-
Notifications
You must be signed in to change notification settings - Fork 4
/
guacamole_accessible_sg.tf
33 lines (28 loc) · 1.08 KB
/
guacamole_accessible_sg.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
# Security group for the instances accessible by Guacamole
resource "aws_security_group" "guacamole_accessible" {
provider = aws.provisionassessment
tags = {
Name = "Guacamole accessible"
}
vpc_id = aws_vpc.assessment.id
}
# Allow ingress from Guacamole instances via SSH
resource "aws_security_group_rule" "ingress_from_guacamole_via_ssh" {
provider = aws.provisionassessment
from_port = 22
protocol = "tcp"
security_group_id = aws_security_group.guacamole_accessible.id
source_security_group_id = aws_security_group.guacamole.id
to_port = 22
type = "ingress"
}
# Allow ingress from Guacamole instances via VNC
resource "aws_security_group_rule" "ingress_from_guacamole_via_vnc" {
provider = aws.provisionassessment
from_port = 5901
protocol = "tcp"
security_group_id = aws_security_group.guacamole_accessible.id
source_security_group_id = aws_security_group.guacamole.id
to_port = 5901
type = "ingress"
}