Interface INetworkAclConfig

NetworkConfig / VpcConfig | VpcTemplatesConfig / NetworkAclConfig

Network access control list (ACL) configuration.

Description

Use this configuration to define custom network ACLs for your VPC. A network ACL allows or denies specific inbound or outbound traffic at the subnet level. Network ACLs are stateless, which means that responses to allowed inbound traffic are subject to the rules for outbound traffic (and vice versa).

The following example shows an inbound and outbound rule that would allow inbound SSH traffic from the CIDR range 10.0.0.0/16.

Example

- name: accelerator-nacl
  subnetAssociations:
    - Subnet-A
  inboundRules:
    - rule: 200
      protocol: 6
      fromPort: 22
      toPort: 22
      action: allow
      source: 10.0.0.0/16
  outboundRules:
    - rule: 200
      protocol: 6
      fromPort: 1024
      toPort: 65535
      action: allow
      destination: 10.0.0.0/16
  tags: []
Copy