NAME

       ec2-create-network-acl-entry - Create a network ACL entry

SYNOPSIS

        ec2addnae ([ec2-create-network-acl-entry])
        ec2addnae [GENERAL OPTIONS] NETWORK_ACL -n RULE_NUMBER -r CIDR [--egress] -P PROTOCOL (-p
       PORT_RANGE | -t ICMP_TYPE_CODE) {--allow | --deny}

GENERAL NOTES

        Any command option/parameter may be passed a value of '-' to indicate
        that values for that option should be read from stdin.

DESCRIPTION

        Create a network ACL entry.
        NETWORK_ACL is the network acl ID to which to add the entry.

GENERAL OPTIONS

        -O, --aws-access-key KEY
            AWS Access Key ID. Defaults to the value of the AWS_ACCESS_KEY
            environment variable (if set).

        -W, --aws-secret-key KEY
            AWS Secret Access Key. Defaults to the value of the AWS_SECRET_KEY
            environment variable (if set).

        -T, --security-token TOKEN
            AWS delegation token. Defaults to the value of the AWS_DELEGATION_TOKEN
            environment variable (if set).

        -K, --private-key KEY
            [DEPRECATED] Specify KEY as the private key to use. Defaults to the value of the
            EC2_PRIVATE_KEY environment variable (if set). Overrides the default.

        -C, --cert CERT
            [DEPRECATED] Specify CERT as the X509 certificate to use. Defaults to the value
            of the EC2_CERT environment variable (if set). Overrides the default.

        -U, --url URL
            Specify URL as the web service URL to use. Defaults to the value of
            'https://ec2.amazonaws.com' (us-east-1) or to that of the
            EC2_URL environment variable (if set). Overrides the default.

        --region REGION
            Specify REGION as the web service region to use.
            This option will override the URL specified by the "-U URL" option
            and EC2_URL environment variable.
            This option defaults to the region specified by the EC2_URL environment variable
            or us-east-1 if this environment variable is not set.

        -D, --auth-dry-run
            Check if you can perform the requested action rather than actually performing it.

        -v, --verbose
            Verbose output.

        -?, --help
            Display this help.

        -H, --headers
            Display column headers.

        --debug
            Display additional debugging information.

        --show-empty-fields
            Indicate empty fields.

        --hide-tags
            Do not display tags for tagged resources.

        --connection-timeout TIMEOUT
            Specify a connection timeout TIMEOUT (in seconds).

        --request-timeout TIMEOUT
            Specify a request timeout TIMEOUT (in seconds).

SPECIFIC OPTIONS

        -n, --rule-number RULE_NUMBER
            The rule number to add.

        -r, --cidr CIDR
            The IP range to regulate.

        -P, --protocol PROTOCOL
            The IP protocol to regulate.  Set to 'all' for wildcard.

        -p, --port-range PORT_RANGE
            The port range to regulate (TCP and UDP only).

        -t, --icmp-type-code ICMP_TYPE_CODE
            The ICMP type and code to regulate.

        --allow
            Sets the action to be taken on packets matching the rule to 'allow'.
            Must specify either this or deny.

        --deny
            Sets the action to be taken on packets matching the rule to 'deny'.
            Must specify either this or allow.

        --egress
            Specifies an egress rule.  The rule is otherwise assumed to be ingress.

SEE ALSO

         http://docs.amazonwebservices.com/AWSEC2/2013-10-15/CommandLineReference
         http://docs.amazonwebservices.com/AWSEC2/latest/CommandLineReference