chore: Add db access instance

Modules/EC2/main.tf

@@ -0,0 +1,29 @@
+data "aws_ami" "amazon_linux" {
+  most_recent = true
+  owners      = ["amazon"]
+
+  filter {
+    name   = "name"
+    values = ["amzn2-ami-hvm-*-x86_64-gp2"]
+  }
+}
+
+resource "aws_instance" "db_access_instance" {
+  ami                    = data.aws_ami.amazon_linux.id
+  instance_type          = "t2.micro"
+  subnet_id              = var.public_subnets[0]
+  vpc_security_group_ids = [var.sg_db_access_instance_id]
+
+  instance_market_options {
+    market_type = "spot"
+    spot_options {
+      spot_instance_type = "one-time"
+    }
+  }
+
+  associate_public_ip_address = true
+
+  tags = {
+    Name = "dummy-db-access-instance"
+  }
+}

Modules/EC2/variables.tf

@@ -0,0 +1,7 @@
+variable "public_subnets" {
+  type = list(string)
+}
+
+variable "sg_db_access_instance_id" {
+  type = string
+}

Modules/SecurityGroup/main.tf

@@ -94,7 +94,7 @@ resource "aws_security_group" "sg_mysql" {
     from_port       = 3306
     to_port         = 3306
     protocol        = "tcp"
-    security_groups = [aws_security_group.sg_ecs.id]
+    security_groups = [aws_security_group.sg_ecs.id, aws_security_group.sg_db_access_instance.id]
   }
 
   egress {
@@ -117,7 +117,7 @@ resource "aws_security_group" "sg_valkey" {
     from_port       = 6379
     to_port         = 6379
     protocol        = "tcp"
-    security_groups = [aws_security_group.sg_ecs.id]
+    security_groups = [aws_security_group.sg_ecs.id, aws_security_group.sg_db_access_instance.id]
   }
 
   egress {
@@ -140,7 +140,7 @@ resource "aws_security_group" "sg_mongodb" {
     from_port       = 27017
     to_port         = 27017
     protocol        = "tcp"
-    security_groups = [aws_security_group.sg_ecs.id]
+    security_groups = [aws_security_group.sg_ecs.id, aws_security_group.sg_db_access_instance.id]
   }
 
   egress {
@@ -154,3 +154,22 @@ resource "aws_security_group" "sg_mongodb" {
     Name = "dutymate-sg-mongodb"
   }
 }
+
+resource "aws_security_group" "sg_db_access_instance" {
+  name   = "dutymate-sg-db-access-instance"
+  vpc_id = var.vpc_id
+
+  ingress {
+    from_port   = 22
+    to_port     = 22
+    protocol    = "tcp"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+
+  egress {
+    from_port   = 0
+    to_port     = 0
+    protocol    = "-1"
+    cidr_blocks = ["0.0.0.0/0"]
+  }
+}

Modules/SecurityGroup/outputs.tf

@@ -2,6 +2,10 @@ output "sg_alb_id" {
   value = aws_security_group.sg_alb.id
 }
 
+output "sg_db_access_instance_id" {
+  value = aws_security_group.sg_db_access_instance.id
+}
+
 output "sg_ecs_id" {
   value = aws_security_group.sg_ecs.id
 }

main.tf

@@ -52,6 +52,12 @@ module "ecs" {
   sg_ecs_id                   = module.security_group.sg_ecs_id
 }
 
+module "ec2" {
+  source                   = "./Modules/EC2"
+  public_subnets           = module.networking.public_subnets
+  sg_db_access_instance_id = module.security_group.sg_db_access_instance_id
+}
+
 module "elasticache" {
   source         = "./Modules/ElastiCache"
   public_subnets = module.networking.public_subnets