NRL-1385 security fix

jackleary · jackleary · commit f8dc52028931 · 2025-05-11T16:26:49.000+01:00
diff --git a/terraform/account-wide-infrastructure/modules/vpc/vpc.tf b/terraform/account-wide-infrastructure/modules/vpc/vpc.tf
@@ -59,7 +59,7 @@ resource "aws_security_group" "sg" {
     from_port        = 3389
     to_port          = 3389
     protocol         = "tcp"
-    cidr_blocks      = ["0.0.0.0/0"]
+    cidr_blocks      = [var.vpc_public_subnets_cidr_block]
     ipv6_cidr_blocks = ["::/0"]
   }
 

Original file line number	Diff line number	Diff line change
`@@ -59,7 +59,7 @@ resource "aws_security_group" "sg" {`
`59`	`59`	`from_port = 3389`
`60`	`60`	`to_port = 3389`
`61`	`61`	`protocol = "tcp"`
`62`		`- cidr_blocks = ["0.0.0.0/0"]`
	`62`	`+ cidr_blocks = [var.vpc_public_subnets_cidr_block]`
`63`	`63`	`ipv6_cidr_blocks = ["::/0"]`
`64`	`64`	`}`
`65`	`65`