Default VPC Security Group Tags

[e-moshaya]

Is there a way to set the vpc's default security group tags? I'm not referring to the default VPC security group but the default security group for the current VPC created through this module.

[sirket]

You could simply add this to main.tf in the module right after the VPC is defined:

resource "aws_default_security_group" "default" {
vpc_id = "${aws_vpc.this.id}"

ingress {
protocol = -1
self = true
from_port = 0
to_port = 0
}

egress {
from_port = 0
to_port = 0
protocol = "-1"
cidr_blocks = ["0.0.0.0/0"]
}

tags = "${merge(map("Name", format("%s", var.name)), var.tags, var.vpc_tags)}"
}

That said- the default VPC security group really should not be used for anything so leaving off the tags might make sense.

[ndench]

I use the default security group for most things because it allows everything in the vpc to communicate. I only create other security groups when I want the outside world to communicate with my infrastructure (ie. ssh, web, etc).

Can confirm that the aws_default_security_group workaround from @sirket works well but it would be nice for the module to attach tags to the security group. If you're creating multiple VPC's in the same region, it quite hard to tell their default security groups apart unless they're tagged.

[DrFaust92]

closed by #382

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.