NAME

VM::EC2::VPC::NetworkAcl::Entry - VPC Network ACL entry

SYNOPSIS

  use VM::EC2;

 my $ec2      = VM::EC2->new(...);
 my $acl      = $ec2->describe_network_acls(-network_acl_id=>'acl-12345678');
 my @entries  = $acl->entries;

 # print outgoing icmp rules
 for my $e (@entries) {
     if ($e->egress && $e->protocol == 1) {  # icmp = 1
         print $e->ruleNumber,"\n",
               $e->ruleAction,"\n",
               $e->cidrBlock,"\n",
               $e->icmpType,"\n",
               $e->icmpCode,"\n";
     }
 }

 # print incoming tcp rules
 for my $e (@entries) {
     if (! $e->egress && $e->protocol == 6) {  # tcp = 6
         print $e->ruleNumber,"\n",
               $e->ruleAction,"\n",
               $e->cidrBlock,"\n",
               $e->port_from,'-',$e->port_to,"\n";
     }
 }

DESCRIPTION

This object represents an Amazon EC2 VPC network ACL entry

METHODS

These object methods are supported:

 ruleNumber     -- Specific rule number for the entry. ACL entries are
                   processed in ascending order by rule number.
 protocol       -- Protocol. A value of -1 means all protocols.
                   See: http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
                   for a list of protocol numbers.
 ruleAction     -- Whether to allow or deny the traffic that matches the
                   rule.  Valid values:  allow | deny
 egress         -- Boolean flag to indicate an egress rule (rule is
                   applied to traffic leaving the subnet). Value of true
                   indicates egress.
 cidrBlock      -- The network range to allow or deny, in CIDR notation.
 icmpType       -- For the ICMP protocol, this is the ICMP type
 icmpCode       -- For the ICMP protocol, this is the ICMP code.
 portRangeFrom  -- For the TCP or UDP protocols, the starting range of ports the
                   rule applies to.
 portRangeTo    -- For the TCP or UDP protocols, the ending range of ports the
                   rule applies to.
 port_from      -- Alias for portRangeFrom
 port_to        -- Alias for portRangeTo

The object also supports the tags() method described in VM::EC2::Generic:

STRING OVERLOADING

When used in a string context, this object will interpolate the rule number

SEE ALSO

VM::EC2 VM::EC2::Generic VM::EC2::Tag VM::EC2::VPC VM::EC2::VPC::NetworkAcl

AUTHOR

Lance Kinley <lkinley@loyaltymethods.com>.

Copyright (c) 2012 Loyalty Methods, Inc.

This package and its accompanying libraries is free software; you can redistribute it and/or modify it under the terms of the GPL (either version 1, or at your option, any later version) or the Artistic License 2.0. Refer to LICENSE for the full license text. In addition, please see DISCLAIMER.txt for disclaimers of warranty.