update

terraform/aws_instance/monitoring/security_group.tf

@@ -0,0 +1,41 @@
+resource "aws_security_group" "monitoring-allow-security" {
+  name        = "monitoring-allow-security-new"
+  description = "Allow inbound traffic"
+  vpc_id      = var.VPC_ID
+
+  ingress {
+    description      = "SSH"
+    from_port        = 22
+    to_port          = 22
+    protocol         = "tcp"
+    cidr_blocks      =  ["118.223.123.161/32"]
+  }
+
+  ingress {
+    description      = "TLS from monitoring"
+    from_port        = 443
+    to_port          = 443
+    protocol         = "tcp"
+    cidr_blocks      =  ["118.223.123.161/32"]
+  }
+
+  ingress {
+    description      = "loki"
+    from_port        = 31768
+    to_port          = 31768
+    protocol         = "tcp"
+    cidr_blocks      =  ["172.24.0.0/16"]
+  }
+
+  egress {
+    from_port        = 0
+    to_port          = 0
+    protocol         = "-1"
+    cidr_blocks      = ["0.0.0.0/0"]
+    ipv6_cidr_blocks = ["::/0"]
+  }
+
+  tags = {
+    Name = "monitoring-allow-security"
+  }
+}