Package software.amazon.awscdk.services.ec2

Interface CfnNetworkAclEntryProps

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

CfnNetworkAclEntryProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.119.0 (build 1634eac)",
           date="2025-11-13T16:10:03.056Z")
@Stability(Stable)
public interface CfnNetworkAclEntryProps
extends software.amazon.jsii.JsiiSerializable

Properties for defining a CfnNetworkAclEntry.

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.ec2.*;
 CfnNetworkAclEntryProps cfnNetworkAclEntryProps = CfnNetworkAclEntryProps.builder()
         .networkAclId("networkAclId")
         .protocol(123)
         .ruleAction("ruleAction")
         .ruleNumber(123)
         // the properties below are optional
         .cidrBlock("cidrBlock")
         .egress(false)
         .icmp(IcmpProperty.builder()
                 .code(123)
                 .type(123)
                 .build())
         .ipv6CidrBlock("ipv6CidrBlock")
         .portRange(PortRangeProperty.builder()
                 .from(123)
                 .to(123)
                 .build())
         .build();
 

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	CfnNetworkAclEntryProps.Builder	A builder for CfnNetworkAclEntryProps
static final class	CfnNetworkAclEntryProps.Jsii$Proxy	An implementation for CfnNetworkAclEntryProps

Method Summary

Modifier and Type	Method	Description
static CfnNetworkAclEntryProps.Builder	builder()
default String	getCidrBlock()	The IPv4 CIDR range to allow or deny, in CIDR notation (for example, 172.16.0.0/24).
default Object	getEgress()	Whether this rule applies to egress traffic from the subnet ( true ) or ingress traffic to the subnet ( false ).
default Object	getIcmp()	The Internet Control Message Protocol (ICMP) code and type.
default String	getIpv6CidrBlock()	The IPv6 network range to allow or deny, in CIDR notation.
String	getNetworkAclId()	The ID of the ACL for the entry.
default Object	getPortRange()	The range of port numbers for the UDP/TCP protocol.
Number	getProtocol()	The IP protocol that the rule applies to.
String	getRuleAction()	Whether to allow or deny traffic that matches the rule;
Number	getRuleNumber()	Rule number to assign to the entry, such as 100.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getNetworkAclId

@Stability(Stable)
@NotNull
String getNetworkAclId()

The ID of the ACL for the entry.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-networkaclid

getProtocol

@Stability(Stable)
@NotNull
Number getProtocol()

The IP protocol that the rule applies to.

You must specify -1 or a protocol number. You can specify -1 for all protocols.

If you specify -1, all ports are opened and the PortRange property is ignored.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-protocol

getRuleAction

@Stability(Stable)
@NotNull
String getRuleAction()

Whether to allow or deny traffic that matches the rule;

valid values are "allow" or "deny".

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-ruleaction

getRuleNumber

@Stability(Stable)
@NotNull
Number getRuleNumber()

Rule number to assign to the entry, such as 100.

ACL entries are processed in ascending order by rule number. Entries can't use the same rule number unless one is an egress rule and the other is an ingress rule.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-rulenumber

getCidrBlock

@Stability(Stable)
@Nullable
default String getCidrBlock()

The IPv4 CIDR range to allow or deny, in CIDR notation (for example, 172.16.0.0/24). You must specify an IPv4 CIDR block or an IPv6 CIDR block.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-cidrblock

getEgress

@Stability(Stable)
@Nullable
default Object getEgress()

Whether this rule applies to egress traffic from the subnet ( true ) or ingress traffic to the subnet ( false ).

By default, AWS CloudFormation specifies false .

Returns union: either Boolean or IResolvable

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-egress

getIcmp

@Stability(Stable)
@Nullable
default Object getIcmp()

The Internet Control Message Protocol (ICMP) code and type.

Required if specifying 1 (ICMP) for the protocol parameter.

Returns union: either IResolvable or CfnNetworkAclEntry.IcmpProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-icmp

getIpv6CidrBlock

@Stability(Stable)
@Nullable
default String getIpv6CidrBlock()

The IPv6 network range to allow or deny, in CIDR notation.

You must specify an IPv4 CIDR block or an IPv6 CIDR block.

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-ipv6cidrblock

getPortRange

@Stability(Stable)
@Nullable
default Object getPortRange()

The range of port numbers for the UDP/TCP protocol.

Required if specifying 6 (TCP) or 17 (UDP) for the protocol parameter.

Returns union: either IResolvable or CfnNetworkAclEntry.PortRangeProperty

See Also:

• http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-networkaclentry.html#cfn-ec2-networkaclentry-portrange

builder

@Stability(Stable)
static CfnNetworkAclEntryProps.Builder builder()

Returns:

a CfnNetworkAclEntryProps.Builder of CfnNetworkAclEntryProps