@awsless/cli 0.1.44 → 0.1.45

package/dist/bin.js

@@ -161969,31 +161969,39 @@ var cacheFeature = defineFeature({
       });
       const masterHost = cache.endpoint.pipe((v) => v.at(0).address);
       const masterPort = cache.endpoint.pipe((v) => v.at(0).port);
+      new aws.vpc.SecurityGroupIngressRule(group, "master-rule-ip-v4", {
+        securityGroupId: securityGroup.id,
+        description: masterPort.pipe((port) => `Allow ipv4 on port: ${port}`),
+        ipProtocol: "tcp",
+        cidrIpv4: "0.0.0.0/0",
+        fromPort: masterPort,
+        toPort: masterPort
+      });
+      new aws.vpc.SecurityGroupIngressRule(group, "master-rule-ip-v6", {
+        securityGroupId: securityGroup.id,
+        description: masterPort.pipe((port) => `Allow ipv6 on port: ${port}`),
+        ipProtocol: "tcp",
+        cidrIpv6: "::/0",
+        fromPort: masterPort,
+        toPort: masterPort
+      });
       const slaveHost = cache.readerEndpoint.pipe((v) => v.at(0).address);
       const slavePort = cache.readerEndpoint.pipe((v) => v.at(0).port);
-      const allowClient = (clientId, clientSecurityGroupId) => {
-        for (const [endpoint, port] of [
-          ["master", masterPort],
-          ["slave", slavePort]
-        ]) {
-          new aws.vpc.SecurityGroupIngressRule(group, `${endpoint}-rule-${clientId}`, {
-            securityGroupId: securityGroup.id,
-            description: port.pipe((port) => `Allow ${clientId} on port: ${port}`),
-            ipProtocol: "tcp",
-            referencedSecurityGroupId: clientSecurityGroupId,
-            fromPort: port,
-            toPort: port
-          });
-        }
-      };
-      allowClient("lambda", ctx.shared.get("vpc", "security-group-id"));
-      ctx.onReady(() => {
-        if (ctx.shared.has("job", "security-group-id")) {
-          allowClient("job", ctx.shared.get("job", "security-group-id"));
-        }
-        for (const instance of ctx.shared.list("instance", "security-group-id")) {
-          allowClient(instance.name, instance.id);
-        }
+      new aws.vpc.SecurityGroupIngressRule(group, "slave-rule-ip-v4", {
+        securityGroupId: securityGroup.id,
+        description: slavePort.pipe((port) => `Allow ipv4 on port: ${port}`),
+        ipProtocol: "tcp",
+        cidrIpv4: "0.0.0.0/0",
+        fromPort: slavePort,
+        toPort: slavePort
+      });
+      new aws.vpc.SecurityGroupIngressRule(group, "slave-rule-ip-v6", {
+        securityGroupId: securityGroup.id,
+        description: slavePort.pipe((port) => `Allow ipv6 on port: ${port}`),
+        ipProtocol: "tcp",
+        cidrIpv6: "::/0",
+        fromPort: slavePort,
+        toPort: slavePort
       });
       const prefix = `CACHE_${constantCase(ctx.stack.name)}_${constantCase(id)}`;
       ctx.addEnv(`${prefix}_HOST`, masterHost);
@@ -163841,7 +163849,6 @@ exec /usr/app/program`
     cidrIpv4: "0.0.0.0/0",
     tags
   });
-  ctx.shared.add("instance", "security-group-id", name, { name, id: securityGroup.id });
   const clusterName = ctx.shared.get("instance", "cluster-name");
   const clusterArn = ctx.shared.get("instance", "cluster-arn");
   const service = new aws.ecs.Service(group, "service", {
@@ -165598,19 +165605,22 @@ var pubsubFeature = defineFeature({
         vpcId,
         description: `${name}-task`
       });
-      for (const [client, clientSecurityGroupId] of [
-        ["task", taskSecurityGroup.id],
-        ["lambda", ctx.shared.get("vpc", "security-group-id")]
-      ]) {
-        new aws.vpc.SecurityGroupIngressRule(group, `cache-rule-${client}`, {
-          securityGroupId: cacheSecurityGroup.id,
-          description: redisPort.pipe((port) => `Allow ${client} on port: ${port}`),
-          ipProtocol: "tcp",
-          referencedSecurityGroupId: clientSecurityGroupId,
-          fromPort: redisPort,
-          toPort: redisPort
-        });
-      }
+      new aws.vpc.SecurityGroupIngressRule(group, "cache-rule-ip-v4", {
+        securityGroupId: cacheSecurityGroup.id,
+        description: redisPort.pipe((port) => `Allow ipv4 on port: ${port}`),
+        ipProtocol: "tcp",
+        cidrIpv4: "0.0.0.0/0",
+        fromPort: redisPort,
+        toPort: redisPort
+      });
+      new aws.vpc.SecurityGroupIngressRule(group, "cache-rule-ip-v6", {
+        securityGroupId: cacheSecurityGroup.id,
+        description: redisPort.pipe((port) => `Allow ipv6 on port: ${port}`),
+        ipProtocol: "tcp",
+        cidrIpv6: "::/0",
+        fromPort: redisPort,
+        toPort: redisPort
+      });
       const channel = `pubsub:${id}`;
       const cloudfrontPrefixList = aws.ec2.getManagedPrefixList(group, "cloudfront-prefix-list", {
         name: "com.amazonaws.global.cloudfront.origin-facing"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awsless/cli",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "bugs": {
     "url": "https://github.com/awsless/awsless/issues"
   },