From 5d2587eaea9d44e9410cf5f09c906921f60c3390 Mon Sep 17 00:00:00 2001
From: ChrisMcGowan <chris.mcgowan@gsa.gov>
Date: Wed, 4 Dec 2024 10:34:44 -0500
Subject: [PATCH] Adding in NAT GW IPs to SPF

---
 terraform/stacks/dns/validators.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/terraform/stacks/dns/validators.tf b/terraform/stacks/dns/validators.tf
index 830e32819..0674bd646 100644
--- a/terraform/stacks/dns/validators.tf
+++ b/terraform/stacks/dns/validators.tf
@@ -20,7 +20,7 @@ resource "aws_route53_record" "cloud_gov_cloud_gov_txt" {
   ttl     = 300
 
   records = [
-    "v=spf1 include:mail.zendesk.com include:_spf.google.com ~all",
+    "v=spf1 include:mail.zendesk.com include:_spf.google.com ip4:${data.terraform_remote_state.tooling.outputs.nat_egress_ip_az1} ip4:${data.terraform_remote_state.tooling.outputs.nat_egress_ip_az2} ~all",
     "google-site-verification=jxczK0Pz1ybEFx79BlXIfeX2Cc5vs2YQuqvLnTYF9Bw",
   ]
 }