From 702595066f7a6c90cfde31c2d5f23bbf9efe0ef9 Mon Sep 17 00:00:00 2001 From: Don Badrak Date: Tue, 2 Jul 2019 10:19:33 -0400 Subject: [PATCH] add description to ingress, egress --- ois-scanner/main.tf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/ois-scanner/main.tf b/ois-scanner/main.tf index 1eaeb04..29ac197 100644 --- a/ois-scanner/main.tf +++ b/ois-scanner/main.tf @@ -30,14 +30,16 @@ locals { "172.18.33.211/32", "172.18.33.213/32", ] + description = "common: OIS scanners and OIS subnets full access for compliance scanning" } resource "aws_security_group" "this_security_group" { name = "${var.name}" - description = "common: allows OIS scanners and OIS subnets full access for compliance scanning" + description = "${local.description}" vpc_id = "${var.vpc_id}" ingress { + description = "ALL: ${local.description}" from_port = 0 to_port = 0 protocol = -1 @@ -45,6 +47,7 @@ resource "aws_security_group" "this_security_group" { } egress { + description = "ALL: ${local.description}" from_port = 0 to_port = 0 protocol = -1