Add STS endpoint to ASG launch template

PRX · Oct 31, 2024 · 221c4b2 · 221c4b2
1 parent 834a968
commit 221c4b2
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/spire/templates/root.yml b/spire/templates/root.yml
@@ -414,6 +414,7 @@ Resources:
         SharedClickhouseClientSecurityGroupId: !GetAtt SharedClickhouseSecurityGroupStack.Outputs.ClientSecurityGroupId
         EcsLaunchEndpointsAccessSecurityGroupId: !GetAtt SharedVpcStack.Outputs.EcsLaunchEndpointsAccessSecurityGroupId
         KmsEndpointAccessSecurityGroupId: !GetAtt SharedVpcStack.Outputs.KmsEndpointAccessSecurityGroupId
+        StsEndpointAccessSecurityGroupId: !GetAtt SharedVpcStack.Outputs.StsEndpointAccessSecurityGroupId
         SharedRedisReplicationGroupEndpointAddress: !GetAtt SharedRedisStack.Outputs.ReplicationGroupEndpointAddress
         SharedRedisReplicationGroupEndpointPort: !GetAtt SharedRedisStack.Outputs.ReplicationGroupEndpointPort
       Tags:

diff --git a/spire/templates/shared-ecs/asg.yml b/spire/templates/shared-ecs/asg.yml
@@ -43,6 +43,7 @@ Parameters:
   SharedClickhouseClientSecurityGroupId: { Type: AWS::EC2::SecurityGroup::Id }
   EcsLaunchEndpointsAccessSecurityGroupId: { Type: AWS::EC2::SecurityGroup::Id }
   KmsEndpointAccessSecurityGroupId: { Type: AWS::EC2::SecurityGroup::Id }
+  StsEndpointAccessSecurityGroupId: { Type: AWS::EC2::SecurityGroup::Id }
   SharedRedisReplicationGroupEndpointAddress: { Type: String }
   SharedRedisReplicationGroupEndpointPort: { Type: String }
 
@@ -163,6 +164,7 @@ Resources:
               - !Ref SharedEcsAsgInstanceSecurityGroupId
               - !Ref EcsLaunchEndpointsAccessSecurityGroupId
               - !Ref KmsEndpointAccessSecurityGroupId
+              - !Ref StsEndpointAccessSecurityGroupId
               - !Ref SharedMysqlClientSecurityGroupId
               - !Ref SharedPostgresqlClientSecurityGroupId
               - !Ref SharedRedisClientSecurityGroupId