Merge pull request #472 from cisagov/cd_elasticache_add_create_policy

Update elasticache terraform to modify VPC cidr notation
cisagov · Jul 23, 2024 · 7bc41b6 · 7bc41b6
2 parents 17e4e62 + 12a3669
commit 7bc41b6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/infrastructure/elasticache.tf b/infrastructure/elasticache.tf
@@ -6,7 +6,7 @@ resource "aws_security_group" "elasticache_security_group" {
     from_port   = 6379
     to_port     = 6379
     protocol    = "tcp"
-    cidr_blocks = ["10.0.0.0/16"] // Restrict to a specific CIDR block, ideally your VPC's CIDR
+    cidr_blocks = ["172.31.0.0/16"] // Restrict to a specific CIDR block, ideally your VPC's CIDR
   }
 }
 
@@ -75,6 +75,7 @@ resource "aws_iam_policy" "elasticache_policy" {
           "elasticache:ModifyCacheParameterGroup",
           "iam:ListAttachedUserPolicies",
           "iam:CreatePolicy",
+          "iam:CreatePolicyVersion",
           "iam:AttachUserPolicy",
           "iam:GetPolicyVersion",
           "iam:ListPolicyVersions",