Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Enhancing VPC Security with Amazon VPC Block Public Access #1159

Open
wants to merge 17 commits into
base: master
Choose a base branch
from

Conversation

sebastianczech
Copy link
Contributor

@sebastianczech sebastianczech commented Jan 26, 2025

Description

PR add support for VPC Block Public Access exclusions and VPC Block Public Access options

Motivation and Context

Resolves #1158

Breaking Changes

It doesn't break backwards compatibility with the current major version

How Has This Been Tested?

  • I have updated at least one of the examples/* to demonstrate and validate my change(s)
  • I have tested and validated these changes using one or more of the provided examples/* projects
  • I have executed pre-commit run -a on my pull request

Copy link
Member

@antonbabenko antonbabenko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks pretty good, there are a few comments.

main.tf Outdated Show resolved Hide resolved
main.tf Outdated Show resolved Hide resolved
examples/block-public-access/versions.tf Outdated Show resolved Hide resolved
main.tf Outdated Show resolved Hide resolved
main.tf Outdated Show resolved Hide resolved
main.tf Outdated Show resolved Hide resolved
variables.tf Outdated Show resolved Hide resolved
outputs.tf Outdated
@@ -78,6 +78,11 @@ output "vpc_owner_id" {
value = try(aws_vpc.this[0].owner_id, null)
}

output "vpc_block_public_access_exclusions" {
description = "List of VPC block public access exclusions"
value = [for k, v in aws_vpc_block_public_access_exclusion.this : v.id]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please make it as a map, not list.

Copy link
Contributor Author

@sebastianczech sebastianczech Jan 28, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I changed this output into map.

variables.tf Outdated
@@ -116,6 +116,65 @@ variable "tags" {
default = {}
}

variable "vpc_block_public_access_options" {
description = <<EOF
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Omg, please keep the descriptions as similar to the rest of the module's variables as possible. We normally show available options in the examples or README, but not in the description.

Update the list of the examples in the README.md

Copy link
Contributor Author

@sebastianczech sebastianczech Jan 28, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I updated README.md for new example block-public-access, list of examples in main README.md and variables descriptions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support for VPC Block Public Access exclusions
2 participants