Push s3 interface changes for private cluster test

sassoftware · Feb 28, 2024 · af304f5 · af304f5
1 parent b6b71a9
commit af304f5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/modules/aws_vpc/main.tf b/modules/aws_vpc/main.tf
@@ -54,6 +54,9 @@ resource "aws_vpc_endpoint" "private_endpoints" {
   vpc_endpoint_type   = each.value
   security_group_ids  = each.value == "Interface" ? [var.security_group_id] : null
   private_dns_enabled = each.value == "Interface" ? true : null
+  dns_options {
+    private_dns_only_for_inbound_resolver_endpoint = each.value == "Gateway" ? true : null
+  }
 
   tags = merge(
     {

diff --git a/modules/aws_vpc/variables.tf b/modules/aws_vpc/variables.tf
@@ -126,7 +126,7 @@ variable "vpc_private_endpoints" {
     "ec2"                  = "Interface",
     "ecr.api"              = "Interface",
     "ecr.dkr"              = "Interface",
-    "s3"                   = "Gateway",
+    "s3"                   = "Interface",
     "logs"                 = "Interface",
     "sts"                  = "Interface",
     "elasticloadbalancing" = "Interface",