main.tf

resource "google_datastream_private_connection" "default" {
  project               = var.project
  display_name          = "Private connection profile"
  location              = var.region
  private_connection_id = "my-connection"

  vpc_peering_config {
    vpc    = data.google_compute_network.network.id
    subnet = "10.1.0.0/29"
  }
}

resource "google_compute_firewall" "default" {
  project = var.project
  name    = "datastream-proxy-access"
  network = data.google_compute_network.network.name

  allow {
    protocol = "tcp"
    ports    = ["5432"]
  }

  source_ranges = [google_datastream_private_connection.default.vpc_peering_config.0.subnet]
}