An [Object Control List (OCL)](https://turbot.com/guardrails/docs/reference/ocl) with a list of filter rules to approve or reject network ACL rules. Note that the Approved control does not operate directly from this policy, but from the `Approved &gt; Compiled Rules`. The rules are processed in order, and any built-in Turbot rules will appear first in the list of compiled rules. Examples: ``` # Allow HTTP and HTTPS rules for RFC1918 private space APPROVE $.turbot.fromPort:=80 $.turbot.toPort:=80 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 APPROVE $.turbot.fromPort:=443 $.turbot.toPort:=443 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 # Reject any rule from 0.0.0.0/0 REJECT $.turbot.cidr:0.0.0.0/0 # Reject any rule using specific protocols like TCP(6), UDP(17) and All(-1) REJECT $.IpProtocol:tcp,udp,-1 ```

AWS > VPC > Network ACL > Ingress Rules

AWS > VPC > Network ACL > Ingress Rules > Approved

An [Object Control List (OCL)](https://turbot.com/guardrails/docs/reference/ocl)&#92;nwith a list of filter rules to approve or reject network ACL rules.&#92;n&#92;nNote that the Approved control does not operate directly from this policy,&#92;nbut from the `Approved &gt; Compiled Rules`. The rules are processed in order,&#92;nand any built-in Turbot rules will appear first in the list of compiled&#92;nrules.&#92;n&#92;nExamples:&#92;n  ```&#92;n  # Allow HTTP and HTTPS rules for RFC1918 private space&#92;n  APPROVE $.turbot.fromPort:=80 $.turbot.toPort:=80 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16&#92;n  APPROVE $.turbot.fromPort:=443 $.turbot.toPort:=443 $.turbot.cidr:&lt;=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16&#92;n&#92;n  # Reject any rule from 0.0.0.0/0&#92;n  REJECT $.turbot.cidr:0.0.0.0/0&#92;n&#92;n  # Reject any rule using specific protocols like TCP(6), UDP(17) and All(-1)&#92;n  REJECT $.IpProtocol:tcp,udp,-1&#92;n  ```&#92;n

Schema Type	`string`
Default	`# Approve unmatched rules APPROVE *`

Policy: AWS > VPC > Network ACL > Ingress Rules > Approved > Rules

Resource Types

Primary Policy

Controls

Policy Packs

Policy Specification

Category

In Your Workspace

Developers