Merge pull request #14 from BorisLabs/add-allowed-prefixes

feat: Add ability to pass allowed prefixes into DX GW association.

main.tf

@@ -102,6 +102,8 @@ resource "aws_dx_gateway_association" "this" {
 
   dx_gateway_id         = aws_dx_gateway.this[0].id
   associated_gateway_id = concat(aws_vpn_gateway.this.*.id[0], [var.vgw_id])[0]
+
+  allowed_prefixes = var.allowed_prefixes
 }
 
 resource "aws_dx_gateway_association" "cross_account" {
@@ -111,6 +113,8 @@ resource "aws_dx_gateway_association" "cross_account" {
   dx_gateway_id                       = var.dx_gateway_id
   proposal_id                         = aws_dx_gateway_association_proposal.this.*.id[0]
   associated_gateway_owner_account_id = data.aws_caller_identity.this.account_id
+
+  allowed_prefixes = var.allowed_prefixes
 }
 
 resource "aws_dx_gateway_association_proposal" "this" {

variables.tf

@@ -449,3 +449,10 @@ variable "dx_bgp_customer_address" {
 
   type = string
 }
+
+variable "allowed_prefixes" {
+  description = "List of allowed prefixes to advertise to the Direct Connect Gateway"
+  default     = null
+
+  type = set(string)
+}