{ "$schema": "https://json-structure.org/meta/core/v0/#", "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-gamelift/refs/heads/main/json-structure/gamelift-ip-permission-structure.json", "name": "IpPermission", "description": "A range of IP addresses and port settings that allow inbound traffic to connect to server processes on an instance in a fleet. New game sessions are assigned an IP address/port number combination, which must fall into the fleet's allowed ranges. Fleets with custom game builds must have permissions explicitly set. For Realtime Servers fleets, Amazon GameLift automatically opens two port ranges, one for TCP messaging and one for UDP.", "type": "object", "properties": { "FromPort": { "allOf": [ { "$ref": "#/components/schemas/PortNumber" }, { "description": "

A starting value for a range of allowed port numbers.

For fleets using Linux builds, only ports 22 and 1026-60000 are valid.

For fleets using Windows builds, only ports 1026-60000 are valid.

" } ] }, "ToPort": { "allOf": [ { "$ref": "#/components/schemas/PortNumber" }, { "description": "

An ending value for a range of allowed port numbers. Port numbers are end-inclusive. This value must be equal to or greater than FromPort.

For fleets using Linux builds, only ports 22 and 1026-60000 are valid.

For fleets using Windows builds, only ports 1026-60000 are valid.

" } ] }, "IpRange": { "allOf": [ { "$ref": "#/components/schemas/NonBlankString" }, { "description": "A range of allowed IP addresses. This value must be expressed in CIDR notation. Example: \"000.000.000.000/[subnet mask]\" or optionally the shortened version \"0.0.0.0/[subnet mask]\"." } ] }, "Protocol": { "allOf": [ { "$ref": "#/components/schemas/IpProtocol" }, { "description": "The network communication protocol used by the fleet." } ] } }, "required": [ "FromPort", "ToPort", "IpRange", "Protocol" ] }