Changing field values to prefixes where list is passed in

CDCgov · Feb 21, 2024 · 22f32a8 · 22f32a8
1 parent 027ae62
commit 22f32a8
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/operations/template/net.tf b/operations/template/net.tf
@@ -86,7 +86,7 @@ resource "azurerm_network_security_group" "db_security_group" {
     access                     = "Allow"
     protocol                   = "Tcp"
     source_port_range          = "*"
-    source_address_prefix      = "10.0.0.0/8,158.111.0.0/16"
+    source_address_prefixes    = ["10.0.0.0/8,158.111.0.0/16"]
     destination_address_prefix = "*"
     destination_port_range     = "80,443"
   }
@@ -100,7 +100,7 @@ resource "azurerm_network_security_group" "db_security_group" {
     protocol                   = "Tcp"
     source_port_range          = "*"
     destination_port_range     = "9997-9998"
-    source_address_prefix      = "10.65.8.211/32,10.65.8.212/32,10.65.7.212/32,10.65.7.211/32,10.65.8.210/32,10.65.7.210/32"
+    source_address_prefixes    = ["10.65.8.211/32,10.65.8.212/32,10.65.7.212/32,10.65.7.211/32,10.65.8.210/32,10.65.7.210/32"]
     destination_address_prefix = "*"
   }
 
@@ -136,7 +136,7 @@ resource "azurerm_network_security_group" "db_security_group" {
     protocol                   = "Tcp"
     source_port_range          = "*"
     destination_port_range     = "556,443,10003-10006"
-    source_address_prefix      = "10.64.8.184,10.64.8.180/32"
+    source_address_prefixes    = ["10.64.8.184,10.64.8.180/32"]
     destination_address_prefix = "*"
   }
 
@@ -158,10 +158,10 @@ resource "azurerm_network_security_group" "db_security_group" {
     direction                  = "Outbound"
     access                     = "Allow"
     protocol                   = "Tcp"
-    source_port_range          = "5432"
+    source_port_range          = "*"
     destination_port_range     = "5432"
     source_address_prefix      = "VirtualNetwork"
-    destination_address_prefix = "VirtualNetwork"
+    destination_address_prefix = "*"
   }
 
   security_rule {
@@ -170,7 +170,7 @@ resource "azurerm_network_security_group" "db_security_group" {
     direction                  = "Inbound"
     access                     = "Allow"
     protocol                   = "Tcp"
-    source_port_range          = "5432"
+    source_port_range          = "*"
     destination_port_range     = "5432"
     source_address_prefix      = "VirtualNetwork"
     destination_address_prefix = "VirtualNetwork"