How to to specify Port Range in aws_network_acl rules

[Rajinder Singh]

I am creating a network acl for my subnet.

I need to define an ingress rule for ephemeral ports.

This requires specifying a port range like this one: 49152-65535

http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html#VPC_ACLs_Ephemeral_Ports

Documentation of aws_network_acl is here:

https://www.terraform.io/docs/providers/aws/r/network_acl.html

to_port only allows specifying an integer. How can I specify a port range.

Raj

[Daniel Bethke]

There should also be a from_port that you can use for the beginning of the range

i think it should look something like this:

  ingress {

    rule_no     = 140

    from_port   = 49152

    to_port     = 65535

    action     = "allow"

    protocol   = "6"

    cidr_block = "0.0.0.0/0"

  }

[knope]

you are correct.