Add var to add more ingress SGs to hasura_rds SG

Rayraegah · Sep 30, 2019 · 0a43308 · 0a43308
1 parent 3eced34
commit 0a43308
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/main.tf b/main.tf
@@ -155,7 +155,7 @@ resource "aws_security_group" "hasura_rds" {
     protocol        = "tcp"
     from_port       = "5432"
     to_port         = "5432"
-    security_groups = [aws_security_group.hasura_ecs.id]
+    security_groups = concat([aws_security_group.hasura_ecs.id], var.additional_db_security_groups)
   }
 
   egress {

diff --git a/variables.tf b/variables.tf
@@ -81,3 +81,8 @@ variable "environment" {
   description = "Environment variables for ECS task: [ { name = \"foo\", value = \"bar\" }, ..]"
   default     = []
 }
+
+variable "additional_db_security_groups" {
+  description = "List of Security Group IDs to have access to the RDS instance"
+  default = []
+}