{"action":"created","issue":{"url":"https://api.github.com/repos/terraform-aws-modules/terraform-aws-atlantis/issues/8","repository_url":"https://api.github.com/repos/terraform-aws-modules/terraform-aws-atlantis","labels_url":"https://api.github.com/repos/terraform-aws-modules/terraform-aws-atlantis/issues/8/labels{/name}","comments_url":"https://api.github.com/repos/terraform-aws-modules/terraform-aws-atlantis/issues/8/comments","events_url":"https://api.github.com/repos/terraform-aws-modules/terraform-aws-atlantis/issues/8/events","html_url":"https://github.com/terraform-aws-modules/terraform-aws-atlantis/issues/8","id":326735816,"number":8,"title":"Limit ALB SG ingress to GH only (via input variable)","user":{"login":"bsuv","id":474064,"avatar_url":"https://avatars3.githubusercontent.com/u/474064?v=4","gravatar_id":"","url":"https://api.github.com/users/bsuv","html_url":"https://github.com/bsuv","followers_url":"https://api.github.com/users/bsuv/followers","following_url":"https://api.github.com/users/bsuv/following{/other_user}","gists_url":"https://api.github.com/users/bsuv/gists{/gist_id}","starred_url":"https://api.github.com/users/bsuv/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bsuv/subscriptions","organizations_url":"https://api.github.com/users/bsuv/orgs","repos_url":"https://api.github.com/users/bsuv/repos","events_url":"https://api.github.com/users/bsuv/events{/privacy}","received_events_url":"https://api.github.com/users/bsuv/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-05-26T12:48:47Z","updated_at":"2018-05-26T13:04:49Z","closed_at":null,"author_association":"NONE","body":"https://github.com/terraform-aws-modules/terraform-aws-atlantis/blob/508eb0c3bb99a84dfe9fdbe57f1989be711f4197/main.tf#L47\r\n\r\nI found that opening Atlantis to the world is risky and inline with the _principle of least privilege_.\r\nSo I restricted it to the CIDR blocks that Github advertises as their own on https://api.github.com/meta\r\nin addition to perhaps the office network, bastion for instance.\r\n\r\nPS: I know Atlantis uses the `--repo-whitelist` but adding another layer of (network) security doesn't harm IMO...\r\n"},"comment":{"url":"https://api.github.com/repos/terraform-aws-modules/terraform-aws-atlantis/issues/comments/392260137","html_url":"https://github.com/terraform-aws-modules/terraform-aws-atlantis/issues/8#issuecomment-392260137","issue_url":"https://api.github.com/repos/terraform-aws-modules/terraform-aws-atlantis/issues/8","id":392260137,"user":{"login":"antonbabenko","id":393243,"avatar_url":"https://avatars3.githubusercontent.com/u/393243?v=4","gravatar_id":"","url":"https://api.github.com/users/antonbabenko","html_url":"https://github.com/antonbabenko","followers_url":"https://api.github.com/users/antonbabenko/followers","following_url":"https://api.github.com/users/antonbabenko/following{/other_user}","gists_url":"https://api.github.com/users/antonbabenko/gists{/gist_id}","starred_url":"https://api.github.com/users/antonbabenko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/antonbabenko/subscriptions","organizations_url":"https://api.github.com/users/antonbabenko/orgs","repos_url":"https://api.github.com/users/antonbabenko/repos","events_url":"https://api.github.com/users/antonbabenko/events{/privacy}","received_events_url":"https://api.github.com/users/antonbabenko/received_events","type":"User","site_admin":false},"created_at":"2018-05-26T13:04:49Z","updated_at":"2018-05-26T13:04:49Z","author_association":"MEMBER","body":"Agree, https://www.terraform.io/docs/providers/github/d/ip_ranges.html"}}
{"actor":{"display_login":"antonbabenko"}}