networkfirewall/aws.sdk.kotlin.services.networkfirewall.model/MatchAttributes/destinationPorts

destinationPorts

val destinationPorts: List<PortRange>?

The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).

You can specify individual ports, for example 1994 and you can specify port ranges, for example 1990:1994.