Skip to content

EC2  >  Structures  >  NetworkAclEntry

NetworkAclEntry

Structure Class

NetworkAclEntry dataclass

Bases: _SerdeShape

Describes an entry in a network ACL.

Attributes

cidr_block class-attribute instance-attribute 
cidr_block: str | None = ...

The IPv4 network range to allow or deny, in CIDR notation.

egress class-attribute instance-attribute 
egress: bool | None = ...

Indicates whether the rule is an egress rule (applied to traffic leaving the subnet).

icmp_type_code class-attribute instance-attribute 
icmp_type_code: IcmpTypeCode | None = ...

ICMP protocol: The ICMP type and code.

ipv6_cidr_block class-attribute instance-attribute 
ipv6_cidr_block: str | None = ...

The IPv6 network range to allow or deny, in CIDR notation.

port_range class-attribute instance-attribute 
port_range: PortRange | None = ...

TCP or UDP protocols: The range of ports the rule applies to.

protocol class-attribute instance-attribute 
protocol: str | None = ...

The protocol number. A value of "-1" means all protocols.

rule_action class-attribute instance-attribute 
rule_action: str | None = ...

Indicates whether to allow or deny the traffic that matches the rule.

rule_number class-attribute instance-attribute 
rule_number: int | None = ...

The rule number for the entry. ACL entries are processed in ascending order by rule number.