12.4 Minimal resource — security group lab (preferred small)

# main.tf — minimal SG example
resource "aws_security_group" "badge-api_lab" {
  name = "badge-api-lab-sg"
  description = "Lab SG for Instagram-style badge API learning"
  vpc_id = var.vpc_id # set via tfvars; use your real VPC id

  ingress {
    description = "SSH from my IP only — replace cidr"
    from_port = 22
    to_port = 22
    protocol = "tcp"
    cidr_blocks = [var.my_ip_cidr]
  }

  egress {
    from_port = 0
    to_port = 0
    protocol = "-1"
    cidr_blocks = ["0.0.0.0/0"]
  }

  tags = {
    Name = "badge-api-lab-sg"
    Project = "badge API"
    Purpose = "learning"
  }
}

# variables.tf
variable "aws_region" {
  type = string
  default = "ap-south-1"
}

variable "vpc_id" {
  type = string
  description = "Existing VPC ID from your account (do not invent networking here)"
}

variable "my_ip_cidr" {
  type = string
  description = "Your public IP as x.x.x.x/32 for lab SSH"
}

# outputs.tf
output "badge-api_lab_sg_id" {
  value = aws_security_group.badge-api_lab.id
}