File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -68,27 +68,67 @@ module "vpc" {
6868 action = " allow"
6969 direction = " inbound"
7070 tcp = {
71- port_min = 22
72- port_max = 22
73- source_port_min = 1024
74- source_port_max = 65535
71+ port_min = 22
72+ port_max = 22
7573 }
7674 destination = " 0.0.0.0/0"
7775 source = " 0.0.0.0/0"
7876 },
7977 {
80- name = " allow-ephemeral-outbound "
78+ name = " allow-all-22-inbound-response "
8179 action = " allow"
8280 direction = " outbound"
8381 tcp = {
84- source_port_min = 1
85- source_port_max = 65535
86- port_min = 1024
87- port_max = 65535
82+ source_port_min = 22
83+ source_port_max = 22
8884 }
8985 destination = " 0.0.0.0/0"
9086 source = " 0.0.0.0/0"
91- }
87+ },
88+ {
89+ name = " allow-https-outbound"
90+ action = " allow"
91+ direction = " outbound"
92+ tcp = {
93+ port_min = 443
94+ port_max = 443
95+ }
96+ destination = " 0.0.0.0/0"
97+ source = " 0.0.0.0/0"
98+ },
99+ {
100+ name = " allow-https-outbound-response"
101+ action = " allow"
102+ direction = " inbound"
103+ tcp = {
104+ source_port_min = 443
105+ source_port_max = 443
106+ }
107+ destination = " 0.0.0.0/0"
108+ source = " 0.0.0.0/0"
109+ },
110+ {
111+ name = " allow-http-outbound"
112+ action = " allow"
113+ direction = " outbound"
114+ tcp = {
115+ port_min = 80
116+ port_max = 80
117+ }
118+ destination = " 0.0.0.0/0"
119+ source = " 0.0.0.0/0"
120+ },
121+ {
122+ name = " allow-http-outbound-response"
123+ action = " allow"
124+ direction = " inbound"
125+ tcp = {
126+ source_port_min = 80
127+ source_port_max = 80
128+ }
129+ destination = " 0.0.0.0/0"
130+ source = " 0.0.0.0/0"
131+ },
92132 ]
93133 }
94134 ]
@@ -161,6 +201,33 @@ module "vsi" {
161201 port_min = 22
162202 port_max = 22
163203 }
204+ },
205+ {
206+ name = " allow-http-outbound"
207+ direction = " outbound"
208+ source = " 0.0.0.0/0"
209+ tcp = {
210+ port_min = 80
211+ port_max = 80
212+ }
213+ },
214+ {
215+ name = " allow-https-outbound"
216+ direction = " outbound"
217+ source = " 0.0.0.0/0"
218+ tcp = {
219+ port_min = 443
220+ port_max = 443
221+ }
222+ },
223+ {
224+ name = " allow-dns-udp-outbound"
225+ direction = " outbound"
226+ source = " 0.0.0.0/0"
227+ udp = {
228+ port_min = 53
229+ port_max = 53
230+ }
164231 }
165232 ]
166233 }
You can’t perform that action at this time.
0 commit comments