Dashboard: Security Group refinement

[brifordwylie]

Okay, so the Python CDK script that deploys the SageWorks Dashboard is working fine. The issue for this ticket is that the Load Balancer gets a default security group which is too ‘liberal’ about incoming traffic. The script adds a custom security group that blocks everything except a whitelist of CIDRs.

We need to change the CDK script so that:

It really deletes the security group (the logic we have now, tries to delete it but obviously doesn’t)

Somehow pulls the default security group and modifies it

There’s several Github issue around exactly this issue:

• (aws-elasticloadbalancingv2): (network-load-balancer-supports-security-groups) · Issue #26735 · aws/aws-cdk
• Disable security group rule creation in load balancers when passing your own security group · Issue #3177 · aws/aws-cdk
• (ecs-patterns): pass in target group for NLB Service patterns · Issue #11969 · aws/aws-cdk