Grant access to VPC resources only

[xasima]

Hello. I know that user may choose on its side if to route all traffic via VPN, or to route to addresses from specific subnet only. Could you hint what to change in the configuration on server side (template) to restrict user routing for VPC resources only.

The case is to have secure bridge to access local AWS resources from mobile devices, while not relying on any complex configuration on user side to switch off VPN-zing of all client traffic.

[eigenstein]

This would be extremely useful!