Allow PostgreSQL port for tunneling restricted to developer IP

2025-05-23 09:30:55 -05:00
parent 99d26a8f53
commit f11d533fac
1 changed files with 7 additions and 0 deletions
--- a/infrastructure/stack.py
+++ b/infrastructure/stack.py
@@ -70,6 +70,13 @@ class IptvUpdaterStack(Stack):
            "Allow SSH traffic"
        )

+        # Allow PostgreSQL port for tunneling restricted to developer IP
+        security_group.add_ingress_rule(
+            ec2.Peer.ipv4("47.189.88.48/32"),  # Developer IP
+            ec2.Port.tcp(5432),
+            "Allow PostgreSQL traffic for tunneling"
+        )
+
        # Key pair for IPTV Updater instance
        key_pair = ec2.KeyPair(
            self,