NetworkACLEntry

The network access control list (ACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets. The entry is a set of numbered ingress and egress rules that determine whether a packet should be allowed in or out of a subnet associated with the ACL. We process the entries in the ACL according to the rule numbers, in ascending order.

Note

In the following list, the required parameters are described first.

cidrBlock

The IPv4 network range to allow or deny, in CIDR notation. For example, 172.16.0.0/24. We modify the specified CIDR block to its canonical form. For example, if you specify 100.68.0.18/18, we modify it to 100.68.0.0/18.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 18.

Pattern: ^(?:\d{1,3}\.){3}\d{1,3}(?:\/(?:3[0-2]|[12]\d|\d))$

Required: Yes

protocol

The protocol number. A value of -1 means all the protocols.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 5.

Pattern: ^-1|[0-9]+$

Required: Yes

ruleAction

Indicates whether to allow or deny the traffic that matches the rule.

Type: String

Valid Values: allow | deny

Required: Yes

ruleNumber

The rule number for the entry. For example 100. All the network ACL entries are processed in ascending order by rule number.

Type: Integer

Valid Range: Minimum value of 1. Maximum value of 32766.

Required: Yes

icmpTypeCode

Defines the ICMP protocol that consists of the ICMP type and code.

Type: IcmpTypeCode object

Required: No

portRange

The range of ports the rule applies to.

Type: PortRange object

Required: No

NetworkACLEntry

Contents

Note

See Also