Docker, ECR, Elastic Beanstalk, & Terraform security_groups.tf

security_groupts.tf

data "http" "myip" {
  url = "http://ipv4.icanhazip.com"
}

resource "aws_security_group" "ebs" {
  name   = "${local.common_name}-ebs"
  vpc_id = var.vpc_id
  # for ssh
  ingress {
    from_port = 22
    to_port   = 22
    self      = true
    protocol  = "tcp"
    cidr_blocks = [
      "${chomp(data.http.myip.response_body)}/32"
    ]
  }

  # to fetch stuff
  egress {
    from_port = 80
    to_port   = 80
    self      = true
    protocol  = "tcp"
    cidr_blocks = [
      "0.0.0.0/0"
    ]
  }
  egress {
    from_port = 443
    to_port   = 443
    self      = true
    protocol  = "tcp"
    cidr_blocks = [
      "0.0.0.0/0"
    ]
  }
  # for database
  egress {
    from_port       = 5432
    to_port         = 5432
    self            = true
    protocol        = "tcp"
  }
}