Added var for sg egress

FitnessKeeper · Feb 20, 2020 · f87b14a · f87b14a
1 parent a8eab99
commit f87b14a
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/alb.tf b/alb.tf
@@ -123,7 +123,6 @@ resource "aws_security_group_rule" "alb_egress" {
   from_port                = 0
   to_port                  = 65535
   protocol                 = "-1"
-  cidr_blocks              = ["0.0.0.0/0"]
+  cidr_blocks              = var.alb_sg_cidr_egress
   security_group_id        = aws_security_group.alb[0].id
 }
-
diff --git a/variables.tf b/variables.tf
@@ -133,6 +133,11 @@ variable "alb_sg_cidr" {
   default     = ["0.0.0.0/0"]
 }
 
+variable "alb_sg_cidr_egress" {
+  description = "List of CIDR blocks for ALB SG, default [\"0.0.0.0/0\"]"
+  default     = ["0.0.0.0/0"]
+}
+
 variable "alb_internal" {
   description = "Configure ALB as internal-only (default false)"
   default     = "false"

diff --git a/versions.tf b/versions.tf