Add support for all protocols.

Protocol numbers must be used for all but a handful of protocols.
See https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group-rule-1.html#cfn-ec2-security-group-rule-ipprotocol

packages/@aws-cdk/aws-ec2/lib/port.ts

@@ -2,15 +2,156 @@ import { Token } from '@aws-cdk/core';
 
 /**
  * Protocol for use in Connection Rules
+ * Keep in sync with https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml
  */
 export enum Protocol {
   ALL = '-1',
+  HOPOPT = '0',
+  ICMP = 'icmp',
+  IGMP = '2',
+  GGP = '3',
+  IPV4 = '4',
+  ST = '5',
   TCP = 'tcp',
+  CBT = '7',
+  EGP = '8',
+  IGP = '9',
+  BBN_RCC_MON = '10',
+  NVP_II = '11',
+  PUP = '12',
+  EMCON = '14',
+  XNET = '15',
+  CHAOS = '16',
   UDP = 'udp',
-  ICMP = 'icmp',
-  ICMPV6 = '58',
-  ESP = 'esp',
-  AH = 'ah',
+  MUX = '18',
+  DCN_MEAS = '19',
+  HMP = '20',
+  PRM = '21',
+  XNS_IDP = '22',
+  TRUNK_1 = '23',
+  TRUNK_2 = '24',
+  LEAF_1 = '25',
+  LEAF_2 = '26',
+  RDP = '27',
+  IRTP = '28',
+  ISO_TP4 = '29',
+  NETBLT = '30',
+  MFE_NSP = '31',
+  MERIT_INP = '32',
+  DCCP = '33',
+  THREEPC = '34',
+  IDPR = '35',
+  XTP = '36',
+  DDP = '37',
+  IDPR_CMTP = '38',
+  TPPLUSPLUS = '39',
+  IL = '40',
+  IPV6 = '41',
+  SDRP = '42',
+  IPV6_ROUTE = '43',
+  IPV6_FRAG = '44',
+  IDRP = '45',
+  RSVP = '46',
+  GRE = '47',
+  DSR = '48',
+  BNA = '49',
+  ESP = '50',
+  AH = '51',
+  I_NLSP = '52',
+  SWIPE = '53',
+  NARP = '54',
+  MOBILE = '55',
+  TLSP = '56',
+  SKIP = '57',
+  ICMPV6 = 'icmpv6',
+  IPV6_NONXT = '59',
+  IPV6_OPTS = '60',
+  CFTP = '62',
+  ANY_LOCAL = '63',
+  SAT_EXPAK = '64',
+  KRYPTOLAN = '65',
+  RVD = '66',
+  IPPC = '67',
+  ANY_DFS = '68',
+  SAT_MON = '69',
+  VISA = '70',
+  IPCV = '71',
+  CPNX = '72',
+  CPHB = '73',
+  WSN = '74',
+  PVP = '75',
+  BR_SAT_MON = '76',
+  SUN_ND = '77',
+  WB_MON = '78',
+  WB_EXPAK = '79',
+  ISO_IP = '80',
+  VMTP = '81',
+  SECURE_VMTP = '82',
+  VINES = '83',
+  TTP = '84',
+  IPTM = '84',
+  NSFNET_IGP = '85',
+  DGP = '86',
+  TCF = '87',
+  EIGRP = '88',
+  OSPFIGP = '89',
+  SPRITE_RPC = '90',
+  LARP = '91',
+  MTP = '92',
+  AX_25 = '93',
+  IPIP = '94',
+  MICP = '95',
+  SCC_SP = '96',
+  ETHERIP = '97',
+  ENCAP = '98',
+  ANY_ENC = '99',
+  GMTP = '100',
+  IFMP = '101',
+  PNNI = '102',
+  PIM = '103',
+  ARIS = '104',
+  SCPS = '105',
+  QNX = '106',
+  A_N = '107',
+  IPCOMP = '108',
+  SNP = '109',
+  COMPAQ_PEER = '110',
+  IPX_IN_IP = '111',
+  VRRP = '112',
+  PGM = '113',
+  ANY_0_HOP = '114',
+  L2TP = '115',
+  DDX = '116',
+  IATP = '117',
+  STP = '118',
+  SRP = '119',
+  UTI = '120',
+  SMP = '121',
+  SM = '122',
+  PTP = '123',
+  ISIS_IPV4 = '124',
+  FIRE = '125',
+  CRTP = '126',
+  CRUDP = '127',
+  SSCOPMCE = '128',
+  IPLT = '129',
+  SPS = '130',
+  PIPE = '131',
+  SCTP = '132',
+  FC = '133',
+  RSVP_E2E_IGNORE = '134',
+  MOBILITY_HEADER = '135',
+  UDPLITE = '136',
+  MPLS_IN_IP = '137',
+  MANET = '138',
+  HIP = '139',
+  SHIM6 = '140',
+  WESP = '141',
+  ROHC = '142',
+  ETHERNET = '143',
+  EXPERIMENT_1 = '253',
+  EXPERIMENT_2 = '254',
+  RESERVED = '255',  
 }
 
 /**
@@ -173,30 +314,6 @@ export class Port {
     });
   }
 
-  /**
-   * A single ESP port
-   */
-  public static esp(): Port {
-    return new Port({
-      protocol: Protocol.ESP,
-      fromPort: 50,
-      toPort: 50,
-      stringRepresentation: 'ESP 50',
-    });
-  }
-
-  /**
-   * A single AH port
-   */
-  public static ah(): Port {
-    return new Port({
-      protocol: Protocol.AH,
-      fromPort: 51,
-      toPort: 51,
-      stringRepresentation: 'AH 51',
-    });
-  }
-
   /**
    * Whether the rule containing this port range can be inlined into a securitygroup or not.
    */