Merge pull request #254 from pagopa/feature/PN-17432

PN-17432: restrict SG connection only from ALB SG

Author: mbrachi

scripts/aws/cfn/microservice.yml

@@ -58,6 +58,10 @@ Parameters:
     Type: String
     Description: 'The DNS name used for SELC-PG rest API'
 
+  AlbSecurityGroup:
+    Type: String
+    Description: "Application load balancer security group"
+
   EcsDefaultSecurityGroup:
     Type: String
     Description: 'Default security group required by infrastructure'
@@ -570,6 +574,7 @@ Resources:
         ECSClusterName: !Ref ECSClusterName
         Subnets: !Ref VpcEgressSubnetsIds
         VpcId: !Ref VpcId
+        AlbSecurityGroup: !Ref AlbSecurityGroup
         EcsDefaultSecurityGroup: !Ref EcsDefaultSecurityGroup
         LoadBalancerListenerArn: !Ref ApplicationLoadBalancerListenerArn
         LoadbalancerRulePriority: !Ref MicroserviceNumber