Terrablox
GitHubStart
Module library

Security Group

Terraform module to create AWS Security Group resources

Version
v6.0.0
Repository
terrablox-aws-security-group
Submodules
activemqalertmanagercarbon-relaycassandraconsuldocker-swarmdynamodb-daxelasticsearchetcdgrafanagraphite-statsdhttp-80http-8080https-443https-8443ipsec-4500ipsec-500jmxkafkakibanaldapldapslogstashlokimemcachedminiomongodbmssqlmysqlnfsnomadntpopenvpnoraclepostgresqlprometheuspromtailpuppetrabbitmqrdpredisredshiftsaltstacksolrsplunksquidsshstormvaultwazuhwinrmzabbixzipkin

Inputs

14
createoptionalbool

Controls if resources should be created (affects nearly all resources)

Defaulttrue
descriptionoptionalstring

Description of security group

Defaultnull
egress_rulesoptionalmap(object({ name = optional(string) cidr_ipv4 = optional(string) cidr_ipv6 = op…

Map of egress rules to add to the security group

Default{}
enable_exclusive_rulesoptionalbool

Whether to enforce that only the rules declared by this module exist on the security group. When true, out-of-band rules added via the AWS console or other Terraform configurations will be reverted on next apply

Defaulttrue
ingress_rulesoptionalmap(object({ name = optional(string) cidr_ipv4 = optional(string) cidr_ipv6 = op…

Map of ingress rules to add to the security group

Default{}
nameoptionalstring

Name of security group

Default""
putin_khuylooptionalbool

Do you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!

Defaulttrue
regionoptionalstring

Region where the resource(s) will be managed. Defaults to the Region set in the provider configuration

Defaultnull
revoke_rules_on_deleteoptionalbool

Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself

Defaultfalse
tagsoptionalmap(string)

A map of tags to add to all resources

Default{}
timeoutsoptionalobject({ create = optional(string) delete = optional(string) })

Create and delete timeout configurations for the security group

Defaultnull
use_name_prefixoptionalbool

Whether to use the name (`name`) as a prefix, appending a random suffix

Defaulttrue
vpc_associationsoptionalmap(object({ vpc_id = string }))

Map of VPC IDs to associate the security group to

Default{}
vpc_idoptionalstring

ID of the VPC where the security group is created

Defaultnull

All 14 are optional — the module deploys with none of them set.

Outputs

5
arn

The ARN of the security group

id

The ID of the security group

name

The name of the security group

owner_id

The owner ID

vpc_id

The VPC ID

What the agent wires into the next module. An edge on the architecture diagram is one of these consumed by something else.