AWS SDK Version 3 for .NET
API Reference

AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.

Creates an entry (a rule) in a network ACL with the specified rule number. Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the ACL, we process the entries in the ACL according to the rule numbers, in ascending order. Each network ACL has a set of ingress rules and a separate set of egress rules.

We recommend that you leave room between the rule numbers (for example, 100, 110, 120, ...), and not number them one right after the other (for example, 101, 102, 103, ...). This makes it easier to add a rule between existing ones without having to renumber the rules.

After you add an entry, you can't modify it; you must either replace it, or create an entry and delete the old one.

For more information about network ACLs, see Network ACLs in the Amazon VPC User Guide.


For .NET Core this operation is only available in asynchronous form. Please refer to CreateNetworkAclEntryAsync.

Namespace: Amazon.EC2
Assembly: AWSSDK.EC2.dll
Version: 3.x.y.z


public virtual CreateNetworkAclEntryResponse CreateNetworkAclEntry(
         CreateNetworkAclEntryRequest request


Type: Amazon.EC2.Model.CreateNetworkAclEntryRequest

Container for the necessary parameters to execute the CreateNetworkAclEntry service method.

Return Value

The response from the CreateNetworkAclEntry service method, as returned by EC2.


This example creates an entry for the specified network ACL. The rule allows ingress traffic from anywhere ( on UDP port 53 (DNS) into any associated subnet.

To create a network ACL entry

var client = new AmazonEC2Client();
var response = client.CreateNetworkAclEntry(new CreateNetworkAclEntryRequest 
    CidrBlock = "",
    Egress = false,
    NetworkAclId = "acl-5fb85d36",
    PortRange = new PortRange {
        From = 53,
        To = 53
    Protocol = "17",
    RuleAction = "allow",
    RuleNumber = 100


Version Information

.NET Framework:
Supported in: 4.5, 4.0, 3.5

See Also