Address CIS-VpcDefaultSecurityGroupsMustRestrictAllTraffic (#40)

* Address CIS-VpcDefaultSecurityGroupsMustRestrictAllTraffic * Address CIS-VpcDefaultSecurityGroupsMustRestrictAllTraffic * Apply suggestions from code review
cloudposse · Aug 20, 2019 · d16f786 · d16f786
1 parent 192b793
commit d16f786
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -19,6 +19,15 @@ resource "aws_vpc" "default" {
   tags                             = module.label.tags
 }
 
+# If `aws_default_security_group` is not defined, it would be created implicitly with access `0.0.0.0/0`
+resource "aws_default_security_group" "default" {
+  vpc_id = aws_vpc.default.id
+
+  tags = {
+    Name = "Default Security Group"
+  }
+}
+
 resource "aws_internet_gateway" "default" {
   vpc_id = aws_vpc.default.id
   tags   = module.label.tags