[#33] Update missing Bastion's resources

core/locals.tf

@@ -18,7 +18,7 @@ locals {
   health_check_path = "/health"
 
   # The IP addresses allowed to connect to the bastion host
-  bastion_allowed_ip_connections = []
+  bastion_allowed_ip_connections = ["115.74.38.114"]
 
   # The ECS configuration for the current environment
   current_ecs_config = local.ecs_config[var.environment]

core/main.tf

@@ -118,5 +118,6 @@ module "bastion" {
   source = "../modules/bastion"
 
   environment                 = var.environment
+  subnet_ids                  = module.vpc.public_subnet_ids
   instance_security_group_ids = module.security_group.bastion_security_group_ids
 }

modules/bastion/locals.tf

@@ -6,4 +6,13 @@ locals {
 
   # The instance type
   instance_type = "t3.nano"
+
+  # The minimum number of instances
+  min_instance_count = 1
+
+  # The maximum number of instances
+  max_instance_count = 1
+
+  # The desired number of instances
+  instance_desired_count = 1
 }

modules/bastion/main.tf

@@ -24,3 +24,19 @@ resource "aws_launch_configuration" "bastion_instance" {
     encrypted = true
   }
 }
+
+resource "aws_autoscaling_group" "bastion_instance" {
+  #checkov:skip=CKV_AWS_315: Use EC2 launch template
+  name                 = "${local.namespace}-instance"
+  min_size             = local.min_instance_count
+  max_size             = local.max_instance_count
+  desired_capacity     = local.instance_desired_count
+  launch_configuration = aws_launch_configuration.bastion_instance.name
+  vpc_zone_identifier  = var.subnet_ids
+
+  tag {
+    key                 = "Name"
+    value               = "${local.namespace}-instance"
+    propagate_at_launch = true
+  }
+}

modules/bastion/variables.tf

@@ -2,3 +2,8 @@ variable "instance_security_group_ids" {
   description = "The security group IDs for the instance"
   type        = list(string)
 }
+
+variable "subnet_ids" {
+  description = "The subnet IDs for the instance"
+  type        = list(string)
+}

modules/s3/locals.tf

@@ -1,9 +1,9 @@
 locals {
   # The name of the bucket
-  asset_bucket_name = "${var.environment}-devops-ic-assets-bucket"
+  asset_bucket_name = "${var.environment}-devops-ic-asset-1-bucket"
 
   # The name of ALB log bucket
-  alb_log_bucket_name = "${var.environment}-devops-ic-alb-log-bucket"
+  alb_log_bucket_name = "${var.environment}-devops-ic-alb-log-1-bucket"
 
   # All objects should be deleted from the bucket when the bucket is destroyed
   force_destroy = true