latest--aws-ec2-networkaclentry
sharedResource Type definition for AWS::EC2::NetworkAclEntry. Source:- https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ec2.git
Properties
The ID of the network ACL
Indicates whether to allow or deny the traffic that matches the rule
Rule number to assign to the entry, such as 100. ACL entries are processed in ascending order by rule number. Entries can't use the same rule number unless one is an egress rule and the other is an ingress rule
The protocol number. A value of "-1" means all protocols. If you specify "-1" or a protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is allowed, regardless of any ports or ICMP types or codes that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv6 CIDR block, you must specify an ICMP type and code
2 nested properties
The IPv4 CIDR range to allow or deny, in CIDR notation (for example, 172.16.0.0/24). Requirement is conditional: You must specify the CidrBlock or Ipv6CidrBlock property
Indicates whether this is an egress rule (rule is applied to traffic leaving the subnet)
The IPv6 network range to allow or deny, in CIDR notation (for example 2001:db8:1234:1a00::/64)