auto_computed_egress_rules |
List of computed egress rules to add automatically |
list(string) |
[] |
no |
auto_computed_egress_with_self |
List of maps defining computed egress rules with self to add automatically |
list(map(string)) |
[] |
no |
auto_computed_ingress_rules |
List of ingress rules to add automatically |
list(string) |
[] |
no |
auto_computed_ingress_with_self |
List of maps defining computed ingress rules with self to add automatically |
list(map(string)) |
[] |
no |
auto_egress_rules |
List of egress rules to add automatically |
list(string) |
[ "all-all" ] |
no |
auto_egress_with_self |
List of maps defining egress rules with self to add automatically |
list(map(string)) |
[] |
no |
auto_ingress_rules |
List of ingress rules to add automatically |
list(string) |
[ "oracle-db-tcp" ] |
no |
auto_ingress_with_self |
List of maps defining ingress rules with self to add automatically |
list(map(string)) |
[ { "rule": "all-all" } ] |
no |
auto_number_of_computed_egress_rules |
Number of computed egress rules to create by name |
number |
0 |
no |
auto_number_of_computed_egress_with_self |
Number of computed egress rules to create where 'self' is defined |
number |
0 |
no |
auto_number_of_computed_ingress_rules |
Number of computed ingress rules to create by name |
number |
0 |
no |
auto_number_of_computed_ingress_with_self |
Number of computed ingress rules to create where 'self' is defined |
number |
0 |
no |
computed_egress_cidr_blocks |
List of IPv4 CIDR ranges to use on all computed egress rules |
list(string) |
[ "0.0.0.0/0" ] |
no |
computed_egress_ipv6_cidr_blocks |
List of IPv6 CIDR ranges to use on all computed egress rules |
list(string) |
[ "::/0" ] |
no |
computed_egress_prefix_list_ids |
List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules |
list(string) |
[] |
no |
computed_egress_rules |
List of computed egress rules to create by name |
list(string) |
[] |
no |
computed_egress_with_cidr_blocks |
List of computed egress rules to create where 'cidr_blocks' is used |
list(map(string)) |
[] |
no |
computed_egress_with_ipv6_cidr_blocks |
List of computed egress rules to create where 'ipv6_cidr_blocks' is used |
list(map(string)) |
[] |
no |
computed_egress_with_prefix_list_ids |
List of computed egress rules to create where 'prefix_list_ids' is used |
list(map(string)) |
[] |
no |
computed_egress_with_self |
List of computed egress rules to create where 'self' is defined |
list(map(string)) |
[] |
no |
computed_egress_with_source_security_group_id |
List of computed egress rules to create where 'source_security_group_id' is used |
list(map(string)) |
[] |
no |
computed_ingress_cidr_blocks |
List of IPv4 CIDR ranges to use on all computed ingress rules |
list(string) |
[] |
no |
computed_ingress_ipv6_cidr_blocks |
List of IPv6 CIDR ranges to use on all computed ingress rules |
list(string) |
[] |
no |
computed_ingress_prefix_list_ids |
List of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules |
list(string) |
[] |
no |
computed_ingress_rules |
List of computed ingress rules to create by name |
list(string) |
[] |
no |
computed_ingress_with_cidr_blocks |
List of computed ingress rules to create where 'cidr_blocks' is used |
list(map(string)) |
[] |
no |
computed_ingress_with_ipv6_cidr_blocks |
List of computed ingress rules to create where 'ipv6_cidr_blocks' is used |
list(map(string)) |
[] |
no |
computed_ingress_with_prefix_list_ids |
List of computed ingress rules to create where 'prefix_list_ids' is used |
list(map(string)) |
[] |
no |
computed_ingress_with_self |
List of computed ingress rules to create where 'self' is defined |
list(map(string)) |
[] |
no |
computed_ingress_with_source_security_group_id |
List of computed ingress rules to create where 'source_security_group_id' is used |
list(map(string)) |
[] |
no |
create |
Whether to create security group and all rules |
bool |
true |
no |
description |
Description of security group |
string |
"Security Group managed by Terraform" |
no |
egress_cidr_blocks |
List of IPv4 CIDR ranges to use on all egress rules |
list(string) |
[ "0.0.0.0/0" ] |
no |
egress_ipv6_cidr_blocks |
List of IPv6 CIDR ranges to use on all egress rules |
list(string) |
[ "::/0" ] |
no |
egress_prefix_list_ids |
List of prefix list IDs (for allowing access to VPC endpoints) to use on all egress rules |
list(string) |
[] |
no |
egress_rules |
List of egress rules to create by name |
list(string) |
[] |
no |
egress_with_cidr_blocks |
List of egress rules to create where 'cidr_blocks' is used |
list(map(string)) |
[] |
no |
egress_with_ipv6_cidr_blocks |
List of egress rules to create where 'ipv6_cidr_blocks' is used |
list(map(string)) |
[] |
no |
egress_with_prefix_list_ids |
List of egress rules to create where 'prefix_list_ids' is used |
list(map(string)) |
[] |
no |
egress_with_self |
List of egress rules to create where 'self' is defined |
list(map(string)) |
[] |
no |
egress_with_source_security_group_id |
List of egress rules to create where 'source_security_group_id' is used |
list(map(string)) |
[] |
no |
ingress_cidr_blocks |
List of IPv4 CIDR ranges to use on all ingress rules |
list(string) |
[] |
no |
ingress_ipv6_cidr_blocks |
List of IPv6 CIDR ranges to use on all ingress rules |
list(string) |
[] |
no |
ingress_prefix_list_ids |
List of prefix list IDs (for allowing access to VPC endpoints) to use on all ingress rules |
list(string) |
[] |
no |
ingress_rules |
List of ingress rules to create by name |
list(string) |
[] |
no |
ingress_with_cidr_blocks |
List of ingress rules to create where 'cidr_blocks' is used |
list(map(string)) |
[] |
no |
ingress_with_ipv6_cidr_blocks |
List of ingress rules to create where 'ipv6_cidr_blocks' is used |
list(map(string)) |
[] |
no |
ingress_with_prefix_list_ids |
List of ingress rules to create where 'prefix_list_ids' is used |
list(map(string)) |
[] |
no |
ingress_with_self |
List of ingress rules to create where 'self' is defined |
list(map(string)) |
[] |
no |
ingress_with_source_security_group_id |
List of ingress rules to create where 'source_security_group_id' is used |
list(map(string)) |
[] |
no |
name |
Name of security group |
string |
n/a |
yes |
number_of_computed_egress_cidr_blocks |
Number of IPv4 CIDR ranges to use on all computed egress rules |
number |
0 |
no |
number_of_computed_egress_ipv6_cidr_blocks |
Number of IPv6 CIDR ranges to use on all computed egress rules |
number |
0 |
no |
number_of_computed_egress_prefix_list_ids |
Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed egress rules |
number |
0 |
no |
number_of_computed_egress_rules |
Number of computed egress rules to create by name |
number |
0 |
no |
number_of_computed_egress_with_cidr_blocks |
Number of computed egress rules to create where 'cidr_blocks' is used |
number |
0 |
no |
number_of_computed_egress_with_ipv6_cidr_blocks |
Number of computed egress rules to create where 'ipv6_cidr_blocks' is used |
number |
0 |
no |
number_of_computed_egress_with_prefix_list_ids |
Number of computed egress rules to create where 'prefix_list_ids' is used |
number |
0 |
no |
number_of_computed_egress_with_self |
Number of computed egress rules to create where 'self' is defined |
number |
0 |
no |
number_of_computed_egress_with_source_security_group_id |
Number of computed egress rules to create where 'source_security_group_id' is used |
number |
0 |
no |
number_of_computed_ingress_cidr_blocks |
Number of IPv4 CIDR ranges to use on all computed ingress rules |
number |
0 |
no |
number_of_computed_ingress_ipv6_cidr_blocks |
Number of IPv6 CIDR ranges to use on all computed ingress rules |
number |
0 |
no |
number_of_computed_ingress_prefix_list_ids |
Number of prefix list IDs (for allowing access to VPC endpoints) to use on all computed ingress rules |
number |
0 |
no |
number_of_computed_ingress_rules |
Number of computed ingress rules to create by name |
number |
0 |
no |
number_of_computed_ingress_with_cidr_blocks |
Number of computed ingress rules to create where 'cidr_blocks' is used |
number |
0 |
no |
number_of_computed_ingress_with_ipv6_cidr_blocks |
Number of computed ingress rules to create where 'ipv6_cidr_blocks' is used |
number |
0 |
no |
number_of_computed_ingress_with_prefix_list_ids |
Number of computed ingress rules to create where 'prefix_list_ids' is used |
number |
0 |
no |
number_of_computed_ingress_with_self |
Number of computed ingress rules to create where 'self' is defined |
number |
0 |
no |
number_of_computed_ingress_with_source_security_group_id |
Number of computed ingress rules to create where 'source_security_group_id' is used |
number |
0 |
no |
revoke_rules_on_delete |
Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. Enable for EMR. |
bool |
false |
no |
tags |
A mapping of tags to assign to security group |
map(string) |
{} |
no |
use_name_prefix |
Whether to use name_prefix or fixed name. Should be true to able to update security group name after initial creation |
bool |
true |
no |
vpc_id |
ID of the VPC where to create security group |
string |
n/a |
yes |