api-services-infrastructure-p1-security-groups.yml

LoadBalancerSecurityGroup:
  Type: AWS::EC2::SecurityGroup
  Properties:
    GroupDescription: Access to load balancer that sits in front of EC2 hosts
    VpcId: !Ref VPC
    SecurityGroupIngress:
      - CidrIp: 0.0.0.0/0
        IpProtocol: -1
    Tags:
      - Key: Name
        Value: !Sub ${Namespace}-${Environment}-LB

EC2HostSecurityGroup:
  Type: AWS::EC2::SecurityGroup
  Properties:
    GroupDescription: Access to EC2 hosts which run services
    VpcId: !Ref VPC
    SecurityGroupIngress:
      - SourceSecurityGroupId: !Ref LoadBalancerSecurityGroup
        IpProtocol: -1
    Tags:
      - Key: Name
        Value: !Sub ${Namespace}-${Environment}-ec2-hosts