We have Terraform create some security groups within our VPC module. This allows us to set some servers to allow public network traffic while allowing private network servers to only communicate within the private network.
See the video, related code, and more here: https://cloudcasts.io/course/terraform/security-groups
