The security group for the datapipeline instances opens SSH to the world (port 22, 0.0.0.0/0), which is not ideal.
Further, I had problems with it always showing changes (I think because I had modify_security_group = false and was adding a rule to the SG after the module had run).
This allows a security group to be passed into the module for use on the datapipeline instances. The EFS mount security group must allow traffic from this security group.
The security group for the datapipeline instances opens SSH to the world (port 22, 0.0.0.0/0), which is not ideal.
Further, I had problems with it always showing changes (I think because I had
modify_security_group = false
and was adding a rule to the SG after the module had run).This allows a security group to be passed into the module for use on the datapipeline instances. The EFS mount security group must allow traffic from this security group.