sa_8001/dsk-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

aws prod 환경 구축 파일

Browse Source
This commit is contained in:
havelight-ee
2022-11-08 12:14:39 +09:00
parent fff9000311
commit 4f3df8d1ca
171 changed files with 37493 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

74
prod_221108/terraform/05_security_group.tf Normal file
View File

@@ -0,0 +1,74 @@
resource "aws_security_group" "prod-dmz-sg-datasaker" {
description = "Security group dmz-datasaker"
name = "prod-dmz-sg-datasaker"
tags = {
"Name" = "prod-dmz-sg-datasaker"
}
vpc_id = aws_vpc.vpc-prod-datasaker.id
}
resource "aws_security_group_rule" "pub-only-exem" {
cidr_blocks = ["115.178.73.2/32","115.178.73.91/32"]
from_port = 22
protocol = "tcp"
security_group_id = aws_security_group.prod-dmz-sg-datasaker.id
to_port = 22
type = "ingress"
}
resource "aws_security_group_rule" "pub-out-any" {
cidr_blocks = ["0.0.0.0/0"]
from_port = 0
protocol = "tcp"
security_group_id = aws_security_group.prod-dmz-sg-datasaker.id
to_port = 65535
type = "egress"
}
################################################################################
resource "aws_security_group" "prod-priv-sg-datasaker" {
description = "Security group prod-datasaker"
name = "prod-priv-sg-datasaker"
tags = {
"Name" = "prod-priv-sg-datasaker"
}
vpc_id = aws_vpc.vpc-prod-datasaker.id
}
resource "aws_security_group_rule" "priv-in-any" {
cidr_blocks = ["0.0.0.0/0"]
from_port = 22
protocol = "tcp"
security_group_id = aws_security_group.prod-priv-sg-datasaker.id
to_port = 22
type = "ingress"
}
resource "aws_security_group_rule" "priv-in-icmp" {
cidr_blocks = ["0.0.0.0/0"]
from_port = 8
protocol = "icmp"
security_group_id = aws_security_group.prod-priv-sg-datasaker.id
to_port = 8
type = "ingress"
}
resource "aws_security_group_rule" "priv-out-icmp" {
cidr_blocks = ["0.0.0.0/0"]
from_port = 8
protocol = "icmp"
security_group_id = aws_security_group.prod-priv-sg-datasaker.id
to_port = 8
type = "egress"
}
resource "aws_security_group_rule" "priv-out-any" {
cidr_blocks = ["0.0.0.0/0"]
from_port = 0
protocol = "tcp"
security_group_id = aws_security_group.prod-priv-sg-datasaker.id
to_port = 65535
type = "egress"
}