only allow ami's from CentOS.org

fpco · Feb 27, 2020 · a39ce25 · a39ce25
1 parent 9548da5
commit a39ce25
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/modules/ami-centos/main.tf b/modules/ami-centos/main.tf
@@ -22,6 +22,15 @@ data "aws_ami" "centos" {
     values = ["x86_64"]
   }
 
+  # this filter is here to guarantee that ami's come from the official CentOS.org
+  filter {
+    name   = "product-code"
+    values = [
+      "aw0evgkw8e5c1q413zgy5pjce", # Official `CentOS 7 (x86_64) - with Updates HVM` product id
+      "6x5jmcajty9edm3f211pqjfn2"  # Official `CentOS 6 (x86_64) - with Updates HVM` product id
+    ]
+  }
+
   owners = ["679593333241"]
 
   name_regex = "^CentOS Linux ${var.release} x86_64 HVM EBS ENA"