default "VPC Security Group"

[dcrockwell]

When an environment is created, there's an automatically generated Security Group with the description of "VPC Security Group" and a pseudo-random name.

It automatically opens up SSH to everything, so I'm wondering if there's a way to override this.

[dermot]

This isn't an eb_deploy issue. The cause is that Beanstalk by default creates
a Security Group that has SSH (22) open to the world (0.0.0.0/0). SSHSourceRestriction
can be used to limit SSH access to specific cidr's or a source Security Group
if using a bastion host. Here we are restricting to localhost. This value is
what will be used in the SecurityGroup created by Beanstalk.

    - namespace: aws:autoscaling:launchconfiguration
      option_name: SSHSourceRestriction
      value: tcp, 22, 22, 127.0.0.1/32 ```