aws_network_acl: return error if rule protocol is invalid

Also added "all" to list of protocols