feat(aws-ecs-byovpc): add runner security group

nuonco · Jan 27, 2024 · 300e400 · 300e400
1 parent b7c812a
commit 300e400
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 2 deletions.
diff --git a/aws-ecs-byovpc/outputs.tf b/aws-ecs-byovpc/outputs.tf
@@ -31,8 +31,8 @@ output "vpc" {
     public_subnet_cidr_blocks = [for s in data.aws_subnet.public : s.cidr_block]
     public_subnet_ids         = data.aws_subnets.public.ids
 
-    default_security_group_id  = data.aws_security_group.default.id
-    default_security_group_arn = data.aws_security_group.default.arn
+    default_security_group_id  = aws_security_group.runner.id
+    default_security_group_arn = aws_security_group.runner.arn
   }
 }
 

diff --git a/aws-ecs-byovpc/runner_security_group.tf b/aws-ecs-byovpc/runner_security_group.tf
@@ -0,0 +1,17 @@
+resource "aws_security_group" "runner" {
+  vpc_id = var.vpc_id
+
+  egress {
+    protocol    = "-1"
+    from_port   = 0
+    to_port     = 0
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  ingress {
+    protocol    = "-1"
+    from_port   = 0
+    to_port     = 0
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}