To configure a Tenant ACL rule, you need a Management API access token with the following scopes:
create:network_aclsupdate:network_aclsread:network_aclsdelete:network_acls
Available actions
You can view, create, update, and delete Tenant ACL rules with the Management API.| Action | Endpoint | Required scope |
|---|---|---|
| View a rule | Get a specific access control list entry for a tenant | read:network_acls |
| View all rules | Get all access control list entries for a tenant | read:network_acls |
| Create a rule | Create access control list | create:network_acls |
| Update a rule | Partial update for an access control list | update:network_acls |
| Overwrite a rule | Update access control list | update:network_acls |
| Delete a rule | Delete access control list | delete:network_acls |
Parameters
For detailed information about Tenant ACL parameters and how to use them, read Reference.Describes the purpose or functionality of the rule.Example:
Only allow requests originating from the United StatesEnables or disables the rule.Example:
trueNumerical value that determines the order in which the rule is evaluated.Example:
1Contains the conditions and actions of the rule.
Examples
Toggle monitoring mode for a rule
You can enable monitoring mode for a Tenant ACL rule with the Management API Update access control list endpoint. Add thelog property to the rule.action object and set its value to true.