时间戳

首页 > 解决方案 > RDS 的 Terraform AWS 安全组条目

terraform - RDS 的 Terraform AWS 安全组条目

问题描述

我正在尝试使用安全组创建 VPC 并将它们与 ec2 和 RDS 一起使用。

  1. 为 ec2 创建安全组 SG1，并打开端口 80
  2. 参考第一个安全组 sg1 创建了安全组 rdssg

resource "aws_vpc" "dev-vpc" {
    cidr_block = var.vpc_cidr
    enable_dns_hostnames = true
    tags = {
        Name = "Dev-VPC"
    }
}

resource "aws_security_group" "sg1" {
    name = "sg1"
    vpc_id =  aws_vpc.dev-vpc.id

    ingress {
        from_port = 80
        to_port = 80
        protocol = "tcp"
        cidr_blocks = ["0.0.0.0/0"]
    }

    egress {
        from_port = 0
        to_port = 0
        protocol = "-1"
        cidr_blocks = ["0.0.0.0/0"]

    }

}

resource "aws_security_group" "rdssg" {
    name = "rdssg"
    vpc_id =  aws_vpc.dev-vpc.id

    ingress {
        from_port = 3306
        to_port = 3306
        protocol = "tcp"
        security_groups = aws_security_group.sg1.id

    }

    egress {
        from_port = 0
        to_port = 0
        protocol = "-1"
        cidr_blocks = ["0.0.0.0/0"]

    }

当我运行 terraform plan 时，出现以下错误

Error: Incorrect attribute value type

  on ../module/vpc/vpc.tf line 152, in resource "aws_security_group" "rdssg":
 152:         security_groups = aws_security_group.sg1.id

Inappropriate value for attribute "security_groups": set of string required.
``

Not able to understand the error . Appreciate the help.

标签： terraformamazon-rdsaws-security-group

解决方案

security_groups 属性是一组安全组，因此您需要提供如下值：

security_groups = [aws_security_group.sg1.id]

推荐阅读