A Terraform module to automatically update Security Group ingress rules with the latest public Cloudfront IP ranges.

This module is based on this AWS blog post, see the original blog post for steps on how to test the lambda function.

The lambda function uses tags to identify security groups it needs to update, the following are the three required tags:

Note you may need to increase your SG rule quota if you have not done so previously.

module "cloudfront-sg-updater" {
    source  = "coresolutions-ltd/cloudfront-sg-updater/aws"
    version = "~> 0.0.2"
}