VM::EC2::VPC::NetworkAcl::Entry - VPC Network ACL entry

       Lance Kinley <lkinley@loyaltymethods.com>.

       Copyright (c) 2012 Loyalty Methods, Inc.

       This package and its accompanying libraries is free software; you can redistribute it and/or modify it
       under the terms of the GPL (either version 1, or at your option, any later version) or the Artistic
       License 2.0.  Refer to LICENSE for the full license text. In addition, please see DISCLAIMER.txt for
       disclaimers of warranty.

perl v5.38.2                                       2024-08-10               VM::EC2::VPC::NetworkAcl::Entry(3pm)

       This object represents an Amazon EC2 VPC network ACL entry

       These object methods are supported:

        ruleNumber     -- Specific rule number for the entry. ACL entries are
                          processed in ascending order by rule number.
        protocol       -- Protocol. A value of -1 means all protocols.
                          See: http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
                          for a list of protocol numbers.
        ruleAction     -- Whether to allow or deny the traffic that matches the
                          rule.  Valid values:  allow | deny
        egress         -- Boolean flag to indicate an egress rule (rule is
                          applied to traffic leaving the subnet). Value of true
                          indicates egress.
        cidrBlock      -- The network range to allow or deny, in CIDR notation.
        icmpType       -- For the ICMP protocol, this is the ICMP type
        icmpCode       -- For the ICMP protocol, this is the ICMP code.
        portRangeFrom  -- For the TCP or UDP protocols, the starting range of ports the
                          rule applies to.
        portRangeTo    -- For the TCP or UDP protocols, the ending range of ports the
                          rule applies to.
        port_from      -- Alias for portRangeFrom
        port_to        -- Alias for portRangeTo

       The object also supports the tags() method described in VM::EC2::Generic:

       VM::EC2::VPC::NetworkAcl::Entry - VPC Network ACL entry

       VM::EC2 VM::EC2::Generic VM::EC2::Tag VM::EC2::VPC VM::EC2::VPC::NetworkAcl

       When used in a string context, this object will interpolate the rule number

         use VM::EC2;

        my $ec2      = VM::EC2->new(...);
        my $acl      = $ec2->describe_network_acls(-network_acl_id=>'acl-12345678');
        my @entries  = $acl->entries;

        # print outgoing icmp rules
        for my $e (@entries) {
            if ($e->egress && $e->protocol == 1) {  # icmp = 1
                print $e->ruleNumber,"\n",
                      $e->ruleAction,"\n",
                      $e->cidrBlock,"\n",
                      $e->icmpType,"\n",
                      $e->icmpCode,"\n";
            }
        }

        # print incoming tcp rules
        for my $e (@entries) {
            if (! $e->egress && $e->protocol == 6) {  # tcp = 6
                print $e->ruleNumber,"\n",
                      $e->ruleAction,"\n",
                      $e->cidrBlock,"\n",
                      $e->port_from,'-',$e->port_to,"\n";
            }
        }