Merge pull request #5549 from ministryofjustice/ifs-sec-revisions

restrict db access, ecs, cluster & bastion
ministryofjustice · Apr 5, 2024 · e3824e0 · e3824e0
2 parents 039529f + 828032f
commit e3824e0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/terraform/environments/cdpt-ifs/database.tf b/terraform/environments/cdpt-ifs/database.tf
@@ -44,7 +44,7 @@ resource "aws_security_group" "db" {
     from_port   = 1433
     to_port     = 1433
     protocol    = "tcp"
-	cidr_blocks = ["0.0.0.0/0"]
+    cidr_blocks = [data.aws_vpc.shared.cidr_block]
   }
   egress {
     from_port   = 0