Allow github/github/etc access to /events but make atlantis UI available only from a vpn/internal-facing load-balancer

[mijdavis2]

Is your request related to a new offering from AWS?

Is this functionality available in the AWS provider for Terraform? See CHANGELOG.md, too.

• No 🛑: please wait to file a request until the functionality is avaialble in the AWS provider

Is your request related to a problem? Please describe.

Putting the Atlantis UI on the public internet by default isn't very secure.

Describe the solution you'd like.

Have an option to add a proxy so that the /events endpoint is available to github/gitlab/etc, but the UI is behind some kind of auth or uses an internal-facing alb instead.

Describe alternatives you've considered.

Not using this module or forking it.

Additional context

If this functionality already exists or there is a pattern, it would be great if it was documented.
Thank you so much for your time.

[parmouraly]

@mijdavis2 I believe you can already use an internal ALB. Just pass this to the module:

alb = {
   ...
   internal   = true
}

Implemented here
#99