Add new output

main.tf

@@ -9,7 +9,7 @@ locals {
   source_code_hash           = var.source_code_hash != null ? var.source_code_hash : var.filename != null ? filebase64sha256(var.filename) : null
   tracing_config             = var.tracing_config_mode != null ? { create : true } : {}
   vpc_config                 = var.subnet_ids != null ? { create : true } : {}
-  security_group_ids         = length(var.security_group_ids) > 0 ? [var.security_group_ids] : [aws_security_group.default[0].id]
+  security_group_ids         = length(var.security_group_ids) > 0 ? var.security_group_ids : [aws_security_group.default[0].id]
 }
 
 data "aws_iam_policy_document" "default" {
@@ -87,7 +87,7 @@ resource "aws_security_group" "default" {
 }
 
 resource "aws_vpc_security_group_egress_rule" "default" {
-  for_each = var.subnet_ids != null && length(var.security_group_egress_rules) != 0 ? { for v in var.security_group_egress_rules : v.description => v } : {}
+  for_each = var.subnet_ids != null && length(var.security_group_ids) == 0 && length(var.security_group_egress_rules) != 0 ? { for v in var.security_group_egress_rules : v.description => v } : {}
 
   cidr_ipv4                    = each.value.cidr_ipv4
   cidr_ipv6                    = each.value.cidr_ipv6

outputs.tf

@@ -28,6 +28,11 @@ output "security_group_id" {
   description = "If the Lambda is deployed into a VPC this will output the genetered security group id (if no security groups are specified)"
 }
 
+output "security_group_ids" {
+  value       = local.security_group_ids
+  description = "List of all the security group ids associated with the Lambda"
+}
+
 output "version" {
   value       = aws_lambda_function.default.version
   description = "Latest published version of the Lambda function"