Struct NetworkAclEntry 

#[non_exhaustive]
pub struct NetworkAclEntry {
    pub icmp_type_code: Option<NetworkAclIcmpTypeCode>,
    pub protocol: String,
    pub port_range: Option<NetworkAclPortRange>,
    pub cidr_block: Option<String>,
    pub ipv6_cidr_block: Option<String>,
    pub rule_action: NetworkAclRuleAction,
    pub egress: bool,
}

Describes a rule in a network ACL.

Each network ACL has a set of numbered ingress rules and a separate set of numbered egress rules. When determining whether a packet should be allowed in or out of a subnet associated with the network ACL, Amazon Web Services processes the entries in the network ACL according to the rule numbers, in ascending order.

When you manage an individual network ACL, you explicitly specify the rule numbers. When you specify the network ACL rules in a Firewall Manager policy, you provide the rules to run first, in the order that you want them to run, and the rules to run last, in the order that you want them to run. Firewall Manager assigns the rule numbers for you when you save the network ACL policy specification.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

icmp_type_code: Option<NetworkAclIcmpTypeCode>

ICMP protocol: The ICMP type and code.

protocol: String

The protocol number. A value of "-1" means all protocols.

port_range: Option<NetworkAclPortRange>

TCP or UDP protocols: The range of ports the rule applies to.

cidr_block: Option<String>

The IPv4 network range to allow or deny, in CIDR notation.

ipv6_cidr_block: Option<String>

The IPv6 network range to allow or deny, in CIDR notation.

rule_action: NetworkAclRuleAction

Indicates whether to allow or deny the traffic that matches the rule.

egress: bool

Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet). If it's not an egress rule, then it's an ingress, or inbound, rule.

Implementations

impl NetworkAclEntry

pub fn icmp_type_code(&self) -> Option<&NetworkAclIcmpTypeCode>

ICMP protocol: The ICMP type and code.

pub fn protocol(&self) -> &str

The protocol number. A value of "-1" means all protocols.

pub fn port_range(&self) -> Option<&NetworkAclPortRange>

TCP or UDP protocols: The range of ports the rule applies to.

pub fn cidr_block(&self) -> Option<&str>

The IPv4 network range to allow or deny, in CIDR notation.

pub fn ipv6_cidr_block(&self) -> Option<&str>

The IPv6 network range to allow or deny, in CIDR notation.

pub fn rule_action(&self) -> &NetworkAclRuleAction

Indicates whether to allow or deny the traffic that matches the rule.

pub fn egress(&self) -> bool

Indicates whether the rule is an egress, or outbound, rule (applied to traffic leaving the subnet). If it's not an egress rule, then it's an ingress, or inbound, rule.

impl NetworkAclEntry

pub fn builder() -> NetworkAclEntryBuilder

Creates a new builder-style object to manufacture NetworkAclEntry.

Trait Implementations

impl Clone for NetworkAclEntry

fn clone(&self) -> NetworkAclEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkAclEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for NetworkAclEntry

fn eq(&self, other: &NetworkAclEntry) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for NetworkAclEntry