https://pulumi.com
Join Slack
This message was deleted.
# aws
s
This message was deleted.
g
I'm not aware of a community module for this. This should be really straightforward with something like below:
Copy code
const adSg = new aws.ec2.SecurityGroup("ad", {
    vpcId: vpc.id, 
    egress: [
      // your rules here
    ]
});
I'm curious... what does the Terraform security-group module provide in addition to this?
l
Named port/protocol combinations (e.g. 
activemq-5671-tcp
and 
activemq-61614-tcp
), and named rule groups (e.g. 
activemq
), and a couple of snart wrappers.
So you can create things like an ingress activemq security group in about 10 lines.
ActiveMQ only needs (iirc) 5 rules.. AD is much bigger, needs about 16 egress rules for the Domain members. Fortunately, just creating an AD directory creates the equivalent ingress security group for the controller.
Is there a usual way to contribute community modules? I need to create two ComponentResources for AD, and the "member" one might be big enough to save someone else some effort. There's a security group, all the rules, the SSM document and the IAM stuff needed to use it.
l
I haven’t looked deeply yet but does the 
awsx
package have some of what you need? https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/awsx/ec2/#security-groups
Open in Slack
PreviousNext
Powered by

Pulumi Community

No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Powered by