Ports.

ministryofjustice · Jan 10, 2024 · 0d341c7 · 0d341c7
1 parent d671cf5
commit 0d341c7
Showing 1 changed file with 12 additions and 4 deletions.
diff --git a/terraform/environments/data-platform-apps-and-tools/powerbi-gateway-security-group.tf b/terraform/environments/data-platform-apps-and-tools/powerbi-gateway-security-group.tf
@@ -4,18 +4,26 @@ resource "aws_security_group" "powerbi_gateway" {
   description = local.environment_configuration.powerbi_gateway_ec2.instance_name
   vpc_id      = data.aws_vpc.shared.id
 
+  # https://learn.microsoft.com/en-us/data-integration/gateway/service-gateway-communication#ports
   egress {
     from_port   = 443
     to_port     = 443
     protocol    = "tcp"
     cidr_blocks = ["0.0.0.0/0"]
   }
 
-  ingress {
-    from_port   = 443
-    to_port     = 443
+  egress {
+    from_port   = 5671
+    to_port     = 5672
     protocol    = "tcp"
-    cidr_blocks = [local.environment_configuration.vpc_cidr]
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port   = 9352
+    to_port     = 9354
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
   }
 
   tags = local.tags