0.4.8
what
Add the possibility to use existing security groups when creating load balancer, and stop the creation of the default security group.
why
The default behavior when creating a load balancer is to create a security group which allow 0.0.0.0 to access to it. Sometimes we need to allow only a specific CIDR.
There are two variables :
- loadbalancer_security_groups : list of security groups to attach
- loadbalancer_managed_security_group : A single SG. If you don't fill this variable, it will continue to create a default security group.
Example : Use a custom SG which allow only my network :
loadbalancer_security_groups = ["${module.sg.this_security_group_id}"]
loadbalancer_managed_security_group = "${module.sg.this_security_group_id}"
If you don't fill theses two variables, you have the classical workflow.
references
- https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options-general.html#command-options-general-elasticbeanstalkmanagedactionsplatformupdate
- https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options-general.html#command-options-general-elbv2
- https://docs.aws.amazon.com/elasticbeanstalk/latest/dg/command-options-general.html#command-options-general-elbloadbalancer