aws_network_acl: return error if protocol is invalid