security_group.tf

resource "aws_security_group" "datapipeline" {
  count       = var.datapipeline_security_group == "" ? 1 : 0
  tags        = module.label.tags
  vpc_id      = data.aws_vpc.default.id
  name        = module.label.id
  description = module.label.id

  ingress {
    from_port   = 22
    to_port     = 22
    protocol    = "tcp"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }
}

resource "aws_security_group_rule" "datapipeline_efs_ingress" {
  count                    = var.modify_security_group == "true" ? 1 : 0
  from_port                = 0
  protocol                 = "-1"
  security_group_id        = data.aws_efs_mount_target.default.security_groups[0]
  to_port                  = 0
  type                     = "ingress"
  source_security_group_id = var.datapipeline_security_group == "" ? join("", aws_security_group.datapipeline.*.id) : var.datapipeline_security_group
}