aws-ec2: Add Security Group allow all traffic to self
- Dominant language
- TypeScript
- Stars
- 12.9k
- Forks
- 4.6k
- Avg merge
- 1d 19h
- Merged PRs (30d)
- 74
Description
### Describe the feature
Create a new parameter for the `SecurityGroup` construct `allow_all_self=True` that creates a Security Group with an inbound and outbound rule for all traffic to self.
### Use Case
EFA Network Interfaces requires a Security Group that allows inbound/outbound traffic to self.
Adding this option will simplify how customers uses CDK to automate Security Group creation for EFA Network Interfaces.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa-start.html#efa-start-security
### Proposed Solution
_No response_
### Other Information
_No response_
### Acknowledgements
- [ ] I may be able to implement this feature request
- [ ] This feature might incur a breaking change
### AWS CDK Library version (aws-cdk-lib)
Latest
### AWS CDK CLI version
Latest
### Environment details (OS name and version, etc.)
Any
Contributor guide
Research direction
Start by locating the aws-ec2 SecurityGroup construct and its existing ingress and egress rule handling. Check the EFA security-group requirements in the linked AWS documentation, then add coverage showing that allow_all_self=True creates inbound and outbound all-traffic self rules; done means the option works without changing existing behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, typescript
- Domain
- cloud, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100