Interface ICommonNetworkAclEntryOptions

Basic NetworkACL entry props.

Namespace: Amazon.CDK.AWS.EC2

Assembly: Amazon.CDK.Lib.dll

Syntax (csharp)

public interface ICommonNetworkAclEntryOptions

Syntax (vb)

Public Interface ICommonNetworkAclEntryOptions

Remarks

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
using Amazon.CDK.AWS.EC2;

AclCidr aclCidr;
AclTraffic aclTraffic;

var commonNetworkAclEntryOptions = new CommonNetworkAclEntryOptions {
    Cidr = aclCidr,
    RuleNumber = 123,
    Traffic = aclTraffic,

    // the properties below are optional
    Direction = TrafficDirection.EGRESS,
    NetworkAclEntryName = "networkAclEntryName",
    RuleAction = Action.ALLOW
};

Synopsis

Properties

Cidr	The CIDR range to allow or deny.
Direction	Traffic direction, with respect to the subnet, this rule applies to.
NetworkAclEntryName	The name of the NetworkAclEntry.
RuleAction	Whether to allow or deny traffic that matches the rule; valid values are "allow" or "deny".
RuleNumber	Rule number to assign to the entry, such as 100.
Traffic	What kind of traffic this ACL rule applies to.

Properties

Cidr

The CIDR range to allow or deny.

AclCidr Cidr { get; }

Property Value

AclCidr

Direction

Traffic direction, with respect to the subnet, this rule applies to.

virtual Nullable<TrafficDirection> Direction { get; }

Property Value

System.Nullable<TrafficDirection>

Remarks

Default: TrafficDirection.INGRESS

NetworkAclEntryName

The name of the NetworkAclEntry.

virtual string NetworkAclEntryName { get; }

Property Value

System.String

Remarks

It is not recommended to use an explicit group name.

Default: If you don't specify a NetworkAclName, AWS CloudFormation generates a unique physical ID and uses that ID for the group name.

RuleAction

Whether to allow or deny traffic that matches the rule; valid values are "allow" or "deny".

virtual Nullable<Action> RuleAction { get; }

Property Value

System.Nullable<Action>

Remarks

Any traffic that is not explicitly allowed is automatically denied in a custom ACL, all traffic is automatically allowed in a default ACL.

Default: ALLOW

RuleNumber

Rule number to assign to the entry, such as 100.

double RuleNumber { get; }

Property Value

System.Double

Remarks

ACL entries are processed in ascending order by rule number. Entries can't use the same rule number unless one is an egress rule and the other is an ingress rule.

Traffic

What kind of traffic this ACL rule applies to.

AclTraffic Traffic { get; }

Property Value

AclTraffic