Describe the Feature

In order to flexibly use the bastion host to navigate inside the vpc
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#source_dest_check

Expected Behavior

Being able in the module setup to set it to false

module "ec2-bastion-server" {
  source        = "cloudposse/ec2-bastion-server/aws"
  ...
  source_dest_check = false
}

Use Case

A subnet router must be able to send and receive traffic when the source or destination is not itself. In the case I use the bastion as a subnet router.

Describe Ideal Solution

Add source_dest_check variable with true value default, and in aws_instance set

variable "source_dest_check" {
  type        = string
  description = "Controls if traffic is routed to the instance when the destination address does not match the instance. Used for NAT or VPNs."
  default     = true
}

resource "aws_instance" "default" {
  ...
  source_dest_check               = var.source_dest_check
  ...

Alternatives Considered

No response

Additional Context

No response