CmdID / aws / aws ec2

aws ec2 create-network-acl

Creates a network ACL in a VPC. AWS CLI reference

1 example 4 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To create a network ACL

The following create-network-acl example creates a network ACL for the specified VPC.

aws ec2 create-network-acl --vpc-id vpc-a01106c2Identify

--vpc-idThe ID of the VPC.

Its output

{
    "NetworkAcl": {
        "Associations": [],
        "NetworkAclId": "acl-5fb85d36",
        "VpcId": "vpc-a01106c2",
        "Tags": [],
        "Entries": [
            {
                "CidrBlock": "0.0.0.0/0",
                "RuleNumber": 32767,
                "Protocol": "-1",
                "Egress": true,
                "RuleAction": "deny"
            },
            {
                "CidrBlock": "0.0.0.0/0",
                "RuleNumber": 32767,
                "Protocol": "-1",
                "Egress": false,
                "RuleAction": "deny"
            }
        ],
        "IsDefault": false
    }
}

For more information, see Create a network ACL for your VPC in the Amazon VPC User Guide.

Options

4 in the AWS CLI reference

--client-tokenUnique, case-sensitive identifier that you provide to ensure the idempotency of the request.

--dry-runChecks whether you have the required permissions for the action, without actually making the request, and provides an error response.

--tag-specificationsThe tags to assign to the network ACL.

--vpc-idThe ID of the VPC.