1VM::EC2::VPC::NetworkAcUls(e3r)Contributed Perl DocumentVaMt:i:oEnC2::VPC::NetworkAcl(3)
2
6 VM::EC2::VPC::NetworkAcl - Virtual Private Cloud network ACL
7
9 use VM::EC2;
10 my $ec2 = VM::EC2->new(...);
12 my @acls = $ec2->describe_network_acls(-network_acl_id=>'acl-12345678');
13 foreach my $acl (@acls) {
14 my $vpc_id = $acl->vpcId;
15 my $default = $acl->default;
16 my @entries = $acl->entries;
17 my @assoc = $acl->associations;
18 ...
19 }
20 my $acl = $ec2->create_network_acl_entry(...);
22
24 This object represents an Amazon EC2 VPC network ACL, and is returned
25 by VM::EC2->describe_network_acls() and ->create_network_acl()
26
28 These object methods are supported:
29 networkAclId -- The network ACL's ID.
31 vpcId -- The ID of the VPC the network ACL is in.
32 default -- Whether this is the default network ACL in the VPC.
33 entrySet -- A list of entries (rules) in the network ACL.
34 associationSet -- A list of associations between the network ACL and
35 one or more subnets.
36 tagSet -- Tags assigned to the resource.
37 associations -- Alias for associationSet.
38 entries -- Alias for entrySet.
39 The object also supports the tags() method described in
41 VM::EC2::Generic:
42
44 $success = $acl->create_entry(%args) =head2 $success =
45 $acl->create_entry($acl_entry)
46 Creates an entry (i.e., rule) in a network ACL with the rule number you
47 specified. Each network ACL has a set of numbered ingress rules and a
48 separate set of numbered egress rules. When determining whether a
49 packet should be allowed in or out of a subnet associated with the ACL,
50 Amazon VPC processes the entries in the ACL according to the rule
51 numbers, in ascending order.
52 Arguments:
54 -rule_number -- Rule number to assign to the entry (e.g., 100).
56 ACL entries are processed in ascending order by
57 rule number. Positive integer from 1 to 32766.
58 (Required)
59 -protocol -- The IP protocol the rule applies to. You can use
60 -1 to mean all protocols. See
61 http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml
62 for a list of protocol numbers. (Required)
63 -rule_action -- Indicates whether to allow or deny traffic that
64 matches the rule. allow | deny (Required)
65 -egress -- Indicates whether this rule applies to egress
66 traffic from the subnet (true) or ingress traffic
67 to the subnet (false). Default is false.
68 -cidr_block -- The CIDR range to allow or deny, in CIDR notation
69 (e.g., 172.16.0.0/24). (Required)
70 -icmp_code -- For the ICMP protocol, the ICMP code. You can use
71 -1 to specify all ICMP codes for the given ICMP
72 type. Required if specifying 1 (ICMP) for protocol.
73 -icmp_type -- For the ICMP protocol, the ICMP type. You can use
74 -1 to specify all ICMP types. Required if
75 specifying 1 (ICMP) for the protocol
76 -port_from -- The first port in the range. Required if specifying
77 6 (TCP) or 17 (UDP) for the protocol.
78 -port_to -- The last port in the range. Required if specifying
79 6 (TCP) or 17 (UDP) for the protocol.
80 Alternately, can pass an existing ACL entry object
82 VM::EC2::VPC::NetworkAcl::Entry as the only argument for ease in
83 copying entries from one ACL to another.
84 Returns true on successful creation.
86 $success = $acl->delete_entry(%args) =head2 $success =
88 $acl->delete_entry($acl_entry)
89 Deletes an ingress or egress entry (i.e., rule) from a network ACL.
90 Arguments:
92 -network_acl_id -- ID of the ACL where the entry will be created
94 -rule_number -- Rule number of the entry (e.g., 100).
96 Optional arguments:
98 -egress -- Whether the rule to delete is an egress rule (true) or ingress
100 rule (false). Default is false.
101 Alternately, can pass an existing ACL entry object
103 VM::EC2::VPC::NetworkAcl::Entry as the only argument to ease deletion
104 of entries.
105 Returns true on successful deletion.
107 $success = replace_entry(%args) =head2 $success = replace_entry($acl_entry)
109 Replaces an entry (i.e., rule) in a network ACL.
110 Arguments:
112 -network_acl_id -- ID of the ACL where the entry will be created
114 (Required)
115 -rule_number -- Rule number of the entry to replace. (Required)
116 -protocol -- The IP protocol the rule applies to. You can use
117 -1 to mean all protocols. See
118 http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml
119 for a list of protocol numbers. (Required)
120 -rule_action -- Indicates whether to allow or deny traffic that
121 matches the rule. allow | deny (Required)
122 -egress -- Indicates whether this rule applies to egress
123 traffic from the subnet (true) or ingress traffic
124 to the subnet (false). Default is false.
125 -cidr_block -- The CIDR range to allow or deny, in CIDR notation
126 (e.g., 172.16.0.0/24). (Required)
127 -icmp_code -- For the ICMP protocol, the ICMP code. You can use
128 -1 to specify all ICMP codes for the given ICMP
129 type. Required if specifying 1 (ICMP) for protocol.
130 -icmp_type -- For the ICMP protocol, the ICMP type. You can use
131 -1 to specify all ICMP types. Required if
132 specifying 1 (ICMP) for the protocol
133 -port_from -- The first port in the range. Required if specifying
134 6 (TCP) or 17 (UDP) for the protocol.
135 -port_to -- The last port in the range. Only required if
136 specifying 6 (TCP) or 17 (UDP) for the protocol and
137 is a different port than -port_from.
138 Alternately, can pass an existing ACL entry object
140 VM::EC2::VPC::NetworkAcl::Entry as the only argument for ease in
141 replacing entries from one ACL to another. The rule number in the
142 passed entry object must already exist in the ACL.
143 Returns true on successful replacement.
145 $association_id = $acl->associate($subnet_id)
147 Associates the ACL with a subnet in the same VPC. Replaces whatever
148 ACL the subnet was associated with previously.
149 $association_id = $acl->disassociate($subnet_id)
151 Disassociates the ACL with a subnet in the same VPC. The subnet will
152 then be associated with the default ACL.
153
155 When used in a string context, this object will interpolate the
156 networkAclId.
157
159 VM::EC2 VM::EC2::Generic VM::EC2::Tag VM::EC2::VPC
160 VM::EC2::VPC::NetworkAcl::Entry VM::EC2::VPC::NetworkAcl::Association
161
163 Lance Kinley <lkinley@loyaltymethods.com>.
164 Copyright (c) 2012 Loyalty Methods, Inc.
166 This package and its accompanying libraries is free software; you can
168 redistribute it and/or modify it under the terms of the GPL (either
169 version 1, or at your option, any later version) or the Artistic
170 License 2.0. Refer to LICENSE for the full license text. In addition,
171 please see DISCLAIMER.txt for disclaimers of warranty.
172perl v5.32.1 2021-01-27 VM::EC2::VPC::NetworkAcl(3)