Add an AWS Security group for Akamai Siteshield

akamai.tf

locals {
  "akamai_siteshield_ranges" = [
    "11.22.33.41/24",
    "11.22.33.42/24",
    "11.22.33.45/24"
  ]
}

resource "aws_security_group" "akamai_siteshield_ranges" {
  name        = "aws-europe-s1486.akamaiedge.ne"
  description = "Allows Akamai edge servers access. Must be kept up to date"
  vpc_id      = "${aws_vpc.dcos_cluster.id}"
}

resource "aws_security_group_rule" "akamai_cidr" {
  count             = "${length(local.akamai_siteshield_ranges)}"
  type              = "ingress"
  from_port         = 443
  to_port           = 443
  protocol          = "tcp"
  cidr_blocks       = ["${local.akamai_siteshield_ranges[count.index]}"]
  security_group_id = "${aws_security_group.akamai_siteshield_ranges.id}"
}