diff --git a/README.md b/README.md
index afbced4..84cdd20 100644
--- a/README.md
+++ b/README.md
@@ -223,6 +223,7 @@ Available targets:
 | alb_ingress_unauthenticated_listener_arns_count | The number of unauthenticated ARNs in `alb_ingress_unauthenticated_listener_arns`. This is necessary to work around a limitation in Terraform where counts cannot be computed | string | `0` | no |
 | alb_ingress_unauthenticated_paths | Unauthenticated path pattern to match (a maximum of 1 can be defined) | list | `<list>` | no |
 | alb_name | The Name of the ALB | string | - | yes |
+| alb_security_group | Security group of the ALB | string | - | yes |
 | alb_target_group_alarms_alarm_actions | A list of ARNs (i.e. SNS Topic ARN) to execute when ALB Target Group alarms transition into an ALARM state from any other state. | list | `<list>` | no |
 | alb_target_group_alarms_insufficient_data_actions | A list of ARNs (i.e. SNS Topic ARN) to execute when ALB Target Group alarms transition into an INSUFFICIENT_DATA state from any other state. | list | `<list>` | no |
 | alb_target_group_alarms_ok_actions | A list of ARNs (i.e. SNS Topic ARN) to execute when ALB Target Group alarms transition into an OK state from any other state. | list | `<list>` | no |
diff --git a/docs/terraform.md b/docs/terraform.md
index 426c57a..86d8834 100644
--- a/docs/terraform.md
+++ b/docs/terraform.md
@@ -15,6 +15,7 @@
 | alb_ingress_unauthenticated_listener_arns_count | The number of unauthenticated ARNs in `alb_ingress_unauthenticated_listener_arns`. This is necessary to work around a limitation in Terraform where counts cannot be computed | string | `0` | no |
 | alb_ingress_unauthenticated_paths | Unauthenticated path pattern to match (a maximum of 1 can be defined) | list | `<list>` | no |
 | alb_name | The Name of the ALB | string | - | yes |
+| alb_security_group | Security group of the ALB | string | - | yes |
 | alb_target_group_alarms_alarm_actions | A list of ARNs (i.e. SNS Topic ARN) to execute when ALB Target Group alarms transition into an ALARM state from any other state. | list | `<list>` | no |
 | alb_target_group_alarms_insufficient_data_actions | A list of ARNs (i.e. SNS Topic ARN) to execute when ALB Target Group alarms transition into an INSUFFICIENT_DATA state from any other state. | list | `<list>` | no |
 | alb_target_group_alarms_ok_actions | A list of ARNs (i.e. SNS Topic ARN) to execute when ALB Target Group alarms transition into an OK state from any other state. | list | `<list>` | no |
diff --git a/main.tf b/main.tf
index 562c18e..4d64fa9 100644
--- a/main.tf
+++ b/main.tf
@@ -76,7 +76,7 @@ module "webhooks" {
 }
 
 module "web_app" {
-  source     = "git::https://github.com/cloudposse/terraform-aws-ecs-web-app.git?ref=tags/0.22.0"
+  source     = "git::https://github.com/cloudposse/terraform-aws-ecs-web-app.git?ref=tags/0.23.0"
   namespace  = "${var.namespace}"
   stage      = "${var.stage}"
   name       = "${var.name}"
@@ -148,6 +148,7 @@ module "web_app" {
   alb_target_group_alarms_evaluation_periods      = "1"
   alb_name                                        = "${var.alb_name}"
   alb_arn_suffix                                  = "${var.alb_arn_suffix}"
+  alb_security_group                              = "${var.alb_security_group}"
 
   alb_target_group_alarms_alarm_actions             = ["${var.alb_target_group_alarms_alarm_actions}"]
   alb_target_group_alarms_ok_actions                = ["${var.alb_target_group_alarms_ok_actions}"]
diff --git a/variables.tf b/variables.tf
index c77bbab..33bc0f1 100644
--- a/variables.tf
+++ b/variables.tf
@@ -267,6 +267,11 @@ variable "alb_arn_suffix" {
   description = "The ARN suffix of the ALB"
 }
 
+variable "alb_security_group" {
+  type        = "string"
+  description = "Security group of the ALB"
+}
+
 variable "alb_target_group_alarms_alarm_actions" {
   type        = "list"
   description = "A list of ARNs (i.e. SNS Topic ARN) to execute when ALB Target Group alarms transition into an ALARM state from any other state."