resource "aws_security_group" "superset-allow-security" {
  name        = "superset-allow-security-new"
  description = "Allow inbound traffic"
  vpc_id      = var.VPC_ID

  ingress {
    description      = "SSH"
    from_port        = 22
    to_port          = 22
    protocol         = "tcp"
    cidr_blocks      =  ["118.223.123.161/32"]
  }

  ingress {
    description      = "TLS from superset"
    from_port        = 443
    to_port          = 443
    protocol         = "tcp"
    cidr_blocks      =  ["118.223.123.161/32"]
  }

  egress {
    from_port        = 0
    to_port          = 0
    protocol         = "-1"
    cidr_blocks      = ["0.0.0.0/0"]
    ipv6_cidr_blocks = ["::/0"]
  }

  tags = {
    Name = "superset-allow-security"
  }
}