1VM::EC2::VPC::NetworkAcUls:e:rEnCtornyt(r3i)buted Perl DVoMc:u:mEeCn2t:a:tViPoCn::NetworkAcl::Entry(3)
2
3
4
6 VM::EC2::VPC::NetworkAcl::Entry - VPC Network ACL entry
7
9 use VM::EC2;
10
11 my $ec2 = VM::EC2->new(...);
12 my $acl = $ec2->describe_network_acls(-network_acl_id=>'acl-12345678');
13 my @entries = $acl->entries;
14
15 # print outgoing icmp rules
16 for my $e (@entries) {
17 if ($e->egress && $e->protocol == 1) { # icmp = 1
18 print $e->ruleNumber,"\n",
19 $e->ruleAction,"\n",
20 $e->cidrBlock,"\n",
21 $e->icmpType,"\n",
22 $e->icmpCode,"\n";
23 }
24 }
25
26 # print incoming tcp rules
27 for my $e (@entries) {
28 if (! $e->egress && $e->protocol == 6) { # tcp = 6
29 print $e->ruleNumber,"\n",
30 $e->ruleAction,"\n",
31 $e->cidrBlock,"\n",
32 $e->port_from,'-',$e->port_to,"\n";
33 }
34 }
35
37 This object represents an Amazon EC2 VPC network ACL entry
38
40 These object methods are supported:
41
42 ruleNumber -- Specific rule number for the entry. ACL entries are
43 processed in ascending order by rule number.
44 protocol -- Protocol. A value of -1 means all protocols.
45 See: http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
46 for a list of protocol numbers.
47 ruleAction -- Whether to allow or deny the traffic that matches the
48 rule. Valid values: allow | deny
49 egress -- Boolean flag to indicate an egress rule (rule is
50 applied to traffic leaving the subnet). Value of true
51 indicates egress.
52 cidrBlock -- The network range to allow or deny, in CIDR notation.
53 icmpType -- For the ICMP protocol, this is the ICMP type
54 icmpCode -- For the ICMP protocol, this is the ICMP code.
55 portRangeFrom -- For the TCP or UDP protocols, the starting range of ports the
56 rule applies to.
57 portRangeTo -- For the TCP or UDP protocols, the ending range of ports the
58 rule applies to.
59 port_from -- Alias for portRangeFrom
60 port_to -- Alias for portRangeTo
61
62 The object also supports the tags() method described in
63 VM::EC2::Generic:
64
66 When used in a string context, this object will interpolate the rule
67 number
68
70 VM::EC2 VM::EC2::Generic VM::EC2::Tag VM::EC2::VPC
71 VM::EC2::VPC::NetworkAcl
72
74 Lance Kinley <lkinley@loyaltymethods.com>.
75
76 Copyright (c) 2012 Loyalty Methods, Inc.
77
78 This package and its accompanying libraries is free software; you can
79 redistribute it and/or modify it under the terms of the GPL (either
80 version 1, or at your option, any later version) or the Artistic
81 License 2.0. Refer to LICENSE for the full license text. In addition,
82 please see DISCLAIMER.txt for disclaimers of warranty.
83
84
85
86perl v5.30.1 2020-02-07VM::EC2::VPC::NetworkAcl::Entry(3)