File tree 2 files changed +2
-3
lines changed
2 files changed +2
-3
lines changed Original file line number Diff line number Diff line change @@ -40,7 +40,6 @@ module "subnets" {
40
40
# ###----------------------------------------------------------------------------------
41
41
# # Memcached holds its data in memory.
42
42
# ###----------------------------------------------------------------------------------
43
- # tfsec:ignore:aws-ec2-no-public-egress-sgr
44
43
module "memcached" {
45
44
source = " ./../../"
46
45
Original file line number Diff line number Diff line change @@ -38,6 +38,7 @@ data "aws_security_group" "existing" {
38
38
# #----------------------------------------------------------------------------------
39
39
# # Below resources will create SECURITY-GROUP-RULE and its components.
40
40
# #----------------------------------------------------------------------------------
41
+ # tfsec:ignore:aws-ec2-no-public-egress-sgr.
41
42
resource "aws_security_group_rule" "egress" {
42
43
count = (var. enable_security_group == true && length (var. sg_ids ) < 1 && var. is_external == false && var. egress_rule == true ) ? 1 : 0
43
44
@@ -48,7 +49,7 @@ resource "aws_security_group_rule" "egress" {
48
49
cidr_blocks = [" 0.0.0.0/0" ]
49
50
security_group_id = join (" " , aws_security_group. default . * . id )
50
51
}
51
- # defsec :ignore:aws-ec2-no-public-egress-sgr
52
+ # tfsec :ignore:aws-ec2-no-public-egress-sgr.
52
53
resource "aws_security_group_rule" "egress_ipv6" {
53
54
count = (var. enable_security_group == true && length (var. sg_ids ) < 1 && var. is_external == false ) && var. egress_rule == true ? 1 : 0
54
55
@@ -59,7 +60,6 @@ resource "aws_security_group_rule" "egress_ipv6" {
59
60
ipv6_cidr_blocks = [" ::/0" ]
60
61
security_group_id = join (" " , aws_security_group. default . * . id )
61
62
}
62
- # tfsec:ignore:aws-ec2-no-public-egress-sgr
63
63
resource "aws_security_group_rule" "ingress" {
64
64
count = length (var. allowed_ip ) > 0 == true && length (var. sg_ids ) < 1 ? length (compact (var. allowed_ports )) : 0
65
65
You can’t perform that action at this time.
0 commit comments