interface CfnSecurityGroupEgressMixinProps
| Language | Type name |
|---|---|
 .NET | Amazon.CDK.Mixins.Preview.AWS.EC2.Mixins.CfnSecurityGroupEgressMixinProps |
 Go | github.com/aws/aws-cdk-go/awscdkmixinspreview/v2/awsec2/mixins#CfnSecurityGroupEgressMixinProps |
 Java | software.amazon.awscdk.mixins.preview.services.ec2.mixins.CfnSecurityGroupEgressMixinProps |
 Python | aws_cdk.mixins_preview.aws_ec2.mixins.CfnSecurityGroupEgressMixinProps |
 TypeScript | @aws-cdk/mixins-preview » aws_ec2 » mixins » CfnSecurityGroupEgressMixinProps |
Properties for CfnSecurityGroupEgressPropsMixin.
Example
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { mixins as ec2_mixins } from '@aws-cdk/mixins-preview/aws-ec2';
const cfnSecurityGroupEgressMixinProps: ec2_mixins.CfnSecurityGroupEgressMixinProps = {
cidrIp: 'cidrIp',
cidrIpv6: 'cidrIpv6',
description: 'description',
destinationPrefixListId: 'destinationPrefixListId',
destinationSecurityGroupId: 'destinationSecurityGroupId',
fromPort: 123,
groupId: 'groupId',
ipProtocol: 'ipProtocol',
toPort: 123,
};
Properties
| Name | Type | Description |
|---|---|---|
| cidr | string | The IPv4 address range, in CIDR format. |
| cidr | string | The IPv6 address range, in CIDR format. |
| description? | string | The description of an egress (outbound) security group rule. |
| destination | string | The prefix list IDs for an AWS service. |
| destination | string | The ID of the security group. |
| from | number | If the protocol is TCP or UDP, this is the start of the port range. |
| group | string | The ID of the security group. |
| ip | string | The IP protocol name ( tcp , udp , icmp , icmpv6 ) or number (see Protocol Numbers ). |
| to | number | If the protocol is TCP or UDP, this is the end of the port range. |
cidrIp?
Type:
string
(optional)
The IPv4 address range, in CIDR format.
You must specify exactly one of the following: CidrIp , CidrIpv6 , DestinationPrefixListId , or DestinationSecurityGroupId .
For examples of rules that you can add to security groups for specific access scenarios, see Security group rules for different use cases in the Amazon EC2 User Guide .
cidrIpv6?
Type:
string
(optional)
The IPv6 address range, in CIDR format.
You must specify exactly one of the following: CidrIp , CidrIpv6 , DestinationPrefixListId , or DestinationSecurityGroupId .
For examples of rules that you can add to security groups for specific access scenarios, see Security group rules for different use cases in the Amazon EC2 User Guide .
description?
Type:
string
(optional)
The description of an egress (outbound) security group rule.
Constraints: Up to 255 characters in length. Allowed characters are a-z, A-Z, 0-9, spaces, and ._-:/()#,@[]+=;{}!$*
destinationPrefixListId?
Type:
string
(optional)
The prefix list IDs for an AWS service.
This is the AWS service to access through a VPC endpoint from instances associated with the security group.
You must specify exactly one of the following: CidrIp , CidrIpv6 , DestinationPrefixListId , or DestinationSecurityGroupId .
destinationSecurityGroupId?
Type:
string
(optional)
The ID of the security group.
You must specify exactly one of the following: CidrIp , CidrIpv6 , DestinationPrefixListId , or DestinationSecurityGroupId .
fromPort?
Type:
number
(optional)
If the protocol is TCP or UDP, this is the start of the port range.
If the protocol is ICMP or ICMPv6, this is the ICMP type or -1 (all ICMP types).
groupId?
Type:
string
(optional)
The ID of the security group.
You must specify either the security group ID or the security group name in the request. For security groups in a nondefault VPC, you must specify the security group ID.
ipProtocol?
Type:
string
(optional)
The IP protocol name ( tcp , udp , icmp , icmpv6 ) or number (see Protocol Numbers ).
Use -1 to specify all protocols. When authorizing security group rules, specifying -1 or a protocol number other than tcp , udp , icmp , or icmpv6 allows traffic on all ports, regardless of any port range you specify. For tcp , udp , and icmp , you must specify a port range. For icmpv6 , the port range is optional; if you omit the port range, traffic for all types and codes is allowed.
toPort?
Type:
number
(optional)
If the protocol is TCP or UDP, this is the end of the port range.
If the protocol is ICMP or ICMPv6, this is the ICMP code or -1 (all ICMP codes). If the start port is -1 (all ICMP types), then the end port must be -1 (all ICMP codes).