feat: allow outbound IPV6 traffic on VPC functions hat are connected …

…to dual-stack subnets Signed-off-by: Sebastien RIBIERE <sebastien.ribiere.ext@jellysmack.com>
terraform-aws-modules · Aug 8, 2024 · ab40f04 · ab40f04
1 parent f48be17
commit ab40f04
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 5 deletions.
diff --git a/README.md b/README.md
@@ -254,9 +254,10 @@ module "lambda_function_in_vpc" {
 
   source_path = "../fixtures/python-app1"
 
-  vpc_subnet_ids         = module.vpc.intra_subnets
-  vpc_security_group_ids = [module.vpc.default_security_group_id]
-  attach_network_policy = true
+  vpc_subnet_ids              = module.vpc.intra_subnets
+  vpc_security_group_ids      = [module.vpc.default_security_group_id]
+  attach_network_policy       = true
+  ipv6_allowed_for_dual_stack = true
 }
 
 module "vpc" {

diff --git a/main.tf b/main.tf
@@ -91,8 +91,9 @@ resource "aws_lambda_function" "this" {
   dynamic "vpc_config" {
     for_each = var.vpc_subnet_ids != null && var.vpc_security_group_ids != null ? [true] : []
     content {
-      security_group_ids = var.vpc_security_group_ids
-      subnet_ids         = var.vpc_subnet_ids
+      security_group_ids          = var.vpc_security_group_ids
+      subnet_ids                  = var.vpc_subnet_ids
+      ipv6_allowed_for_dual_stack = var.ipv6_allowed_for_dual_stack
     }
   }
 

diff --git a/variables.tf b/variables.tf
@@ -176,6 +176,12 @@ variable "vpc_security_group_ids" {
   default     = null
 }
 
+variable "ipv6_allowed_for_dual_stack" {
+  description = "Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Default is false."
+  type        = bool
+  default     = false
+}
+
 variable "tags" {
   description = "A map of tags to assign to resources."
   type        = map(string)