Closed gabrielhm1 closed 4 months ago
This PR has been automatically marked as stale because it has been open 30 days with no activity. Remove stale label or comment or this PR will be closed in 10 days
This PR was automatically closed because of stale in 10 days
I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.
Description
Support for multiple database subnet architectures.
Motivation and Context
Before this change, when
create_database_internet_gateway_route
was set to true, the database subnet had the following behavior:However, the Egress-Only Internet Gateway only allows outbound traffic. Consequently, the database subnet might receive inbound IPv4 traffic and outbound IPv4 traffic, but only outbound traffic for IPv6.
After this change, there are four patterns for the database subnet:
Public Pattern:
Full NAT Pattern:
IPv4 NAT + IPv6 Egress-Only:
IPv6 Egress-Only Pattern:
Breaking Changes
If
create_database_internet_gateway_route = true
,"aws_route" "database_ipv6_egress"
resource will be destroyed and replaced by"aws_route" "database_internet_gateway_ipv6"
.How Has This Been Tested?
examples/*
to demonstrate and validate my change(s)examples/*
projectspre-commit run -a
on my pull requestThe Terraform code was tested for all scenarios described in the motivation and context section.