pub struct NetworkAclRuleResult {
pub cidr_block: Output<Option<String>>,
pub egress: Output<Option<bool>>,
pub from_port: Output<Option<i32>>,
pub icmp_code: Output<Option<i32>>,
pub icmp_type: Output<Option<i32>>,
pub ipv6_cidr_block: Output<Option<String>>,
pub network_acl_id: Output<String>,
pub protocol: Output<String>,
pub rule_action: Output<String>,
pub rule_number: Output<i32>,
pub to_port: Output<Option<i32>>,
}
Fields§
§cidr_block: Output<Option<String>>
The network range to allow or deny, in CIDR notation (for example 172.16.0.0/24 ).
egress: Output<Option<bool>>
Indicates whether this is an egress rule (rule is applied to traffic leaving the subnet). Default false
.
from_port: Output<Option<i32>>
The from port to match.
icmp_code: Output<Option<i32>>
ICMP protocol: The ICMP code. Required if specifying ICMP for the protocolE.g., -1
NOTE: If the value of
protocol
is-1
orall
, thefrom_port
andto_port
values will be ignored and the rule will apply to all ports.
NOTE: If the value of
icmp_type
is-1
(which results in a wildcard ICMP type), theicmp_code
must also be set to-1
(wildcard ICMP code).
Note: For more information on ICMP types and codes, see here: https://www.iana.org/assignments/icmp-parameters/icmp-parameters.xhtml
icmp_type: Output<Option<i32>>
ICMP protocol: The ICMP type. Required if specifying ICMP for the protocolE.g., -1
ipv6_cidr_block: Output<Option<String>>
The IPv6 CIDR block to allow or deny.
network_acl_id: Output<String>
The ID of the network ACL.
protocol: Output<String>
The protocol. A value of -1 means all protocols.
rule_action: Output<String>
Indicates whether to allow or deny the traffic that matches the rule. Accepted values: allow
| deny
rule_number: Output<i32>
The rule number for the entry (for example, 100). ACL entries are processed in ascending order by rule number.
to_port: Output<Option<i32>>
The to port to match.