AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Creates an entry (a rule) in a network ACL with the specified rule number. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the ACL, we process the entries in the ACL according to the rule numbers, in ascending order. Each network ACL has a set of ingress rules and a separate set of egress rules.
We recommend that you leave room between the rule numbers (for example, 100, 110, 120, ...), and not number them one right after the other (for example, 101, 102, 103, ...). This makes it easier to add a rule between existing ones without having to renumber the rules.
After you add an entry, you can't modify it; you must either replace it, or create an entry and delete the old one.
For more information about network ACLs, see Network ACLs in the Amazon Virtual Private Cloud User Guide.
For .NET Core this operation is only available in asynchronous form. Please refer to CreateNetworkAclEntryAsync.
Namespace: Amazon.EC2
Assembly: AWSSDK.EC2.dll
Version: 3.x.y.z
public virtual CreateNetworkAclEntryResponse CreateNetworkAclEntry( CreateNetworkAclEntryRequest request )
Container for the necessary parameters to execute the CreateNetworkAclEntry service method.
This example creates an entry for the specified network ACL. The rule allows ingress traffic from anywhere (0.0.0.0/0) on UDP port 53 (DNS) into any associated subnet.
var client = new AmazonEC2Client();
var response = client.CreateNetworkAclEntry(new CreateNetworkAclEntryRequest
{
CidrBlock = "0.0.0.0/0",
Egress = false,
NetworkAclId = "acl-5fb85d36",
PortRange = new PortRange {
From = 53,
To = 53
},
Protocol = "17",
RuleAction = "allow",
RuleNumber = 100
});
.NET Framework:
Supported in: 4.5, 4.0, 3.5