github.com/jmbataller/terraform@v0.6.8-0.20151125192640-b7a12e3a580c/website/source/docs/providers/aws/r/security_group_rule.html.markdown (about)

     1  ---
     2  layout: "aws"
     3  page_title: "AWS: aws_security_group_rule"
     4  sidebar_current: "docs-aws-resource-security-group-rule"
     5  description: |-
     6    Provides an security group rule resource.
     7  ---
     8  
     9  # aws\_security\_group\_rule
    10  
    11  Provides a security group rule resource. Represents a single `ingress` or
    12  `egress` group rule, which can be added to external Security Groups.
    13  
    14  ~> **NOTE on Security Groups and Security Group Rules:** Terraform currently
    15  provides both a standalone Security Group Rule resource (a single `ingress` or
    16  `egress` rule), and a [Security Group resource](security_group.html) with `ingress` and `egress` rules
    17  defined in-line. At this time you cannot use a Security Group with in-line rules
    18  in conjunction with any Security Group Rule resources. Doing so will cause
    19  a conflict of rule settings and will overwrite rules.
    20  
    21  ## Example Usage
    22  
    23  Basic usage
    24  
    25  ```
    26  resource "aws_security_group_rule" "allow_all" {
    27      type = "ingress"
    28      from_port = 0
    29      to_port = 65535
    30      protocol = "tcp"
    31      cidr_blocks = ["0.0.0.0/0"]
    32  
    33      security_group_id = "sg-123456"
    34      source_security_group_id = "sg-654321"
    35  }
    36  ```
    37  
    38  ## Argument Reference
    39  
    40  The following arguments are supported:
    41  
    42  * `type` - (Required) The type of rule being created. Valid options are `ingress` (inbound)
    43  or `egress` (outbound).
    44  * `cidr_blocks` - (Optional) List of CIDR blocks.
    45  * `from_port` - (Required) The start port.
    46  * `protocol` - (Required) The protocol.
    47  * `security_group_id` - (Required) The security group to apply this rule to.
    48  * `source_security_group_id` - (Optional) The security group id to allow access to/from,
    49       depending on the `type`.
    50  * `self` - (Optional) If true, the security group itself will be added as
    51       a source to this ingress rule.
    52  * `to_port` - (Required) The end range port.
    53  
    54  ## Attributes Reference
    55  
    56  The following attributes are exported:
    57  
    58  * `id` - The ID of the security group rule
    59  * `type` - The type of rule, `ingress` or `egress`
    60  * `from_port` - The source port
    61  * `to_port` - The destination port
    62  * `protocol` – The protocol used