diff --git a/tofu/modules/data-store/cache/main.tf b/tofu/modules/data-store/cache/main.tf index ae2938aa..6cbc318e 100644 --- a/tofu/modules/data-store/cache/main.tf +++ b/tofu/modules/data-store/cache/main.tf @@ -22,7 +22,7 @@ resource "aws_security_group" "redis" { }) } -resource "aws_vpc_security_group_ingress_rule" "ingress" { +resource "aws_vpc_security_group_ingress_rule" "ingress_6379" { for_each = toset(var.source_security_groups) security_group_id = aws_security_group.redis.id @@ -37,6 +37,21 @@ resource "aws_vpc_security_group_ingress_rule" "ingress" { }) } +resource "aws_vpc_security_group_ingress_rule" "ingress_6380" { + for_each = toset(var.source_security_groups) + + security_group_id = aws_security_group.redis.id + description = "redis(6380) ingress" + from_port = 6380 + to_port = 6380 + ip_protocol = "tcp" + referenced_security_group_id = each.key + + tags = merge(var.tags, { + Name = "${var.name_prefix}-redis" + }) +} + resource "aws_vpc_security_group_egress_rule" "egress" { for_each = toset(var.database_subnet_cidrs) @@ -51,3 +66,33 @@ resource "aws_vpc_security_group_egress_rule" "egress" { Name = "${var.name_prefix}-redis" }) } + +resource "aws_vpc_security_group_egress_rule" "egress_6379" { + for_each = toset(var.source_security_groups) + + security_group_id = each.key + description = "redis(6379) egress" + from_port = 6379 + to_port = 6379 + ip_protocol = "tcp" + referenced_security_group_id = aws_security_group.redis.id + + tags = merge(var.tags, { + Name = "${var.name_prefix}-redis" + }) +} + +resource "aws_vpc_security_group_egress_rule" "egress_6380" { + for_each = toset(var.source_security_groups) + + security_group_id = each.key + description = "redis(6380) egress" + from_port = 6380 + to_port = 6380 + ip_protocol = "tcp" + referenced_security_group_id = aws_security_group.redis.id + + tags = merge(var.tags, { + Name = "${var.name_prefix}-redis" + }) +} diff --git a/tofu/modules/services/backend-infra/main.tf b/tofu/modules/services/backend-infra/main.tf index ff205d9c..b5e3bd31 100644 --- a/tofu/modules/services/backend-infra/main.tf +++ b/tofu/modules/services/backend-infra/main.tf @@ -245,4 +245,4 @@ resource "aws_vpc_security_group_egress_rule" "allow_smtp_to_all" { to_port = 587 ip_protocol = "tcp" cidr_ipv4 = "0.0.0.0/0" -} \ No newline at end of file +}