Network.AWS.EC2.AuthorizeSecurityGroupEgress

Adds one or more egress rules to a security group for use with a VPC. Specifically, this action permits instances to send traffic to one or more destination CIDR IP address ranges, or to one or more destination security groups for the same VPC.

You can have up to 50 rules per security group (covering both ingress and egress rules).

A security group is for use with instances either in the EC2-Classic platform or in a specific VPC. This action doesn't apply to security groups for use in EC2-Classic. For more information, see Security Groups for Your VPC in the Amazon Virtual Private Cloud User Guide.

Each rule consists of the protocol (for example, TCP), plus either a CIDR range or a source group. For the TCP and UDP protocols, you must also specify the destination port or port range. For the ICMP protocol, you must also specify the ICMP type and code. You can use -1 for the type or code to mean all types or all codes.

Rule changes are propagated to affected instances as quickly as possible. However, a small delay might occur.

See: AWS API Reference for AuthorizeSecurityGroupEgress.

Creating a Request

authorizeSecurityGroupEgress

Arguments

:: Text

asgeGroupId

-> AuthorizeSecurityGroupEgress

Creates a value of AuthorizeSecurityGroupEgress with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

• asgeFromPort
• asgeIPPermissions
• asgeIPProtocol
• asgeToPort
• asgeCIdRIP
• asgeSourceSecurityGroupOwnerId
• asgeSourceSecurityGroupName
• asgeDryRun
• asgeGroupId

data AuthorizeSecurityGroupEgress

See: authorizeSecurityGroupEgress smart constructor.

Instances

Eq AuthorizeSecurityGroupEgress

Data AuthorizeSecurityGroupEgress

Read AuthorizeSecurityGroupEgress

Show AuthorizeSecurityGroupEgress

Generic AuthorizeSecurityGroupEgress

AWSRequest AuthorizeSecurityGroupEgress

ToPath AuthorizeSecurityGroupEgress

ToHeaders AuthorizeSecurityGroupEgress

ToQuery AuthorizeSecurityGroupEgress

type Rep AuthorizeSecurityGroupEgress

type Rs AuthorizeSecurityGroupEgress = AuthorizeSecurityGroupEgressResponse

Request Lenses

asgeFromPort :: Lens' AuthorizeSecurityGroupEgress (Maybe Int)

The start of port range for the TCP and UDP protocols, or an ICMP type number. For the ICMP type number, use '-1' to specify all ICMP types.

asgeIPPermissions :: Lens' AuthorizeSecurityGroupEgress [IPPermission]

A set of IP permissions. You can't specify a destination security group and a CIDR IP address range.

asgeIPProtocol :: Lens' AuthorizeSecurityGroupEgress (Maybe Text)

The IP protocol name (tcp, udp, icmp) or number (see Protocol Numbers). Use '-1' to specify all.

asgeToPort :: Lens' AuthorizeSecurityGroupEgress (Maybe Int)

The end of port range for the TCP and UDP protocols, or an ICMP code number. For the ICMP code number, use '-1' to specify all ICMP codes for the ICMP type.

asgeCIdRIP :: Lens' AuthorizeSecurityGroupEgress (Maybe Text)

The CIDR IP address range. You can't specify this parameter when specifying a source security group.

asgeSourceSecurityGroupOwnerId :: Lens' AuthorizeSecurityGroupEgress (Maybe Text)

The AWS account number for a destination security group. To authorize outbound access to a destination security group, we recommend that you use a set of IP permissions instead.

asgeSourceSecurityGroupName :: Lens' AuthorizeSecurityGroupEgress (Maybe Text)

The name of a destination security group. To authorize outbound access to a destination security group, we recommend that you use a set of IP permissions instead.

asgeDryRun :: Lens' AuthorizeSecurityGroupEgress (Maybe Bool)

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

asgeGroupId :: Lens' AuthorizeSecurityGroupEgress Text

The ID of the security group.

Destructuring the Response

authorizeSecurityGroupEgressResponse :: AuthorizeSecurityGroupEgressResponse

Creates a value of AuthorizeSecurityGroupEgressResponse with the minimum fields required to make a request.

data AuthorizeSecurityGroupEgressResponse

See: authorizeSecurityGroupEgressResponse smart constructor.

Instances

Eq AuthorizeSecurityGroupEgressResponse

Data AuthorizeSecurityGroupEgressResponse

Read AuthorizeSecurityGroupEgressResponse

Show AuthorizeSecurityGroupEgressResponse

Generic AuthorizeSecurityGroupEgressResponse

type Rep AuthorizeSecurityGroupEgressResponse