CidrBlock |
String
|
Required: Yes. The CIDR range to allow or deny, in CIDR notation (e.g., 172.16.0.0/24).Update requires: No interruption |
Egress |
Boolean
|
Required: No. Whether this rule applies to egress traffic from the subnet (true)
or ingress traffic to the subnet (false). By default, AWS CloudFormation specifies
false.Update requires: Replacement. |
Icmp |
EC2ICMPPropertyType
|
Required: Conditional. The Internet Control Message Protocol (ICMP) code and type.Update requires: No interruption |
NetworkAclId |
String
|
Required: Yes. ID of the ACL where the entry will be created.Update requires: Replacement. |
PortRange |
EC2PortRangePropertyType
|
Required: Conditional. The range of port numbers for the UDP/TCP protocol.Update requires: No interruption |
Protocol |
Number
|
Required: Yes. The IP protocol that the rule applies to. You must specify -1 or a
protocol number (go to Protocol Numbers at iana.org). You can specify -1 for all
protocols.NoteIf you specify -1, all ports are opened and the
PortRange property is ignored.Update requires: No interruption |
RuleAction |
String
|
Required: Yes. Whether to allow or deny traffic that matches the rule; valid values are "allow" or "deny".Update requires: No interruption |
RuleNumber |
Number
|
Required: Yes. Rule number to assign to the entry (e.g., 100). This must be a positive integer
from 1 to 32766.Update requires: Replacement. |