variable "foo" {
default = "bar"
description = "bar"
}
resource "aws_instance" "db" {
security_groups = "${aws_security_group.firewall.*.id}"