VPN endpoint (VPC) replace certificate(s)

Question

Hi All, doing some research on how to re-secure the VPN endpoints after a developer left and started threatening for some silly reason. 
So how can we re-secure the VPN endpoint again since we have an amazon self-made imported cert to Certificate Manager.
 
I know theoretically every user should have a unique client- cert, but because of time constrainsts, I don't have time to get it all perfect. 
Thanks for any suggestions!

Answer

Hello,

AWS Client VPN provides a number of security features to consider as you develop and implement your own security policies. Check this link out mentioning the security best practices. 
Link- https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/security-best-practices.html

For your use-case, the following suggestion in the link is beneficial:

Use client certificate revocation lists to revoke access to a Client VPN endpoint for specific client certificates. For example, when a user leaves your organization. CRL:https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/cvpn-working-certificates.html

VPN endpoint (VPC) replace certificate(s)

Contenido relevante