allow connectivity between legacy and MP oracle

ministryofjustice · Jan 9, 2025 · f8697f8 · f8697f8
1 parent 2e6e79a
commit f8697f8
Showing 1 changed file with 24 additions and 0 deletions.
diff --git a/terraform/environments/delius-core/modules/components/oracle_db_shared/sg.tf b/terraform/environments/delius-core/modules/components/oracle_db_shared/sg.tf
@@ -47,6 +47,30 @@ resource "aws_vpc_security_group_ingress_rule" "db_ec2_instance_rman" {
   )
 }
 
+resource "aws_vpc_security_group_egress_rule" "db_ec2_instance_legacy_oracle" {
+  security_group_id = aws_security_group.db_ec2.id
+  cidr_ipv4         = var.environment_config.migration_environment_private_cidr
+  from_port         = local.db_port
+  to_port           = local.db_tcps_port
+  ip_protocol       = "tcp"
+  description       = "Allow communication out on port 1521 to legacy"
+  tags = merge(var.tags,
+    { Name = "legacy-oracle-out" }
+  )
+}
+
+resource "aws_vpc_security_group_ingress_rule" "db_ec2_instance_legacy_oracle" {
+  security_group_id = aws_security_group.db_ec2.id
+  cidr_ipv4         = var.environment_config.legacy_engineering_vpc_cidr
+  from_port         = local.db_port
+  to_port           = local.db_tcps_port
+  ip_protocol       = "tcp"
+  description       = "Allow communication in on port 1521 from legacy"
+  tags = merge(var.tags,
+    { Name = "legacy-oracle-in" }
+  )
+}
+
 resource "aws_vpc_security_group_egress_rule" "db_inter_conn" {
   security_group_id            = aws_security_group.db_ec2.id
   description                  = "Allow communication between delius db instances"