NetworkAclEntryProps¶
-
class
aws_cdk.aws_ec2.
NetworkAclEntryProps
(*, cidr, rule_number, traffic, direction=None, network_acl_entry_name=None, rule_action=None, network_acl)¶ Bases:
aws_cdk.aws_ec2.CommonNetworkAclEntryOptions
(experimental) Properties to create NetworkAclEntry.
- Parameters
cidr (
AclCidr
) – (experimental) The CIDR range to allow or deny.rule_number (
Union
[int
,float
]) – (experimental) Rule number to assign to the entry, such as 100. ACL entries are processed in ascending order by rule number. Entries can’t use the same rule number unless one is an egress rule and the other is an ingress rule.traffic (
AclTraffic
) – (experimental) What kind of traffic this ACL rule applies to.direction (
Optional
[TrafficDirection
]) – (experimental) Traffic direction, with respect to the subnet, this rule applies to. Default: TrafficDirection.INGRESSnetwork_acl_entry_name (
Optional
[str
]) – (experimental) The name of the NetworkAclEntry. It is not recommended to use an explicit group name. Default: If you don’t specify a NetworkAclName, AWS CloudFormation generates a unique physical ID and uses that ID for the group name.rule_action (
Optional
[Action
]) – (experimental) Whether to allow or deny traffic that matches the rule; valid values are “allow” or “deny”. Any traffic that is not explicitly allowed is automatically denied in a custom ACL, all traffic is automatically allowed in a default ACL. Default: ALLOWnetwork_acl (
INetworkAcl
) – (experimental) The network ACL this entry applies to.
- Stability
experimental
Attributes
-
direction
¶ (experimental) Traffic direction, with respect to the subnet, this rule applies to.
- Default
TrafficDirection.INGRESS
- Stability
experimental
- Return type
Optional
[TrafficDirection
]
-
network_acl
¶ (experimental) The network ACL this entry applies to.
- Stability
experimental
- Return type
-
network_acl_entry_name
¶ (experimental) The name of the NetworkAclEntry.
It is not recommended to use an explicit group name.
- Default
If you don’t specify a NetworkAclName, AWS CloudFormation generates a unique physical ID and uses that ID for the group name.
- Stability
experimental
- Return type
Optional
[str
]
-
rule_action
¶ (experimental) Whether to allow or deny traffic that matches the rule; valid values are “allow” or “deny”.
Any traffic that is not explicitly allowed is automatically denied in a custom ACL, all traffic is automatically allowed in a default ACL.
- Default
ALLOW
- Stability
experimental
- Return type
Optional
[Action
]
-
rule_number
¶ (experimental) Rule number to assign to the entry, such as 100.
ACL entries are processed in ascending order by rule number. Entries can’t use the same rule number unless one is an egress rule and the other is an ingress rule.
- Stability
experimental
- Return type
Union
[int
,float
]
-
traffic
¶ (experimental) What kind of traffic this ACL rule applies to.
- Stability
experimental
- Return type