-
Notifications
You must be signed in to change notification settings - Fork 9.6k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Adds documentation for the AWS Network ACL Rule resource
- Loading branch information
Showing
2 changed files
with
57 additions
and
0 deletions.
There are no files selected for viewing
53 changes: 53 additions & 0 deletions
53
website/source/docs/providers/aws/r/network_acl_rule.html.markdown
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,53 @@ | ||
--- | ||
layout: "aws" | ||
page_title: "AWS: aws_network_acl_rule" | ||
sidebar_current: "docs-aws-resource-network-acl-rule" | ||
description: |- | ||
Provides an network ACL Rule resource. | ||
--- | ||
|
||
# aws\_network\_acl\_rule | ||
|
||
Creates an entry (a rule) in a network ACL with the specified rule number. | ||
|
||
## Example Usage | ||
|
||
``` | ||
resource "aws_network_acl" "bar" { | ||
vpc_id = "${aws_vpc.foo.id}" | ||
} | ||
resource "aws_network_acl_rule" "bar" { | ||
network_acl_id = "${aws_network_acl.bar.id}" | ||
rule_number = 200 | ||
egress = false | ||
protocol = "tcp" | ||
rule_action = "allow" | ||
cidr_block = "0.0.0.0/0" | ||
from_port = 22 | ||
to_port = 22 | ||
} | ||
``` | ||
|
||
## Argument Reference | ||
|
||
The following arguments are supported: | ||
|
||
* `network_acl_id` - (Required) The ID of the network ACL. | ||
* `rule_number` - (Required) The rule number for the entry (for example, 100). ACL entries are processed in ascending order by rule number. | ||
* `egress` - (Optional, bool) Indicates whether this is an egress rule (rule is applied to traffic leaving the subnet). Default `false`. | ||
* `protocol` - (Required) The protocol. A value of -1 means all protocols. | ||
* `rule_action` - (Required) Indicates whether to allow or deny the traffic that matches the rule. Accepted values: `allow` | `deny` | ||
* `cidr_block` - (Required) The network range to allow or deny, in CIDR notation (for example 172.16.0.0/24 ). | ||
* `from_port` - (Optional) The from port to match. | ||
* `to_port` - (Optional) The to port to match. | ||
* `icmp_type` - (Optional) ICMP protocol: The ICMP type. Required if specifying ICMP for the protocol. e.g. -1 | ||
* `icmp_code` - (Optional) ICMP protocol: The ICMP code. Required if specifying ICMP for the protocol. e.g. -1 | ||
|
||
~> Note: For more information on ICMP types and codes, see here: http://www.nthelp.com/icmp.html | ||
|
||
## Attributes Reference | ||
|
||
The following attributes are exported: | ||
|
||
* `id` - The ID of the network ACL Rule | ||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters