Class CfnPolicyPropsMixin.NetworkAclEntryProperty

Describes a rule in a network ACL.

Inheritance

object

CfnPolicyPropsMixin.NetworkAclEntryProperty

Implements

CfnPolicyPropsMixin.INetworkAclEntryProperty

Inherited Members

object.GetType()

object.MemberwiseClone()

object.ToString()

object.Equals(object)

object.Equals(object, object)

object.ReferenceEquals(object, object)

object.GetHashCode()

Namespace: Amazon.CDK.Mixins.Preview.AWS.FMS.Mixins

Assembly: Amazon.CDK.Mixins.Preview.dll

Syntax (csharp)

public class CfnPolicyPropsMixin.NetworkAclEntryProperty : CfnPolicyPropsMixin.INetworkAclEntryProperty

Syntax (vb)

Public Class CfnPolicyPropsMixin.NetworkAclEntryProperty Implements CfnPolicyPropsMixin.INetworkAclEntryProperty

Remarks

Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, AWS processes the entries in the network ACL according to the rule numbers, in ascending order.

When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.Mixins.Preview.AWS.FMS.Mixins;

             var networkAclEntryProperty = new NetworkAclEntryProperty {
                 CidrBlock = "cidrBlock",
                 Egress = false,
                 IcmpTypeCode = new IcmpTypeCodeProperty {
                     Code = 123,
                     Type = 123
                 },
                 Ipv6CidrBlock = "ipv6CidrBlock",
                 PortRange = new PortRangeProperty {
                     From = 123,
                     To = 123
                 },
                 Protocol = "protocol",
                 RuleAction = "ruleAction"
             };

Synopsis

Constructors

NetworkAclEntryProperty()

Describes a rule in a network ACL.

Properties

CidrBlock	The IPv4 network range to allow or deny, in CIDR notation.
Egress	Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet).
IcmpTypeCode	ICMP protocol: The ICMP type and code.
Ipv6CidrBlock	The IPv6 network range to allow or deny, in CIDR notation.
PortRange	TCP or UDP protocols: The range of ports the rule applies to.
Protocol	The protocol number.
RuleAction	Indicates whether to allow or deny the traffic that matches the rule.

Constructors

NetworkAclEntryProperty()

Describes a rule in a network ACL.

public NetworkAclEntryProperty()

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.Mixins.Preview.AWS.FMS.Mixins;

             var networkAclEntryProperty = new NetworkAclEntryProperty {
                 CidrBlock = "cidrBlock",
                 Egress = false,
                 IcmpTypeCode = new IcmpTypeCodeProperty {
                     Code = 123,
                     Type = 123
                 },
                 Ipv6CidrBlock = "ipv6CidrBlock",
                 PortRange = new PortRangeProperty {
                     From = 123,
                     To = 123
                 },
                 Protocol = "protocol",
                 RuleAction = "ruleAction"
             };

Properties

CidrBlock

The IPv4 network range to allow or deny, in CIDR notation.

public string? CidrBlock { get; set; }

Property Value

string

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-cidrblock

Egress

Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet).

public object? Egress { get; set; }

Property Value

object

Remarks

If it's not an egress rule, then it's an ingress, or inbound, rule.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-egress

Type union: either bool or IResolvable

IcmpTypeCode

ICMP protocol: The ICMP type and code.

public object? IcmpTypeCode { get; set; }

Property Value

object

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-icmptypecode

Type union: either IResolvable or CfnPolicyPropsMixin.IIcmpTypeCodeProperty

Ipv6CidrBlock

The IPv6 network range to allow or deny, in CIDR notation.

public string? Ipv6CidrBlock { get; set; }

Property Value

string

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-ipv6cidrblock

PortRange

TCP or UDP protocols: The range of ports the rule applies to.

public object? PortRange { get; set; }

Property Value

object

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-portrange

Type union: either IResolvable or CfnPolicyPropsMixin.IPortRangeProperty

Protocol

The protocol number.

public string? Protocol { get; set; }

Property Value

string

Remarks

A value of "-1" means all protocols.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-fms-policy-networkaclentry.html#cfn-fms-policy-networkaclentry-protocol

RuleAction

Indicates whether to allow or deny the traffic that matches the rule.

public string? RuleAction { get; set; }