSeconds": {
     "maximum": 28800,
     "minimum": 900,
     "type": "integer"
    },
    "Phase2DHGroupNumbers": {
     "insertionOrder": false,
     "items": {
      "$ref": "#/definitions/Phase2DHGroupNumbersRequestListValue"
     },
     "type": "array",
     "uniqueItems": false
    },
    "Phase2EncryptionAlgorithms": {
     "insertionOrder": false,
     "items": {
      "$ref": "#/definitions/Phase2EncryptionAlgorithmsRequestListValue"
     },
     "type": "array",
     "uniqueItems": false
    },
    "Phase2IntegrityAlgorithms": {
     "insertionOrder": false,
     "items": {
      "$ref": "#/definitions/Phase2IntegrityAlgorithmsRequestListValue"
     },
     "type": "array",
     "uniqueItems": false
    },
    "Phase2LifetimeSeconds": {
     "maximum": 3600,
     "minimum": 900,
     "type": "integer"
    },
    "PreSharedKey": {
     "type": "string"
    },
    "RekeyFuzzPercentage": {
     "maximum": 100,
     "minimum": 0,
     "type": "integer"
    },
    "RekeyMarginTimeSeconds": {
     "minimum": 60,
     "type": "integer"
    },
    "ReplayWindowSize": {
     "maximum": 2048,
     "minimum": 64,
     "type": "integer"
    },
    "StartupAction": {
     "enum": [
      "add",
      "start"
     ],
     "type": "string"
    },
    "TunnelInsideCidr": {
     "type": "string"
    },
    "TunnelInsideIpv6Cidr": {
     "type": "string"
    }
   },
   "type": "object"
  }
 },
 "primaryIdentifier": [
  "/properties/VpnConnectionId"
 ],
 "properties": {
  "CustomerGatewayId": {
   "type": "string"
  },
  "EnableAcceleration": {
   "type": "boolean"
  },
  "LocalIpv4NetworkCidr": {
   "type": "string"
  },
  "LocalIpv6NetworkCidr": {
   "type": "string"
  },
  "OutsideIpAddressType": {
   "type": "string"
  },
  "PreSharedKeyStorage": {
   "enum": [
    "Standard",
    "SecretsManager"
   ],
   "type": "string"
  },
  "RemoteIpv4NetworkCidr": {
   "type": "string"
  },
  "RemoteIpv6NetworkCidr": {
   "type": "string"
  },
  "StaticRoutesOnly": {
   "type": "boolean"
  },
  "Tags": {
   "insertionOrder": false,
   "items": {
    "$ref": "#/definitions/Tag"
   },
   "type": "array",
   "uniqueItems": false
  },
  "TransitGatewayId": {
   "type": "string"
  },
  "TransportTransitGatewayAttachmentId": {
   "type": "string"
  },
  "TunnelBandwidth": {
   "default": "standard",
   "enum": [
    "standard",
    "large"
   ],
   "type": "string"
  },
  "TunnelInsideIpVersion": {
   "type": "string"
  },
  "Type": {
   "type": "string"
  },
  "VpnConcentratorId": {
   "type": "string"
  },
  "VpnConnectionId": {
   "type": "string"
  },
  "VpnGatewayId": {
   "type": "string"
  },
  "VpnTunnelOptionsSpecifications": {
   "insertionOrder": false,
   "items": {
    "$ref": "#/definitions/VpnTunnelOptionsSpecification"
   },
   "type": "array",
   "uniqueItems": false
  }
 },
 "readOnlyProperties": [
  "/properties/VpnConnectionId"
 ],
 "replacementStrategy": "delete_then_create",
 "required": [
  "Type",
  "CustomerGatewayId"
 ],
 "tagging": {
  "cloudFormationSystemTags": true,
  "tagOnCreate": true,
  "tagProperty": "/properties/Tags",
  "tagUpdatable": true,
  "taggable": true
 },
 "typeName": "AWS::EC2::VPNConnection",
 "writeOnlyProperties": [
  "/properties/PreSharedKeyStorage",
  "/properties/VpnTunnelOptionsSpecifications/*/PreSharedKey"
 ]
}
