pulumi
  .all([appSecurityGroup.id, sharedDbSecurityGroupId])
  .apply(async ([appSecurityGroupId, sharedDbSecurityGroupId]) => {
    const sharedDbSecurityGroup = awsx.ec2.SecurityGroup.fromExistingId("shared-db-sg", sharedDbSecurityGroupId, {
      vpc: vpc.vpc,
    });

    awsx.ec2.SecurityGroupRule.ingress(
      `${appName}-db-sg-rule-ingress`,
      sharedDbSecurityGroup,
      {
        sourceSecurityGroupId: appSecurityGroupId,
      },
      new awsx.ec2.TcpPorts(3306),
      `For ${appName}`,
    );
  });