aws / aws/aws-cdk

aws-ec2: Add Security Group allow all traffic to self

Open
#38,558 2 comments 1 reaction 0 assignees View on GitHub
@aws-cdk/aws-ec2 effort/medium feature-request p2
Dominant language
TypeScript
Stars
12.9k
Forks
4.6k
Avg merge
1d 19h
Merged PRs (30d)
74

Description

### Describe the feature

Create a new parameter for the `SecurityGroup` construct `allow_all_self=True` that creates a Security Group with an inbound and outbound rule for all traffic to self.

### Use Case

EFA Network Interfaces requires a Security Group that allows inbound/outbound traffic to self.
Adding this option will simplify how customers uses CDK to automate Security Group creation for EFA Network Interfaces.

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa-start.html#efa-start-security

### Proposed Solution

_No response_

### Other Information

_No response_

### Acknowledgements

- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change

### AWS CDK Library version (aws-cdk-lib)

Latest

### AWS CDK CLI version

Latest

### Environment details (OS name and version, etc.)

Any

Contributor guide

Open the contributing guide

Research direction

Start by locating the aws-ec2 SecurityGroup construct and its existing ingress and egress rule handling. Check the EFA security-group requirements in the linked AWS documentation, then add coverage showing that allow_all_self=True creates inbound and outbound all-traffic self rules; done means the option works without changing existing behavior.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, typescript
Domain
cloud, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.