import { Command as $Command } from "@smithy/smithy-client"; import type { MetadataBearer as __MetadataBearer } from "@smithy/types"; import type { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client"; import type { RevokeSecurityGroupIngressRequest, RevokeSecurityGroupIngressResult } from "../models/models_7"; /** * @public */ export type { __MetadataBearer }; export { $Command }; /** * @public * * The input for {@link RevokeSecurityGroupIngressCommand}. */ export interface RevokeSecurityGroupIngressCommandInput extends RevokeSecurityGroupIngressRequest { } /** * @public * * The output of {@link RevokeSecurityGroupIngressCommand}. */ export interface RevokeSecurityGroupIngressCommandOutput extends RevokeSecurityGroupIngressResult, __MetadataBearer { } declare const RevokeSecurityGroupIngressCommand_base: { new (input: RevokeSecurityGroupIngressCommandInput): import("@smithy/smithy-client").CommandImpl; new (...[input]: [] | [RevokeSecurityGroupIngressCommandInput]): import("@smithy/smithy-client").CommandImpl; getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions; }; /** *

Removes the specified inbound (ingress) rules from a security group.

*

You can specify rules using either rule IDs or security group rule properties. If you use * rule properties, the values that you specify (for example, ports) must match the existing rule's * values exactly. Each rule has a protocol, from and to ports, and source (CIDR range, * security group, or prefix list). For the TCP and UDP protocols, you must also specify the * destination port or range of ports. For the ICMP protocol, you must also specify the ICMP type * and code. If the security group rule has a description, you do not need to specify the description * to revoke the rule.

*

For a default VPC, if the values you specify do not match the existing rule's values, * no error is returned, and the output describes the security group rules that were not * revoked.

*

For a non-default VPC, if the values you specify do not match the existing rule's * values, an InvalidPermission.NotFound client error is returned, and no * rules are revoked.

*

Amazon Web Services recommends that you describe the security group to verify that the rules were removed.

*

Rule changes are propagated to instances within the security group as quickly as possible. * However, a small delay might occur.

* @example * Use a bare-bones client and the command you need to make an API call. * ```javascript * import { EC2Client, RevokeSecurityGroupIngressCommand } from "@aws-sdk/client-ec2"; // ES Modules import * // const { EC2Client, RevokeSecurityGroupIngressCommand } = require("@aws-sdk/client-ec2"); // CommonJS import * // import type { EC2ClientConfig } from "@aws-sdk/client-ec2"; * const config = {}; // type is EC2ClientConfig * const client = new EC2Client(config); * const input = { // RevokeSecurityGroupIngressRequest * CidrIp: "STRING_VALUE", * FromPort: Number("int"), * GroupId: "STRING_VALUE", * GroupName: "STRING_VALUE", * IpPermissions: [ // IpPermissionList * { // IpPermission * IpProtocol: "STRING_VALUE", * FromPort: Number("int"), * ToPort: Number("int"), * UserIdGroupPairs: [ // UserIdGroupPairList * { // UserIdGroupPair * Description: "STRING_VALUE", * UserId: "STRING_VALUE", * GroupName: "STRING_VALUE", * GroupId: "STRING_VALUE", * VpcId: "STRING_VALUE", * VpcPeeringConnectionId: "STRING_VALUE", * PeeringStatus: "STRING_VALUE", * }, * ], * IpRanges: [ // IpRangeList * { // IpRange * Description: "STRING_VALUE", * CidrIp: "STRING_VALUE", * }, * ], * Ipv6Ranges: [ // Ipv6RangeList * { // Ipv6Range * Description: "STRING_VALUE", * CidrIpv6: "STRING_VALUE", * }, * ], * PrefixListIds: [ // PrefixListIdList * { // PrefixListId * Description: "STRING_VALUE", * PrefixListId: "STRING_VALUE", * }, * ], * }, * ], * IpProtocol: "STRING_VALUE", * SourceSecurityGroupName: "STRING_VALUE", * SourceSecurityGroupOwnerId: "STRING_VALUE", * ToPort: Number("int"), * SecurityGroupRuleIds: [ // SecurityGroupRuleIdList * "STRING_VALUE", * ], * DryRun: true || false, * }; * const command = new RevokeSecurityGroupIngressCommand(input); * const response = await client.send(command); * // { // RevokeSecurityGroupIngressResult * // Return: true || false, * // UnknownIpPermissions: [ // IpPermissionList * // { // IpPermission * // IpProtocol: "STRING_VALUE", * // FromPort: Number("int"), * // ToPort: Number("int"), * // UserIdGroupPairs: [ // UserIdGroupPairList * // { // UserIdGroupPair * // Description: "STRING_VALUE", * // UserId: "STRING_VALUE", * // GroupName: "STRING_VALUE", * // GroupId: "STRING_VALUE", * // VpcId: "STRING_VALUE", * // VpcPeeringConnectionId: "STRING_VALUE", * // PeeringStatus: "STRING_VALUE", * // }, * // ], * // IpRanges: [ // IpRangeList * // { // IpRange * // Description: "STRING_VALUE", * // CidrIp: "STRING_VALUE", * // }, * // ], * // Ipv6Ranges: [ // Ipv6RangeList * // { // Ipv6Range * // Description: "STRING_VALUE", * // CidrIpv6: "STRING_VALUE", * // }, * // ], * // PrefixListIds: [ // PrefixListIdList * // { // PrefixListId * // Description: "STRING_VALUE", * // PrefixListId: "STRING_VALUE", * // }, * // ], * // }, * // ], * // RevokedSecurityGroupRules: [ // RevokedSecurityGroupRuleList * // { // RevokedSecurityGroupRule * // SecurityGroupRuleId: "STRING_VALUE", * // GroupId: "STRING_VALUE", * // IsEgress: true || false, * // IpProtocol: "STRING_VALUE", * // FromPort: Number("int"), * // ToPort: Number("int"), * // CidrIpv4: "STRING_VALUE", * // CidrIpv6: "STRING_VALUE", * // PrefixListId: "STRING_VALUE", * // ReferencedGroupId: "STRING_VALUE", * // Description: "STRING_VALUE", * // }, * // ], * // }; * * ``` * * @param RevokeSecurityGroupIngressCommandInput - {@link RevokeSecurityGroupIngressCommandInput} * @returns {@link RevokeSecurityGroupIngressCommandOutput} * @see {@link RevokeSecurityGroupIngressCommandInput} for command's `input` shape. * @see {@link RevokeSecurityGroupIngressCommandOutput} for command's `response` shape. * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape. * * @throws {@link EC2ServiceException} *

Base exception class for all service exceptions from EC2 service.

* * * @public */ export declare class RevokeSecurityGroupIngressCommand extends RevokeSecurityGroupIngressCommand_base { /** @internal type navigation helper, not in runtime. */ protected static __types: { api: { input: RevokeSecurityGroupIngressRequest; output: RevokeSecurityGroupIngressResult; }; sdk: { input: RevokeSecurityGroupIngressCommandInput; output: RevokeSecurityGroupIngressCommandOutput; }; }; }