Create cluster SG rules with aws_vpc_security_group_egress_rule and aws_vpc_security_group_ingress_rule

[sgorshkov85]

Is your request related to a new offering from AWS?

Is this functionality available in the AWS provider for Terraform? See CHANGELOG.md, too.

• No 🛑: please wait to file a request until the functionality is available in the AWS provider
• Yes ✅: please list the AWS provider version that introduced this functionality

Is your request related to a problem? Please describe.

Currently, the module utilizes the "aws_security_group_rule" resource. This resource doesn't support setting tags, which is particularly important for audits. It would be great to migrate.

Describe the solution you'd like.

Get rid of the usage aws_security_group_rule resources, use aws_vpc_security_group_egress_rule and aws_vpc_security_group_ingress_rule

[dferramosi]

Additionally, this is a nightmare to manage if you add multiple CIDRS, vs the new types, as called out in the first note in the docs

[andrei-don]

I will start working on this 🙂

[bryantbiggs]

@andrei-don we are not planning to make this change at this time.

the next breaking change might come a year from the prior #3412, and/or after the next major release of the AWS provider (i.e AWS provider version v7.0)

[andrei-don]

understood, was not aware of the release cycle, thank you for the clarification!