Removed the vpc endpoint security from the rds bastion config

This was not required for the access to the endpoints.
ministryofjustice · Jan 17, 2024 · 47f38f1 · 47f38f1
1 parent 86eac45
commit 47f38f1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/bastion-rds-admin.tf b/bastion-rds-admin.tf
@@ -10,7 +10,7 @@ module "rds_admin_bastion" {
   vpc_id                      = module.admin_vpc.vpc.vpc_id
   vpc_cidr_block              = module.admin_vpc.vpc.vpc_cidr_block
   private_subnets             = module.admin_vpc.public_subnets
-  security_group_ids          = [module.admin.security_group_ids.admin_ecs, module.admin_vpc.endpoints_sg.id]
+  security_group_ids          = [module.admin.security_group_ids.admin_ecs]
   ami_name                    = "diso-devops/bastion/rds-admin/ubuntu-jammy-22.04-amd64-server-1.0.1"
   number_of_bastions          = 1
   assume_role                 = local.s3-mojo_file_transfer_assume_role_arn

diff --git a/bastion-rds-servers.tf b/bastion-rds-servers.tf
@@ -10,7 +10,7 @@ module "rds_servers_bastion" {
   vpc_id                      = module.servers_vpc.vpc.vpc_id
   vpc_cidr_block              = module.servers_vpc.vpc.vpc_cidr_block
   private_subnets             = module.servers_vpc.public_subnets
-  security_group_ids          = [module.dhcp.security_group_ids.dhcp_server, module.servers_vpc.endpoints_sg.id]
+  security_group_ids          = [module.dhcp.security_group_ids.dhcp_server]
   ami_name                    = "diso-devops/bastion/rds-admin/ubuntu-jammy-22.04-amd64-server-1.0.1"
   number_of_bastions          = 1
   assume_role                 = local.s3-mojo_file_transfer_assume_role_arn