aws eb security group설정파일

aws eb에 sg설정을 따로 해주어야 한다. 왜냐하면 eb를 재부팅하면 sg를 지우고 다시 만들기 때문이다.

아래 파일을 main/ebextensions에 넣으면 된다.

securitygroup.config

###################################################################################################
#### Copyright 2016 Amazon.com, Inc. or its affiliates. All Rights Reserved.
####
#### Licensed under the Apache License, Version 2.0 (the "License"). You may not use this file
#### except in compliance with the License. A copy of the License is located at
####
####     http://aws.amazon.com/apache2.0/
####
#### or in the "license" file accompanying this file. This file is distributed on an "AS IS"
#### BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#### License for the specific language governing permissions and limitations under the License.
###################################################################################################
 
###################################################################################################
#### This configuration file configures ingress rules to the instance's and ELB security group.
#### This will override existing configuration of the Security Groups for both the instance and the
#### ELB. The configuration below allows 80 and 443 to the ELB and port 80 from the ELB to the
#### instances.
###################################################################################################
 
###################################################################################################
#### Allow 123 (UDP) for NTP Server
#### Allow 4118 ~ 4122 For Deep Security
###################################################################################################
 
Resources:
    AWSEBSecurityGroup:
        Type: AWS::EC2::SecurityGroup
        Properties:
            GroupDescription: EB SecurityGroup for ElasticBeanstalk environment.
            SecurityGroupEgress:
                - FromPort: 80
                  ToPort: 80
                  IpProtocol: tcp
                  CidrIp : 0.0.0.0/0
                - FromPort: 443
                  ToPort: 443
                  IpProtocol: tcp
                  CidrIp : 0.0.0.0/0
                - FromPort: 4118
                  ToPort: 4122
                  IpProtocol: tcp
                  CidrIp : 0.0.0.0/0
                - FromPort: 123
                  ToPort: 123
                  IpProtocol: udp
                  CidrIp : 0.0.0.0/0
                - FromPort: 3306
                  ToPort: 3306
                  IpProtocol: tcp
                  CidrIp : 0.0.0.0/0