NAME

       VM::EC2::VPC::NetworkAcl::Entry - VPC Network ACL entry

SYNOPSIS

         use VM::EC2;

        my $ec2      = VM::EC2->new(...);
        my $acl      = $ec2->describe_network_acls(-network_acl_id=>'acl-12345678');
        my @entries  = $acl->entries;

        # print outgoing icmp rules
        for my $e (@entries) {
            if ($e->egress && $e->protocol == 1) {  # icmp = 1
                print $e->ruleNumber,"\n",
                      $e->ruleAction,"\n",
                      $e->cidrBlock,"\n",
                      $e->icmpType,"\n",
                      $e->icmpCode,"\n";
            }
        }

        # print incoming tcp rules
        for my $e (@entries) {
            if (! $e->egress && $e->protocol == 6) {  # tcp = 6
                print $e->ruleNumber,"\n",
                      $e->ruleAction,"\n",
                      $e->cidrBlock,"\n",
                      $e->port_from,'-',$e->port_to,"\n";
            }
        }

DESCRIPTION

       This object represents an Amazon EC2 VPC network ACL entry

METHODS

       These object methods are supported:

        ruleNumber     -- Specific rule number for the entry. ACL entries are
                          processed in ascending order by rule number.
        protocol       -- Protocol. A value of -1 means all protocols.
                          See: http://www.iana.org/assignments/protocol-numbers/protocol-numbers.xml
                          for a list of protocol numbers.
        ruleAction     -- Whether to allow or deny the traffic that matches the
                          rule.  Valid values:  allow | deny
        egress         -- Boolean flag to indicate an egress rule (rule is
                          applied to traffic leaving the subnet). Value of true
                          indicates egress.
        cidrBlock      -- The network range to allow or deny, in CIDR notation.
        icmpType       -- For the ICMP protocol, this is the ICMP type
        icmpCode       -- For the ICMP protocol, this is the ICMP code.
        portRangeFrom  -- For the TCP or UDP protocols, the starting range of ports the
                          rule applies to.
        portRangeTo    -- For the TCP or UDP protocols, the ending range of ports the
                          rule applies to.
        port_from      -- Alias for portRangeFrom
        port_to        -- Alias for portRangeTo

       The object also supports the tags() method described in VM::EC2::Generic:

STRING OVERLOADING

       When used in a string context, this object will interpolate the rule number

SEE ALSO

       VM::EC2 VM::EC2::Generic VM::EC2::Tag VM::EC2::VPC VM::EC2::VPC::NetworkAcl

AUTHOR

       Lance Kinley <lkinley@loyaltymethods.com>.

       Copyright (c) 2012 Loyalty Methods, Inc.

       This package and its accompanying libraries is free software; you can redistribute it
       and/or modify it under the terms of the GPL (either version 1, or at your option, any
       later version) or the Artistic License 2.0.  Refer to LICENSE for the full license text.
       In addition, please see DISCLAIMER.txt for disclaimers of warranty.