Amazon Elastic Compute Cloud
API Reference (API Version 2012-04-01)
Print this pageEmail this pageGo to the ForumsView the PDFShare this page on TwitterShare this page on FacebookBookmark this page on DeliciousSubmit this page to RedditSubmit this page to DiggDid this page help you?  Yes  No   Tell us about it...

NetworkAclEntryType

The NetworkAclEntryType data type.

Ancestors

  • NetworkAclEntrySetType

Relevant Operations

  • CreateNetworkAcl

  • DescribeNetworkAcls

Contents

The following table describes the elements contained in NetworkAclEntryType.

NameDescription

ruleNumber

Specific rule number for the entry. ACL entries are processed in ascending order by rule number.

Type: Integer

protocol

Protocol. A value of -1 means all protocols.

Type: Integer

Valid Values: Any protocol number (go to Protocol Numbers).

ruleAction

Whether to allow or deny the traffic that matches the rule.

Type: string

egress

Boolean flag to indicate an egress rule (rule is applied to traffic leaving the subnet). Value of true indicates egress.

Type: boolean

cidrBlock

The network range to allow or deny, in CIDR notation.

Type: String

icmpTypeCode

For the ICMP protocol, this is the ICMP type and code.

Type: IcmpTypeCodeType

portRange

For the TCP or UDP protocols, the range of ports the rule applies to.

Type: PortRangeType