This Terraform module creates a lambda which automatically updates security groups to allow cloudfront IP Ranges
SECURITY_GROUP_TAG_FOR_GLOBAL_HTTP = { 'Name': 'cloudfront_g', 'AutoUpdate': 'true', 'Protocol': 'http' } SECURITY_GROUP_TAG_FOR_GLOBAL_HTTPS = { 'Name': 'cloudfront_g', 'AutoUpdate': 'true', 'Protocol': 'https' } SECURITY_GROUP_TAG_FOR_REGION_HTTP = { 'Name': 'cloudfront_r', 'AutoUpdate': 'true', 'Protocol': 'http' } SECURITY_GROUP_TAG_FOR_REGION_HTTPS = { 'Name': 'cloudfront_r', 'AutoUpdate': 'true', 'Protocol': 'https' }
module "terraform-aws-lamda-sg-cloudfront-updater" {
source = "../../"
}
Name | Description | Type | Default | Required |
---|---|---|---|---|
name | The name of the lambda function | string | n/a | yes |
Name | Description |
---|---|
this_aws_lambda_function_arn | The arn of the lambda |
Copyright (c) 2019 Flaconi GmbH