ec2_win_dc.tf

resource "aws_security_group" "win_dc" {
  name        = "win_dc"
  description = "Allow access in and out of win_dc"
  vpc_id      = var.vpc_id

  ingress {
    description = "Allow all in"
    from_port   = 0
    to_port     = 0
    protocol    = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }

  egress {
    description      = "Allow all out"
    from_port        = 0
    to_port          = 0
    protocol         = "-1"
    cidr_blocks      = ["0.0.0.0/0"]
    ipv6_cidr_blocks = ["::/0"]
  }

  tags = {
    Name = "win_dc"
  }
}

resource "aws_instance" "win_dc" {
  ami           = data.aws_ami.windows_server_core.image_id
  instance_type = "t3a.medium"
  subnet_id     = var.subnet_ad_corp_id

  key_name = var.key_pair
  # iam_instance_profile = var.instance_profile

  private_ip = "10.${var.team_number}.1.1"

  vpc_security_group_ids = [
    aws_security_group.win_dc.id
  ]

  tags = {
    Name      = "win_dc"
    service   = "win_dc"
    scheduled = "true"
  }
}