Merge pull request #218 from mr-miles/patch-1

Set up http_api access correctly
hashicorp · May 3, 2021 · af53a3f · af53a3f
2 parents 1a441ac + a2cb3e9
commit af53a3f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/consul-security-group-rules/main.tf b/modules/consul-security-group-rules/main.tf
@@ -68,7 +68,7 @@ resource "aws_security_group_rule" "allow_http_api_inbound" {
 }
 
 resource "aws_security_group_rule" "allow_https_api_inbound" {
-  count       = var.enable_https_port ? 1 : 0
+  count       = var.enable_https_port && length(var.allowed_inbound_cidr_blocks) >= 1 ? 1 : 0
   type        = "ingress"
   from_port   = var.https_api_port
   to_port     = var.https_api_port