See https://www.terraform.io/docs/providers/aws/r/ec2_client_vpn_endpoint.html Be sure to enable Split VPN or traffic may be blackholed.