forgot to add linkage SG

guardian · Mar 15, 2024 · 8153ade · 8153ade
1 parent 6035df9
commit 8153ade
Show file tree

Hide file tree

Showing 2 changed files with 49 additions and 3 deletions.
diff --git a/cdk/lib/__snapshots__/concierge-graphql.test.ts.snap b/cdk/lib/__snapshots__/concierge-graphql.test.ts.snap
@@ -400,6 +400,27 @@ exports[`The ConciergeGraphql stack matches the snapshot 1`] = `
       },
       "Type": "AWS::EC2::SecurityGroupIngress",
     },
+    "GuHttpsEgressSecurityGroupConciergegraphqlfromConciergeGraphqlLinkageSGConciergegraphqlB4BBACD5900025BE65A9": {
+      "Properties": {
+        "Description": "Load balancer to target",
+        "FromPort": 9000,
+        "GroupId": {
+          "Fn::GetAtt": [
+            "GuHttpsEgressSecurityGroupConciergegraphql1855BF47",
+            "GroupId",
+          ],
+        },
+        "IpProtocol": "tcp",
+        "SourceSecurityGroupId": {
+          "Fn::GetAtt": [
+            "LinkageSGConciergegraphql642E0A21",
+            "GroupId",
+          ],
+        },
+        "ToPort": 9000,
+      },
+      "Type": "AWS::EC2::SecurityGroupIngress",
+    },
     "GuHttpsEgressSecurityGroupConciergegraphqlfromConciergeGraphqlLoadBalancerConciergegraphqlSecurityGroup9A9241C7900098F0B65A": {
       "Properties": {
         "Description": "Load balancer to target",
@@ -678,6 +699,12 @@ exports[`The ConciergeGraphql stack matches the snapshot 1`] = `
               "GroupId",
             ],
           },
+          {
+            "Fn::GetAtt": [
+              "LinkageSGConciergegraphql642E0A21",
+              "GroupId",
+            ],
+          },
         ],
         "Subnets": {
           "Ref": "subnets",
@@ -1034,6 +1061,27 @@ exports[`The ConciergeGraphql stack matches the snapshot 1`] = `
       },
       "Type": "AWS::EC2::SecurityGroupIngress",
     },
+    "WazuhSecurityGroupfromConciergeGraphqlLinkageSGConciergegraphqlB4BBACD590001E26A8A8": {
+      "Properties": {
+        "Description": "Load balancer to target",
+        "FromPort": 9000,
+        "GroupId": {
+          "Fn::GetAtt": [
+            "WazuhSecurityGroup",
+            "GroupId",
+          ],
+        },
+        "IpProtocol": "tcp",
+        "SourceSecurityGroupId": {
+          "Fn::GetAtt": [
+            "LinkageSGConciergegraphql642E0A21",
+            "GroupId",
+          ],
+        },
+        "ToPort": 9000,
+      },
+      "Type": "AWS::EC2::SecurityGroupIngress",
+    },
     "WazuhSecurityGroupfromConciergeGraphqlLoadBalancerConciergegraphqlSecurityGroup9A9241C79000A2D85BDF": {
       "Properties": {
         "Description": "Load balancer to target",

diff --git a/cdk/lib/concierge-graphql.ts b/cdk/lib/concierge-graphql.ts
@@ -78,10 +78,8 @@ export class ConciergeGraphql extends GuStack {
       app: props.app ?? "concierge-graphql",
       vpc,
     });
+    loadBalancer.addSecurityGroup(linkageSG);
 
-    // const subnets:SubnetSelection = {
-    //   subnets:
-    // }
     const subnets = GuVpc.subnets(this, subnetsList.valueAsList);
 
     new HttpGateway(this, "GW", {