"“不是有效的CIDR块:无效的CIDR地址

Question

我有一个用地形定义的VPC：

//vpc.tf
resource "aws_vpc" "my_vpc" {
  cidr_block = "10.0.0.0/16"
}

我正试图创建一个安全组织：

// securityGroup.tf
resource "aws_security_group" "allow_tls" {
  name        = "allow_tls"
  description = "Allow TLS inbound traffic"
  vpc_id      = aws_vpc.my_vpc.id
  ingress {
    description      = "TLS from VPC"
    from_port        = 443
    to_port          = 443
    protocol         = "tcp"
    cidr_blocks      = [aws_vpc.my_vpc.cidr_block]
    ipv6_cidr_blocks = [aws_vpc.my_vpc.ipv6_cidr_block]
  }
  egress {
    from_port        = 0
    to_port          = 0
    protocol         = "-1"
    cidr_blocks      = ["0.0.0.0/0"]
    ipv6_cidr_blocks = ["::/0"]
  }
}

然而，当我运行terraform plan时，我得到了错误Error: "" is not a valid CIDR block: invalid CIDR address:

我原以为在我的vpc中定义的cidr_block可供securityGroup使用，但情况似乎并非如此。如何正确引用vpc中的cidr_block？

全错误输出：

│ Error: "" is not a valid CIDR block: invalid CIDR address: 
│ 
│   with module.shared.aws_security_group.allow_tls,
│   on modules/shared/securityGroup.tf line 1, in resource "aws_security_group" "allow_tls":
│    1: resource "aws_security_group" "allow_tls" {

Answer 1

您还没有为VPC配置任何IPV6地址。因此，您的安全组中的这一行应该删除：

ipv6_cidr_blocks = [aws_vpc.my_vpc.ipv6_cidr_block]