From 00c96fc400d9281dc936fe3697658aa612f08644 Mon Sep 17 00:00:00 2001 From: Mikhail Ushanov Date: Mon, 30 Oct 2017 02:13:49 +0300 Subject: [PATCH] aws: use IpPermissions for authorizing temporary security group Signed-off-by: Mikhail Ushanov --- builder/amazon/common/step_security_group.go | 18 +++++++++++++----- 1 file changed, 13 insertions(+), 5 deletions(-) diff --git a/builder/amazon/common/step_security_group.go b/builder/amazon/common/step_security_group.go index 4a86782be..78e3dab51 100644 --- a/builder/amazon/common/step_security_group.go +++ b/builder/amazon/common/step_security_group.go @@ -92,11 +92,19 @@ func (s *StepSecurityGroup) Run(_ context.Context, state multistep.StateBag) mul // Authorize the SSH access for the security group groupRules := &ec2.AuthorizeSecurityGroupIngressInput{ - GroupId: groupResp.GroupId, - IpProtocol: aws.String("tcp"), - FromPort: aws.Int64(int64(port)), - ToPort: aws.Int64(int64(port)), - CidrIp: aws.String(s.TemporarySGSourceCidr), + GroupId: groupResp.GroupId, + IpPermissions: []*ec2.IpPermission{ + { + FromPort: aws.Int64(int64(port)), + ToPort: aws.Int64(int64(port)), + IpRanges: []*ec2.IpRange{ + { + CidrIp: aws.String(s.TemporarySGSourceCidr), + }, + }, + IpProtocol: aws.String("tcp"), + }, + }, } ui.Say(fmt.Sprintf(