Copyright	(c) 2013-2023 Brendan Hay
License	Mozilla Public License, v. 2.0.
Maintainer	Brendan Hay
Stability	auto-generated
Portability	non-portable (GHC extensions)
Safe Haskell	Safe-Inferred
Language	Haskell2010

Amazonka.EC2.ReplaceNetworkAclEntry

Contents

Creating a Request
Request Lenses
Destructuring the Response

Description

Replaces an entry (rule) in a network ACL. For more information, see Network ACLs in the Amazon Virtual Private Cloud User Guide.

Synopsis

data ReplaceNetworkAclEntry = ReplaceNetworkAclEntry' {
- cidrBlock :: Maybe Text
- dryRun :: Maybe Bool
- icmpTypeCode :: Maybe IcmpTypeCode
- ipv6CidrBlock :: Maybe Text
- portRange :: Maybe PortRange
- egress :: Bool
- networkAclId :: Text
- protocol :: Text
- ruleAction :: RuleAction
- ruleNumber :: Int
}
newReplaceNetworkAclEntry :: Bool -> Text -> Text -> RuleAction -> Int -> ReplaceNetworkAclEntry
replaceNetworkAclEntry_cidrBlock :: Lens' ReplaceNetworkAclEntry (Maybe Text)
replaceNetworkAclEntry_dryRun :: Lens' ReplaceNetworkAclEntry (Maybe Bool)
replaceNetworkAclEntry_icmpTypeCode :: Lens' ReplaceNetworkAclEntry (Maybe IcmpTypeCode)
replaceNetworkAclEntry_ipv6CidrBlock :: Lens' ReplaceNetworkAclEntry (Maybe Text)
replaceNetworkAclEntry_portRange :: Lens' ReplaceNetworkAclEntry (Maybe PortRange)
replaceNetworkAclEntry_egress :: Lens' ReplaceNetworkAclEntry Bool
replaceNetworkAclEntry_networkAclId :: Lens' ReplaceNetworkAclEntry Text
replaceNetworkAclEntry_protocol :: Lens' ReplaceNetworkAclEntry Text
replaceNetworkAclEntry_ruleAction :: Lens' ReplaceNetworkAclEntry RuleAction
replaceNetworkAclEntry_ruleNumber :: Lens' ReplaceNetworkAclEntry Int
data ReplaceNetworkAclEntryResponse = ReplaceNetworkAclEntryResponse' {
}
newReplaceNetworkAclEntryResponse :: ReplaceNetworkAclEntryResponse

Creating a Request

data ReplaceNetworkAclEntry Source #

See: newReplaceNetworkAclEntry smart constructor.

Constructors

ReplaceNetworkAclEntry'

Fields

cidrBlock :: Maybe Text
The IPv4 network range to allow or deny, in CIDR notation (for example 172.16.0.0/24).
dryRun :: Maybe Bool
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.
icmpTypeCode :: Maybe IcmpTypeCode
ICMP protocol: The ICMP or ICMPv6 type and code. Required if specifying protocol 1 (ICMP) or protocol 58 (ICMPv6) with an IPv6 CIDR block.
ipv6CidrBlock :: Maybe Text
The IPv6 network range to allow or deny, in CIDR notation (for example 2001:bd8:1234:1a00::/64).
portRange :: Maybe PortRange
TCP or UDP protocols: The range of ports the rule applies to. Required if specifying protocol 6 (TCP) or 17 (UDP).
egress :: Bool
Indicates whether to replace the egress rule.
Default: If no value is specified, we replace the ingress rule.
networkAclId :: Text
The ID of the ACL.
protocol :: Text
The protocol number. A value of "-1" means all protocols. If you specify "-1" or a protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is allowed, regardless of any ports or ICMP types or codes that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv6 CIDR block, you must specify an ICMP type and code.
ruleAction :: RuleAction
Indicates whether to allow or deny the traffic that matches the rule.
ruleNumber :: Int
The rule number of the entry to replace.

Instances

Instances details

ToHeaders ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods toHeaders :: ReplaceNetworkAclEntry -> [Header] #
ToPath ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods toPath :: ReplaceNetworkAclEntry -> ByteString #
ToQuery ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods toQuery :: ReplaceNetworkAclEntry -> QueryString #
AWSRequest ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Associated Types type AWSResponse ReplaceNetworkAclEntry # Methods request :: (Service -> Service) -> ReplaceNetworkAclEntry -> Request ReplaceNetworkAclEntry # response :: MonadResource m => (ByteStringLazy -> IO ByteStringLazy) -> Service -> Proxy ReplaceNetworkAclEntry -> ClientResponse ClientBody -> m (Either Error (ClientResponse (AWSResponse ReplaceNetworkAclEntry))) #
Generic ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Associated Types type Rep ReplaceNetworkAclEntry :: Type -> Type # Methods from :: ReplaceNetworkAclEntry -> Rep ReplaceNetworkAclEntry x # to :: Rep ReplaceNetworkAclEntry x -> ReplaceNetworkAclEntry #
Read ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods readsPrec :: Int -> ReadS ReplaceNetworkAclEntry # readList :: ReadS [ReplaceNetworkAclEntry] # readPrec :: ReadPrec ReplaceNetworkAclEntry # readListPrec :: ReadPrec [ReplaceNetworkAclEntry] #
Show ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods showsPrec :: Int -> ReplaceNetworkAclEntry -> ShowS # show :: ReplaceNetworkAclEntry -> String # showList :: [ReplaceNetworkAclEntry] -> ShowS #
NFData ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods rnf :: ReplaceNetworkAclEntry -> () #
Eq ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods (==) :: ReplaceNetworkAclEntry -> ReplaceNetworkAclEntry -> Bool # (/=) :: ReplaceNetworkAclEntry -> ReplaceNetworkAclEntry -> Bool #
Hashable ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods hashWithSalt :: Int -> ReplaceNetworkAclEntry -> Int # hash :: ReplaceNetworkAclEntry -> Int #
type AWSResponse ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry type AWSResponse ReplaceNetworkAclEntry = ReplaceNetworkAclEntryResponse
type Rep ReplaceNetworkAclEntry Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry type Rep ReplaceNetworkAclEntry = D1 ('MetaData "ReplaceNetworkAclEntry" "Amazonka.EC2.ReplaceNetworkAclEntry" "amazonka-ec2-2.0-48L9RAJvmvzAdBkRegqWCL" 'False) (C1 ('MetaCons "ReplaceNetworkAclEntry'" 'PrefixI 'True) (((S1 ('MetaSel ('Just "cidrBlock") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "dryRun") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Bool))) :: (S1 ('MetaSel ('Just "icmpTypeCode") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe IcmpTypeCode)) :: (S1 ('MetaSel ('Just "ipv6CidrBlock") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :: S1 ('MetaSel ('Just "portRange") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe PortRange))))) :: ((S1 ('MetaSel ('Just "egress") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Bool) :: S1 ('MetaSel ('Just "networkAclId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)) :: (S1 ('MetaSel ('Just "protocol") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :: (S1 ('MetaSel ('Just "ruleAction") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 RuleAction) :*: S1 ('MetaSel ('Just "ruleNumber") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))))))

newReplaceNetworkAclEntry Source #

Arguments

:: Bool	`ReplaceNetworkAclEntry`
-> Text	`ReplaceNetworkAclEntry`
-> Text	`ReplaceNetworkAclEntry`
-> RuleAction	`ReplaceNetworkAclEntry`
-> Int	`ReplaceNetworkAclEntry`
-> ReplaceNetworkAclEntry

Create a value of ReplaceNetworkAclEntry with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

ReplaceNetworkAclEntry, replaceNetworkAclEntry_cidrBlock - The IPv4 network range to allow or deny, in CIDR notation (for example 172.16.0.0/24).

$sel:dryRun:ReplaceNetworkAclEntry', replaceNetworkAclEntry_dryRun - Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

ReplaceNetworkAclEntry, replaceNetworkAclEntry_icmpTypeCode - ICMP protocol: The ICMP or ICMPv6 type and code. Required if specifying protocol 1 (ICMP) or protocol 58 (ICMPv6) with an IPv6 CIDR block.

ReplaceNetworkAclEntry, replaceNetworkAclEntry_ipv6CidrBlock - The IPv6 network range to allow or deny, in CIDR notation (for example 2001:bd8:1234:1a00::/64).

ReplaceNetworkAclEntry, replaceNetworkAclEntry_portRange - TCP or UDP protocols: The range of ports the rule applies to. Required if specifying protocol 6 (TCP) or 17 (UDP).

ReplaceNetworkAclEntry, replaceNetworkAclEntry_egress - Indicates whether to replace the egress rule.

Default: If no value is specified, we replace the ingress rule.

ReplaceNetworkAclEntry, replaceNetworkAclEntry_networkAclId - The ID of the ACL.

ReplaceNetworkAclEntry, replaceNetworkAclEntry_protocol - The protocol number. A value of "-1" means all protocols. If you specify "-1" or a protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is allowed, regardless of any ports or ICMP types or codes that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv6 CIDR block, you must specify an ICMP type and code.

ReplaceNetworkAclEntry, replaceNetworkAclEntry_ruleAction - Indicates whether to allow or deny the traffic that matches the rule.

ReplaceNetworkAclEntry, replaceNetworkAclEntry_ruleNumber - The rule number of the entry to replace.

Request Lenses

replaceNetworkAclEntry_cidrBlock :: Lens' ReplaceNetworkAclEntry (Maybe Text) Source #

The IPv4 network range to allow or deny, in CIDR notation (for example 172.16.0.0/24).

replaceNetworkAclEntry_dryRun :: Lens' ReplaceNetworkAclEntry (Maybe Bool) Source #

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

replaceNetworkAclEntry_icmpTypeCode :: Lens' ReplaceNetworkAclEntry (Maybe IcmpTypeCode) Source #

ICMP protocol: The ICMP or ICMPv6 type and code. Required if specifying protocol 1 (ICMP) or protocol 58 (ICMPv6) with an IPv6 CIDR block.

replaceNetworkAclEntry_ipv6CidrBlock :: Lens' ReplaceNetworkAclEntry (Maybe Text) Source #

The IPv6 network range to allow or deny, in CIDR notation (for example 2001:bd8:1234:1a00::/64).

replaceNetworkAclEntry_portRange :: Lens' ReplaceNetworkAclEntry (Maybe PortRange) Source #

TCP or UDP protocols: The range of ports the rule applies to. Required if specifying protocol 6 (TCP) or 17 (UDP).

replaceNetworkAclEntry_egress :: Lens' ReplaceNetworkAclEntry Bool Source #

Indicates whether to replace the egress rule.

Default: If no value is specified, we replace the ingress rule.

replaceNetworkAclEntry_networkAclId :: Lens' ReplaceNetworkAclEntry Text Source #

The ID of the ACL.

replaceNetworkAclEntry_protocol :: Lens' ReplaceNetworkAclEntry Text Source #

The protocol number. A value of "-1" means all protocols. If you specify "-1" or a protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is allowed, regardless of any ports or ICMP types or codes that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6) and specify an IPv6 CIDR block, you must specify an ICMP type and code.

replaceNetworkAclEntry_ruleAction :: Lens' ReplaceNetworkAclEntry RuleAction Source #

Indicates whether to allow or deny the traffic that matches the rule.

replaceNetworkAclEntry_ruleNumber :: Lens' ReplaceNetworkAclEntry Int Source #

The rule number of the entry to replace.

Destructuring the Response

data ReplaceNetworkAclEntryResponse Source #

See: newReplaceNetworkAclEntryResponse smart constructor.

Constructors

ReplaceNetworkAclEntryResponse'

Instances

Instances details

Generic ReplaceNetworkAclEntryResponse Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Associated Types type Rep ReplaceNetworkAclEntryResponse :: Type -> Type # Methods from :: ReplaceNetworkAclEntryResponse -> Rep ReplaceNetworkAclEntryResponse x # to :: Rep ReplaceNetworkAclEntryResponse x -> ReplaceNetworkAclEntryResponse #
Read ReplaceNetworkAclEntryResponse Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods readsPrec :: Int -> ReadS ReplaceNetworkAclEntryResponse # readList :: ReadS [ReplaceNetworkAclEntryResponse] # readPrec :: ReadPrec ReplaceNetworkAclEntryResponse # readListPrec :: ReadPrec [ReplaceNetworkAclEntryResponse] #
Show ReplaceNetworkAclEntryResponse Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods showsPrec :: Int -> ReplaceNetworkAclEntryResponse -> ShowS # show :: ReplaceNetworkAclEntryResponse -> String # showList :: [ReplaceNetworkAclEntryResponse] -> ShowS #
NFData ReplaceNetworkAclEntryResponse Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods rnf :: ReplaceNetworkAclEntryResponse -> () #
Eq ReplaceNetworkAclEntryResponse Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry Methods (==) :: ReplaceNetworkAclEntryResponse -> ReplaceNetworkAclEntryResponse -> Bool # (/=) :: ReplaceNetworkAclEntryResponse -> ReplaceNetworkAclEntryResponse -> Bool #
type Rep ReplaceNetworkAclEntryResponse Source #
Instance details Defined in Amazonka.EC2.ReplaceNetworkAclEntry type Rep ReplaceNetworkAclEntryResponse = D1 ('MetaData "ReplaceNetworkAclEntryResponse" "Amazonka.EC2.ReplaceNetworkAclEntry" "amazonka-ec2-2.0-48L9RAJvmvzAdBkRegqWCL" 'False) (C1 ('MetaCons "ReplaceNetworkAclEntryResponse'" 'PrefixI 'False) (U1 :: Type -> Type))

newReplaceNetworkAclEntryResponse :: ReplaceNetworkAclEntryResponse Source #

Create a value of ReplaceNetworkAclEntryResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.