<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# Cloud Network Policy Automation — API Reference

## Kubernetes NetworkPolicy API

| Field | Type | Description |
|-------|------|-------------|
| `spec.podSelector` | LabelSelector | Target pods (empty = all) |
| `spec.policyTypes` | list | Ingress, Egress, or both |
| `spec.ingress[].from` | list | Allowed ingress sources |
| `spec.egress[].to` | list | Allowed egress destinations |

## kubectl Queries

```bash
kubectl get networkpolicy -A -o json
kubectl get networkpolicy -n NS -o yaml
kubectl describe networkpolicy NAME -n NS
```

## AWS VPC Security Groups

```bash
aws ec2 describe-security-groups --output json
aws ec2 describe-network-acls --output json
```

## GCP Firewall Rules

```bash
gcloud compute firewall-rules list --format=json
gcloud compute firewall-rules describe RULE
```
