Update the ami to differentiate DMZ/LZ

cisagov · Jan 30, 2025 · 20e1bce · 20e1bce
1 parent ae78d8e
commit 20e1bce
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/infrastructure/database.tf b/infrastructure/database.tf
@@ -192,7 +192,7 @@ resource "aws_iam_role_policy" "sqs_send_message_policy" {
 
 resource "aws_instance" "db_accessor" {
   count                       = var.create_db_accessor_instance ? 1 : 0
-  ami                         = var.ami_id
+  ami                         = var.is_dmz ? data.aws_ami.ubuntu.id : var.ami_id
   instance_type               = var.db_accessor_instance_class
   associate_public_ip_address = false
 

diff --git a/infrastructure/email-sender.tf b/infrastructure/email-sender.tf
@@ -49,7 +49,7 @@ resource "aws_iam_policy_attachment" "email_sender_ec2_policy_2" {
 # EC2 Instance for SES
 resource "aws_instance" "email_sender" {
   count                       = var.create_email_sender_instance ? 1 : 0
-  ami                         = var.ami_id
+  ami                         = var.is_dmz ? data.aws_ami.ubuntu.id : var.ami_id
   instance_type               = var.email_sender_instance_type
   associate_public_ip_address = false