aws-vpn-cli

A CLI companion for the AWS VPN Client. Uses your existing profiles and the OpenVPN binary bundled with the app.

Stay in your terminal instead of clicking through the GUI.

Install

Requires macOS and AWS VPN Client with at least one profile configured.

brew install jlars22/tools/aws-vpn-cli

Run vpn — profiles are imported on first launch. Tab completion is available for zsh (restart your shell after installing).

Usage

$ vpn                   # interactive profile picker
$ vpn <profile>         # connect directly
$ vpn status            # show connection status
$ vpn disconnect        # disconnect
$ vpn list              # list available profiles
$ vpn import            # re-import profiles from AWS VPN Client
$ vpn logs              # tail the connection log
$ vpn setup-sudo        # skip password prompts (configures sudoers)

How it works

SAML auth is handled by a local server that captures the SSO callback. The tunnel runs on the OpenVPN binary bundled with the AWS VPN Client.

Note

Homebrew's OpenVPN doesn't work with AWS Client VPN due to OpenSSL 3.6 TLS incompatibilities.

Credits

Built on ideas from aws-vpn-client.