Bugfix/self not in security group

modules/vault-cluster/main.tf

@@ -201,7 +201,8 @@ resource "aws_iam_role_policy" "vault_s3" {
 }
 
 data "aws_iam_policy_document" "vault_s3" {
-  count  = "${var.enable_s3_backend ? 1 : 0}"
+  count = "${var.enable_s3_backend ? 1 : 0}"
+
   statement {
     effect  = "Allow"
     actions = ["s3:*"]

modules/vault-security-group-rules/main.tf

@@ -33,3 +33,13 @@ resource "aws_security_group_rule" "allow_cluster_inbound_from_self" {
 
   security_group_id = "${var.security_group_id}"
 }
+
+resource "aws_security_group_rule" "allow_cluster_inbound_from_self_api" {
+  type      = "ingress"
+  from_port = "${var.api_port}"
+  to_port   = "${var.api_port}"
+  protocol  = "tcp"
+  self      = true
+
+  security_group_id = "${var.security_group_id}"
+}