Investigate extra security group sg-05b3896b545cd46ac on Auto Drive EC2 and RDS instances

[jim-counter]

Context

From PR #520 (chore/migrate-auto-drive-infra), the terraform plan removes an extra security group (sg-05b3896b545cd46ac) from the backend/gateway EC2 instances and a similar extra SG (sg-0adc6bffc0974b29d) from the RDS instance. These SGs are not managed by the Auto Drive terraform config.

The primary security group auto_drive_sg (sg-0f007648c2cada91f) already allows all outbound traffic, so these extra SGs are likely redundant.

Tasks

• Identify what sg-05b3896b545cd46ac is — check AWS console for its name, rules, and what created it
• Identify what sg-0adc6bffc0974b29d is (the extra RDS SG)
• Confirm the extra SGs are redundant (outbound 5432 is already covered by the all-outbound rule in auto_drive_sg)
• If redundant, no action needed — PR Migrate Auto Drive infra to latest Terraform structure & address drift #520 already removes them from the instances on apply
• If not redundant, add the necessary rules to auto_drive_sg or the RDS SG before applying PR Migrate Auto Drive infra to latest Terraform structure & address drift #520

Related

• PR Migrate Auto Drive infra to latest Terraform structure & address drift #520