Change security group to use VPC cidr range instead of 0/0.

vsrohit · Jul 24, 2018 · e37559e · e37559e
1 parent 3c9d568
commit e37559e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/module-2/cfn/core.yml b/module-2/cfn/core.yml
@@ -205,7 +205,7 @@ Resources:
       VpcId: !Ref 'VPC'
       SecurityGroupIngress:
           # Allow access to NLB from anywhere on the internet
-          - CidrIp: 0.0.0.0/0
+          - CidrIp: !FindInMap ['SubnetConfig', 'VPC', 'CIDR']
             IpProtocol: -1
 
   # This is an IAM role which authorizes ECS to manage resources on your