(aws-elasticloadbalancingv2): (network-load-balancer-supports-security-groups)

[neilkuan]

Describe the feature

https://aws.amazon.com/tw/about-aws/whats-new/2023/08/network-load-balancer-supports-security-groups/
network load balancer supports security groups.

Use Case

Supports create NLB with SG via aws cdk L2.

Proposed Solution

Support securityGroup into NetworkLoadBalancerProps.

Other Information

No response

Acknowledgements

• I may be able to implement this feature request
• This feature might incur a breaking change

CDK version used

2.91.0

Environment details (OS name and version, etc.)

macOS Ventura 13.4.1

[neilkuan]

I can use addPropertyOverride() setting SecurityGroups for now.

const lb = new elasticloadbalancingv2.NetworkLoadBalancer(this, 'nyancatNlb', {
      vpc,
      internetFacing: true,
      crossZoneEnabled: true,
    });
    const ntg80 = lb.addListener('Listener80', { port: 80 });
    ntg80.addTargets('svc80', {
      port: 80,
      targets: [svc],
    });
    const nlbSg = new ec2.SecurityGroup(this, 'NLBSecurityGroup', { vpc, allowAllOutbound: true });
    svc.connections.allowFrom(nlbSg, ec2.Port.tcp(80));
    const cfnlb = (lb.node.defaultChild as elasticloadbalancingv2.CfnLoadBalancer );
    cfnlb.addPropertyOverride('SecurityGroups', [
      nlbSg.securityGroupId,
    ]);

[pahud]

Awesome @neilkuan ! This is a huge update from NLB! Can't wait to see it in CDK.

[vumdao]

Hope to see this release soon!

[amouly]

Looking for this feature too! Thanks for documenting it!

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.

[ZhouLihua]

For some one who uses CDK python launguage.
nlb.node.default_child.add_property_override("SecurityGroups", [ nlb_sg.security_group_id ])