NAME

ec2-replace-network-acl-entry - Replace an existing network ACL entry

SYNOPSIS

ec2repnae ([ec2-replace-network-acl-entry])
ec2repnae [GENERAL OPTIONS] NETWORK_ACL -n RULE_NUMBER -r CIDR [--egress] [-P PROTOCOL] (-p PORT_RANGE | -t ICMP_TYPE_CODE) {--allow | --deny}

GENERAL NOTES

Any command option/parameter may be passed a value of '-' to indicate
that values for that option should be read from stdin.

DESCRIPTION

Replace an existing network ACL entry.
NETWORK_ACL is the network acl ID in which to replace the entry.

GENERAL OPTIONS

-O, --aws-access-key KEY
AWS Access Key ID. Defaults to the value of the AWS_ACCESS_KEY
environment variable (if set).

-W, --aws-secret-key KEY
AWS Secret Access Key. Defaults to the value of the AWS_SECRET_KEY
environment variable (if set).

-T, --security-token TOKEN
AWS delegation token. Defaults to the value of the AWS_DELEGATION_TOKEN
environment variable (if set).

-K, --private-key KEY
[DEPRECATED] Specify KEY as the private key to use. Defaults to the value of the
EC2_PRIVATE_KEY environment variable (if set). Overrides the default.

-C, --cert CERT
[DEPRECATED] Specify CERT as the X509 certificate to use. Defaults to the value
of the EC2_CERT environment variable (if set). Overrides the default.

-U, --url URL
Specify URL as the web service URL to use. Defaults to the value of
'https://ec2.amazonaws.com' (us-east-1) or to that of the
EC2_URL environment variable (if set). Overrides the default.

--region REGION
Specify REGION as the web service region to use.
This option will override the URL specified by the "-U URL" option
and EC2_URL environment variable.
This option defaults to the region specified by the EC2_URL environment variable
or us-east-1 if this environment variable is not set.

-D, --auth-dry-run
Check if you can perform the requested action rather than actually performing it.

-v, --verbose
Verbose output.

-?, --help
Display this help.

-H, --headers
Display column headers.

--debug
Display additional debugging information.

--show-empty-fields
Indicate empty fields.

--hide-tags
Do not display tags for tagged resources.

--connection-timeout TIMEOUT
Specify a connection timeout TIMEOUT (in seconds).

--request-timeout TIMEOUT
Specify a request timeout TIMEOUT (in seconds).

SPECIFIC OPTIONS

-n, --rule-number RULE_NUMBER
The rule number to replace.

-r, --cidr CIDR
The IP range to regulate.

--egress
Specifies an egress rule. The rule is otherwise assumed to be ingress.

-P, --protocol PROTOCOL
The IP protocol to regulate. Set to 'all' for wildcard.

-p, --port-range PORT_RANGE
The port range to regulate (TCP and UDP only).

-t, --icmp-type-code ICMP_TYPE_CODE
The ICMP type and code to regulate.

--allow
Sets the action to be taken on packets matching the rule to 'allow'.
Must specify either this or deny.