Resource: aws_network_interface_sg_attachment

Attaches a security group to an elastic network interface (ENI). It can be used to attach a security group to any existing ENI, be it a secondary ENI or one attached as the primary interface on an instance.

~> Note on instances, interfaces, and security groups Terraform currently provides the capability to assign security groups via the aws_instance and the aws_network_interface resources. Using this resource in conjunction with security groups provided inline in those resources will cause conflicts, and will lead to spurious diffs and undefined behavior - please use one or the other.

Example usage

Basic example

The following example provides a very basic demonstration of setting up an instance (provided by instance) in the default security group, creating a security group (provided by sg) and then attaching the security group to the instance's primary network interface via the aws_network_interface_sg_attachment resource, named sg_attachment:

resource "aws_instance" "instance" {
  instance_type = "m1.micro"
  ami           = "cmi-12345678" # add image id, change instance type if needed

  tags = {
    type = "terraform-test-instance"
  }
}

resource "aws_security_group" "sg" {
  tags = {
    type = "terraform-test-security-group"
  }
}

resource "aws_network_interface_sg_attachment" "sg_attachment" {
  security_group_id    = aws_security_group.sg.id
  network_interface_id = aws_instance.instance.primary_network_interface_id
}

Argument reference

The following arguments are supported:

• network_interface_id - (Required, Forces new resource, String) The ID of the network interface to attach to.
• security_group_id - (Required, Forces new resource, String) The ID of the security group.

Attribute reference

• id - (String) The ID of the attachment.

Timeouts

Timeouts usage for security group attachments to ENIs is not currently supported.

Import

Import of security groups attachments to ENIs is not currently supported.