aws_vpn_connection missing advanced tunnel configuration options

[ghost]

This issue was originally opened by @tkoeck as hashicorp/terraform#25539. It was migrated here as a result of the provider split. The original body of the issue is below.

---

Terraform v0.12.28

Use-cases

We try to connect an Azure VPN to an AWS VPN. That requires to setup or modification of the advanced options (see attachment for more information) As far as I have seen that's not possible with Terraform resources.

Attempted Solutions

Manual configuration in the AWS Management Console. The problem is that it isn't a good Infrastructure as Code solution because it's outside of Terraform.

Proposal

Can you add the possibility to change/adjust the Advanced Tunnel options?

References

https://www.terraform.io/docs/providers/aws/r/vpn_connection.html

[ewbankkit]

Hi @tkoeck, thanks for raising this issue.
Which VPN tunnel configuration options in particular are missing?

[tkoeck]

Hi @ewbankkit,

all of the possible advanced settings are missing (e.g. AWS changes posted in https://aws.amazon.com/about-aws/whats-new/2019/08/aws-site-to-site-vpn-adds-configurability-security-algorithms-timer-settings-used-for-vpn-tunnels/ ).

At first for Azure compatibly changeable tunnel timeout settings would be sufficient. I can add the AWS Management console screenshot again if it would be helpful.

[ewbankkit]

@tkoeck Please do add the screenshot, it must have been lost when this issue was copied from the Terraform core repo.
Thanks.

[tkoeck]

I have attached the options. It can be found for both tunnels for every VPN connection.

[tkoeck]

The options can be configured independently for the two tunnels for every VPN connection. It can be configured at

VPC -> Site-to-Site VPN Connection -> Select Connection -> Actions -> Modify VPN Tunnel Options -> Select one of two tunnels

[CliffHoogervorst]

same as #11584

[ewbankkit]

@tkoeck As @CliffHoogervorst kindly pointed out, this issue is a duplicate of #11584. I will close this one.
Please add any additional comments to the linked issue.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!