create sec grp

main.tf

@@ -14,11 +14,54 @@ data "aws_ami" "app_ami" {
   owners = ["979382823631"] # Bitnami
 }
 
-resource "aws_instance" "web" {
+data "aws_vpc" "default" {
+  default = true
+}
+
+resource "aws_instance" "blog" {
   ami           = data.aws_ami.app_ami.id
   instance_type = "t3.nano"
 
+vpc_security_group_ids = [aws_security_group.blog.id]
+
   tags = {
     Name = "HelloWorld"
   }
 }
+
+resource "aws_security_group" "blog" {
+  name       = "blog"
+  descrition = "Alow http and htts in. Aloowi everything out"
+
+  vpc_id = data.aws_vcp.default.id
+}
+
+resource "aws_security_group_rule" "blog_http_in" {
+  type      = "ingress"
+  from_port = 80
+  to_port   = 80
+  protocol    = "tcp"
+  cidr_blocks = [0.0.0.0./0]
+
+  security_group_id = aws_security_group.blog.id
+}
+
+resource "aws_security_group_rule" "blog_https_in" {
+  type      = "ingress"
+  from_port = 443
+  to_port   = 443
+  protocol    = "tcp"
+  cidr_blocks = [0.0.0.0./0]
+
+  security_group_id = aws_security_group.blog.id
+}
+
+resource "aws_security_group_rule" "blog_everything_out" {
+  type      = "egress"
+  from_port = 0
+  to_port   = 0
+  protocol    = "-1"
+  cidr_blocks = [0.0.0.0./0]
+
+  security_group_id = aws_security_group.blog.id
+}