You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<imgtitle="Share on Twitter"src="https://user-images.githubusercontent.com/50652676/62817740-4c69db00-bb59-11e9-8a79-3580fbbf6d5c.png" />
41
38
</a>
42
39
@@ -74,6 +71,7 @@ This module has a few dependencies:
74
71
**IMPORTANT:** Since the `master` branch used in `source` varies based on new modifications, we suggest that you use the release versions [here](https://github.com/clouddrove/terraform-aws-security-group/releases).
75
72
76
73
74
+
Here are some examples of how you can use this module in your inventory structure:
77
75
### NEW_SECURITY_GROUP
78
76
Here is an example of how you can use this module in your inventory structure:
79
77
```hcl
@@ -84,12 +82,25 @@ Here is an example of how you can use this module in your inventory structure:
84
82
name = "security-group"
85
83
environment = "test"
86
84
label_order = ["name", "environment"]
87
-
88
-
vpc_id = module.vpc.vpc_id
89
-
allowed_ip = ["172.16.0.0/16", "10.0.0.0/16"]
90
-
allowed_ports = [22, 27017]
91
-
security_groups = ["sg-xxxxxxxxxxxx"]
92
-
prefix_list_ids = ["pl-xxxxxxxxxxxx"]
85
+
86
+
vpc_id = module.vpc.vpc_id
87
+
new_enable_security_group = true
88
+
allowed_ip = ["172.16.0.0/16", "10.0.0.0/16"]
89
+
allowed_ports = [22, 27017]
90
+
security_groups = []
91
+
max_entries = 5
92
+
prefix_list_enabled = true
93
+
prefix_list_id = []
94
+
entry = [
95
+
{
96
+
cidr = "10.0.0.0/16"
97
+
description = "VPC CIDR"
98
+
},
99
+
{
100
+
cidr = "10.10.0.0/24"
101
+
description = "VPC CIDR"
102
+
}
103
+
]
93
104
}
94
105
```
95
106
### NEW_SECURITY_GROUP_WITH_EGRESS
@@ -99,21 +110,21 @@ Here is an example of how you can use this module in your inventory structure:
| existing\_sg\_id | Provide existing security group id for updating existing rule |`string`|`null`| no |
160
168
| is\_external | enable to udated existing security Group |`bool`|`false`| no |
161
169
| label\_order | Label order, e.g. `name`,`application`. |`list(any)`|`[]`| no |
162
-
|managedby|ManagedBy, eg 'CloudDrove'. |`string`|`"hello@clouddrove.com"`| no |
170
+
|max\_entries|The maximum number of entries that this prefix list can contain. |`number`|`5`| no |
163
171
| name | Name (e.g. `app` or `cluster`). |`string`|`""`| no |
164
-
| prefix\_list | List of prefix list IDs (for allowing access to VPC endpoints)Only valid with egress |`list(any)`|`[]`| no |
165
-
| prefix\_list\_ids | Provide allow source Prefix id of resources |`list(string)`|`[]`| no |
166
-
| protocol | The protocol. If not icmp, tcp, udp, or all use the. |`string`|`"tcp"`| no |
167
-
| repository | Terraform current module repo |`string`|`"https://github.com/clouddrove/terraform-aws-security-group"`| no |
168
-
| security\_group\_egress\_ipv6\_rule\_description | Represents a single ingress or egress group egress-ipv6 rule, which can be added to external Security Groups. |`string`|`"Description of the egress rule."`| no |
169
-
| security\_group\_egress\_rule\_description | Represents a single ingress or egress group rule, which can be added to external Security Groups. |`string`|`"Description of the egress rule."`| no |
172
+
| new\_enable\_security\_group | Enable default Security Group with only Egress traffic allowed. |`bool`|`true`| no |
173
+
| prefix\_list\_enabled | Enable prefix\_list. |`bool`|`true`| no |
174
+
| prefix\_list\_id | The ID of the prefix list. |`list(string)`|`[]`| no |
170
175
| security\_groups | List of Security Group IDs allowed to connect to the instance. |`list(string)`|`[]`| no |
171
-
| tags | Additional tags (e.g. map(`BusinessUnit`,`XYZ`). |`map(string)`|`{}`| no |
172
176
| vpc\_id | The ID of the VPC that the instance security group belongs to. |`string`|`""`| no |
173
177
174
178
## Outputs
175
179
176
180
| Name | Description |
177
181
|------|-------------|
178
-
| security\_group\_ids | IDs on the AWS Security Groups associated with the instance. |
179
-
| tags | A mapping of public tags to assign to the resource. |
182
+
| prefix\_id | n/a |
183
+
| security\_group\_ids | A mapping of security group ids. |
184
+
| tags | A mapping of tags to assign to the resource. |
0 commit comments