Database

1# RDS as heroku-to-aws emits: private, encrypted, scoped SG (Postgres plan -> RDS).
2
3resource "aws_db_instance" "postgres" {
4  identifier          = "${var.project_name}-postgres"
5  engine              = "postgres"
6  engine_version      = var.db_engine_version
7  instance_class      = var.db_instance_class
8  allocated_storage   = var.db_storage_gb
9  storage_encrypted   = true
10  publicly_accessible = false
11  db_subnet_group_name = aws_db_subnet_group.main.name
12  vpc_security_group_ids = [aws_security_group.db.id]
13  deletion_protection = true
14  skip_final_snapshot = false
15}
16
17resource "aws_security_group" "db" {
18  name   = "${var.project_name}-db"
19  vpc_id = aws_vpc.main.id
20
21  ingress {
22    from_port       = 5432
23    to_port         = 5432
24    protocol        = "tcp"
25    security_groups = [aws_security_group.eb_instances.id]
26  }
27}