allow default sg by default

mergermarket · Aug 12, 2024 · d40a79c · d40a79c
1 parent b745cfb
commit d40a79c
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/main.tf b/main.tf
@@ -1,3 +1,13 @@
+locals {
+  security_group_ids = var.security_group_ids != null ? var.security_group_ids : [aws_security_group.default[0].id]
+}
+
+data "aws_security_group" "default" {
+  count = var.security_group_ids != null ? 0 : 1
+  name = "${terraform.workspace}-default-lambda-sg"
+}
+
+
 resource "aws_lambda_function" "lambda_function" {
   image_uri                       = var.image_uri
   s3_bucket                       = var.s3_bucket
@@ -25,7 +35,7 @@ resource "aws_lambda_function" "lambda_function" {
 
   vpc_config {
     subnet_ids         = var.subnet_ids
-    security_group_ids = var.security_group_ids
+    security_group_ids = local.security_group_ids
   }
 
   environment {

diff --git a/variables.tf b/variables.tf
@@ -60,7 +60,7 @@ variable "subnet_ids" {
 variable "security_group_ids" {
   type        = list(string)
   description = "The VPC security groups assigned to the Lambda."
-  default     = []
+  default     = null
 }
 
 variable "datadog_log_subscription_arn" {