[New Resource]: `aws_vpc_security_group_rules_exclusive`

[jar-b]

Description

Manage ingress and egress rules assigned to a VPC security group. Related resources:

aws_security_group aws_security_group_rule aws_vpc_security_group_egress_rule aws_vpc_security_group_ingress_rule

Deprecate aws_security_group.ingress and aws_security_group.egress. Consider deprecating aws_security_group_rule entirely.

Requested Resource(s) and/or Data Source(s)

• aws_vpc_security_group_rules_exclusive

Potential Terraform Configuration

resource "aws_vpc_security_group_rules_exclusive" "example" {
  security_group_id = aws_security_group.example.id
  egress_rule_ids   = [aws_vpc_security_group_egress_rule.example.id]
  ingress_rule_ids  = [aws_vpc_security_group_ingress_rule.example.id]
}

Alternatively, this could be split into two resources to match the ingress/egress rule resource variants:

resource "aws_vpc_security_group_egress_rules_exclusive" "example" {
  security_group_id = aws_security_group.example.id
  rule_ids          = [aws_vpc_security_group_egress_rule.example.id]
}

resource "aws_vpc_security_group_ingress_rules_exclusive" "example" {
  security_group_id = aws_security_group.example.id
  rule_ids          = [aws_vpc_security_group_ingress_rule.example.id]
}

References

• https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AuthorizeSecurityGroupEgress.html
• https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AuthorizeSecurityGroupIngress.html
• https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RevokeSecurityGroupEgress.html
• https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_RevokeSecurityGroupIngress.html

[github-actions[bot]]

Community Note

Voting for Prioritization

• Please vote on this issue by adding a 👍 reaction to the original post to help the community and maintainers prioritize this request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

Volunteering to Work on This Issue

• If you are interested in working on this issue, please leave a comment.
• If this would be your first contribution, please review the contribution guide.