Skip to content

Commit 119a9ca

Browse files
committed
chore: add egress rules
1 parent 874024a commit 119a9ca

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

templates/CloudConnector.yaml

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -317,10 +317,21 @@ Resources:
317317
GroupName: !Sub "${AWS::StackName}-CloudConnector"
318318
GroupDescription: CloudConnector workload Security Group
319319
SecurityGroupEgress:
320+
# Allow outbound HTTPS traffic over TCP
321+
# Used by Cloud Connector to send events to https://secure.sysdig.com
320322
- CidrIp: 0.0.0.0/0
321323
IpProtocol: "tcp"
322324
FromPort: 443
323325
ToPort: 443
326+
# Allow outbound DNS traffic over UDP and TCP
327+
- CidrIp: 0.0.0.0/0
328+
IpProtocol: "tcp"
329+
FromPort: 53
330+
ToPort: 53
331+
- CidrIp: 0.0.0.0/0
332+
IpProtocol: "udp"
333+
FromPort: 53
334+
ToPort: 53
324335
Tags:
325336
- Key: Name
326337
Value: !Sub "${AWS::StackName}-CloudConnector"

0 commit comments

Comments
 (0)