Skip to content

Commit c76d6c8

Browse files
committed
VED-26: Name subnets. Don't map public IPs to avoid hitting account limits.
1 parent 0447b61 commit c76d6c8

File tree

1 file changed

+17
-4
lines changed

1 file changed

+17
-4
lines changed

infra/networking.tf

Lines changed: 17 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,28 +1,34 @@
11
locals {
22
public_subnet_config = [
33
{
4+
name = "imms-${var.environment}-fhir-api-public-subnet-a"
45
cidr_block = "172.31.16.0/20"
56
availability_zone = "eu-west-2a"
67
},
78
{
9+
name = "imms-${var.environment}-fhir-api-public-subnet-b"
810
cidr_block = "172.31.32.0/20"
911
availability_zone = "eu-west-2b"
1012
},
1113
{
14+
name = "imms-${var.environment}-fhir-api-public-subnet-c"
1215
cidr_block = "172.31.0.0/20"
1316
availability_zone = "eu-west-2c"
1417
}
1518
]
1619
private_subnet_config = [
1720
{
21+
name = "imms-${var.environment}-fhir-api-private-subnet-a"
1822
cidr_block = "172.31.48.0/20"
1923
availability_zone = "eu-west-2a"
2024
},
2125
{
26+
name = "imms-${var.environment}-fhir-api-private-subnet-b"
2227
cidr_block = "172.31.64.0/20"
2328
availability_zone = "eu-west-2b"
2429
},
2530
{
31+
name = "imms-${var.environment}-fhir-api-private-subnet-c"
2632
cidr_block = "172.31.80.0/20"
2733
availability_zone = "eu-west-2c"
2834
}
@@ -42,10 +48,13 @@ resource "aws_vpc" "default" {
4248
resource "aws_subnet" "public" {
4349
for_each = { for idx, subnet in local.public_subnet_config : idx => subnet }
4450

45-
vpc_id = aws_vpc.default.id
46-
cidr_block = each.value.cidr_block
47-
availability_zone = each.value.availability_zone
48-
map_public_ip_on_launch = true
51+
vpc_id = aws_vpc.default.id
52+
cidr_block = each.value.cidr_block
53+
availability_zone = each.value.availability_zone
54+
55+
tags = {
56+
Name = each.value.name
57+
}
4958
}
5059

5160
resource "aws_internet_gateway" "default" {
@@ -83,6 +92,10 @@ resource "aws_subnet" "private" {
8392
vpc_id = aws_vpc.default.id
8493
cidr_block = each.value.cidr_block
8594
availability_zone = each.value.availability_zone
95+
96+
tags = {
97+
Name = each.value.name
98+
}
8699
}
87100

88101
resource "aws_eip" "nat" {

0 commit comments

Comments
 (0)