adding cidr block for allowing vpn access

BetterWorks · Aug 5, 2020 · 3613a1d · 3613a1d
1 parent bbef4a7
commit 3613a1d
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -125,6 +125,7 @@ resource "aws_security_group" "default" {
     to_port         = var.database_port
     protocol        = "tcp"
     security_groups = var.security_group_ids
+    cidr_blocks     = var.cidr_blocks
   }
 
   egress {

diff --git a/variables.tf b/variables.tf
@@ -36,6 +36,12 @@ variable "security_group_ids" {
   description = "The IDs of the security groups from which to allow `ingress` traffic to the DB instance"
 }
 
+variable "cidr_blocks" {
+  type        = list(string)
+  default     = []
+  description = "The cidr blocks from which to allow `ingress` traffic to the DB instance"
+}
+
 variable "associate_security_group_ids" {
   type        = list(string)
   default     = []