added db password

Author: rabianadeem-121

.github/workflows/deploy.yml

@@ -33,18 +33,16 @@ jobs:
           sudo apt install -y terraform
           terraform -version
 
-
-      # 3. Terraform Init & Apply (create ECR, RDS, etc.)
-      - name: Terraform Init & Apply
+      # 3. Terraform Init & Apply for ECR, IAM, VPC, RDS only
+      - name: Terraform Apply Infrastructure
         working-directory: terraform
         env:
           TF_VAR_db_password: ${{ secrets.DB_PASSWORD }}
         run: |
           terraform init
           terraform fmt -check
           terraform validate
-          terraform apply -auto-approve
-
+          terraform apply -auto-approve -target=aws_ecr_repository.api -target=aws_iam_role.lambda_role -target=aws_vpc.main -target=aws_subnet.private -target=aws_db_instance.postgres
 
       # 4. Get ECR repository URL from Terraform output
       - name: Get ECR Repo URL
@@ -68,8 +66,8 @@ jobs:
           docker tag serverless-crud-api-terraform:latest $REPO_URL:latest
           docker push $REPO_URL:latest
 
-      # 8. Update Lambda to use new image (Terraform)
+      # 8. Terraform Apply Lambda (use existing image)
       - name: Terraform Deploy Lambda
         working-directory: terraform
         run: |
-          terraform apply -auto-approve
+          terraform apply -auto-approve -target=aws_lambda_function.crud_api

terraform/security_groups.tf

@@ -1,10 +1,8 @@
-# Lambda Security Group
+# Lambda SG
 resource "aws_security_group" "lambda_sg1" {
-  name   = "lambda-sg1"
+  name   = "lambda_sg1"
   vpc_id = aws_vpc.main.id
 
-  description = "SG for Lambda"
-
   egress {
     from_port   = 0
     to_port     = 0
@@ -13,18 +11,16 @@ resource "aws_security_group" "lambda_sg1" {
   }
 }
 
-# RDS Security Group
+# RDS SG
 resource "aws_security_group" "rds_sg1" {
-  name   = "rds-sg1"
+  name   = "rds_sg1"
   vpc_id = aws_vpc.main.id
 
-  description = "SG for RDS"
-
   ingress {
     from_port       = 5432
     to_port         = 5432
     protocol        = "tcp"
-    security_groups = [aws_security_group.lambda_sg1.id]  # Only RDS references Lambda SG
+    security_groups = [aws_security_group.lambda_sg1.id]  # only one-way
   }
 
   egress {