{
  "Resources":{
    "NetAcl":{
      "Type":"AWS::EC2::NetworkAcl",
      "Properties":{
        "VpcId": "vpc-3730dc52"
      }
    },
    "Entry":{
      "Type":"AWS::EC2::NetworkAclEntry",
      "Properties":{
        "CidrBlock": "172.16.0.0/24",
        "Egress": "true",
        "NetworkAclId": {"Ref":"NetAcl"},
        "PortRange": {"From":22,"To":22},
        "Protocol": 6,
        "RuleAction":"deny",
        "RuleNumber":100
      }
    }
  }
}