In the cloud, an ACL consists of one or more entries that explicitly allows or denies access based on a specific account, IP address, port, or other attribute. An entry gives a specified entity the ability to perform specific actions and even govern basic communications.
Each entry consists of two pieces of information:
Permission: which defines what actions can be performed (for example, read, write, create, delete).
Scope: which defines what can perform the specified actions (for example, a specific IP address or account).