AWSTemplateFormatVersion: 2010-09-09
Description: Hasura PMDM Security Groups

Parameters:
    VPC:
      Default: "vpc-0ccc598dd0737f34a"
      Description: VPC
      Type: AWS::EC2::VPC::Id

Resources:
    HasuraPmdmLoadBalancerSG:
        Type: AWS::EC2::SecurityGroup
        Properties:
            GroupDescription: Access to the ELB
            VpcId: !Ref 'VPC'
            SecurityGroupIngress:
                - CidrIp: 130.164.0.0/17
                  FromPort: 8080
                  ToPort: 8080
                  IpProtocol: tcp
                - CidrIp: 10.0.0.0/8
                  FromPort: 8080
                  ToPort: 8080
                  IpProtocol: tcp
                - CidrIp: 172.16.0.0/12
                  FromPort: 8080
                  ToPort: 8080
                  IpProtocol: tcp

    FargateContainerSecurityGroup:
        Type: AWS::EC2::SecurityGroup
        Properties:
            GroupDescription: Access to the Fargate containers
            VpcId: !Ref 'VPC'

    EcsSecurityGroupIngressFromELB:
        Type: AWS::EC2::SecurityGroupIngress
        Properties:
            Description: Ingress from the ELB
            GroupId: !Ref 'FargateContainerSecurityGroup'
            IpProtocol: -1
            SourceSecurityGroupId: !Ref HasuraPmdmLoadBalancerSG

    EcsSecurityGroupIngressFromSelf:
        Type: AWS::EC2::SecurityGroupIngress
        Properties:
            Description: Ingress from other containers in the same security group
            GroupId: !Ref 'FargateContainerSecurityGroup'
            IpProtocol: -1
            SourceSecurityGroupId: !Ref FargateContainerSecurityGroup