NetworkConfig / VpcConfig | VpcTemplatesConfig / NetworkAclConfig / NetworkAclOutboundRuleConfig

Network ACL outbound rule configuration. Use this configuration to define outbound rules for your network ACLs. An outbound rule allows or denies specific outbound traffic at the subnet level.

The following example allows outbound TCP traffic in the ephemeral port ranges to destination CIDR 10.0.0.0/16:

Example

- rule: 200
protocol: 6
fromPort: 1024
toPort: 65535
action: allow
destination: 10.0.0.0/16

Hierarchy

  • NetworkAclOutboundRuleConfig

Implements

Constructors

Properties

action: "allow" | "deny" = 'allow'

The action for the network ACL rule.

destination: string | NetworkAclSubnetSelection = ''

The destination of the network ACL rule.

Remarks

Possible values are a CIDR range or a network ACL subnet selection configuration.

See

NetworkAclSubnetSelection

fromPort: number = -1

The port to start from in the network ACL rule.

protocol: number = -1

The IANA protocol number for the network ACL rule. You may also specify -1 for all protocols.

rule: number = 100

The rule ID number for the rule.

Remarks

CAUTION: Changing this property value causes the rule to be recreated. This may temporarily impact your network traffic while the rule is updated.

Rules are evaluated in order from low to high and must be unique per direction. As soon as a rule matches traffic, it's applied regardless of any higher-numbered rule that might contradict it.

toPort: number = -1

The port to end with in the network ACL rule.

Generated using TypeDoc