Making CIDR Block for SSH Configuration Optional and Outbound Traffic Configurable
MatthiasScholz opened this issue · 4 comments
Currently the CIDR blocks for incoming SSH access is mandatory.
Especially with the introduction of the AWS System Manager Session Manager an alternative administrative access is available. This would allow to reduce the access for SSH access and increase the security.
Furthermore module users might have the use case to limit the outbound traffic traffic as well.
Source Code References:
I think there may be some confusion here... As indicated in multiple places in the docs, the Terraform code in the root folder (i.e., terraform-aws-nomad/main.tf) and the examples folder are all example code. They are intentionally examples that are designed for easy testing and learning, but are NOT meant to be used directly in prod. The code to use in prod is the code in modules, the vast majority of which already allows you to configure the CIDR blocks allowed to access the cluster.
Sorry for being incomplete in the issue description. Indeed the main intention was making the CIDR block in the module configurable. Changing the main.tf on the root level was a side effect due to testing attempt.
-> The issue description got update to better fit the intention.
Understood, thanks!
PR #85 merged. Closing issues as it has been resolved.