diff --git a/terraform/byo-vpc/byo-db/variables.tf b/terraform/byo-vpc/byo-db/variables.tf
index 1d6886b97d4d..51cc73149691 100644
--- a/terraform/byo-vpc/byo-db/variables.tf
+++ b/terraform/byo-vpc/byo-db/variables.tf
@@ -152,6 +152,12 @@ variable "fleet_config" {
       }), {
       subnets         = null
       security_groups = null
+      ingress_sources = {
+        cidr_blocks      = []
+        ipv6_cidr_blocks = []
+        security_groups  = []
+        prefix_list_ids  = []
+      }
     })
     autoscaling = optional(object({
       max_capacity                 = optional(number, 5)
diff --git a/terraform/byo-vpc/main.tf b/terraform/byo-vpc/main.tf
index 7debf4b37f6a..3f86bf1372eb 100644
--- a/terraform/byo-vpc/main.tf
+++ b/terraform/byo-vpc/main.tf
@@ -13,7 +13,9 @@ module "byo-db" {
       address = "${module.redis.endpoint}:${module.redis.port}"
     }
     networking = {
-      subnets = var.vpc_config.networking.subnets
+      subnets         = var.vpc_config.networking.subnets
+      security_groups = var.fleet_config.networking.security_groups
+      ingress_sources = var.fleet_config.networking.ingress_sources
     }
   })
   ecs_cluster      = var.ecs_cluster
diff --git a/terraform/byo-vpc/variables.tf b/terraform/byo-vpc/variables.tf
index a8c40d9a0855..3663cd5fd39a 100644
--- a/terraform/byo-vpc/variables.tf
+++ b/terraform/byo-vpc/variables.tf
@@ -245,6 +245,12 @@ variable "fleet_config" {
       }), {
       subnets         = null
       security_groups = null
+      ingress_sources = {
+        cidr_blocks      = []
+        ipv6_cidr_blocks = []
+        security_groups  = []
+        prefix_list_ids  = []
+      }
     })
     autoscaling = optional(object({
       max_capacity                 = optional(number, 5)
diff --git a/terraform/variables.tf b/terraform/variables.tf
index 6b2254f63336..3cfc0299656c 100644
--- a/terraform/variables.tf
+++ b/terraform/variables.tf
@@ -293,6 +293,12 @@ variable "fleet_config" {
       }), {
       subnets         = null
       security_groups = null
+      ingress_sources = {
+        cidr_blocks      = []
+        ipv6_cidr_blocks = []
+        security_groups  = []
+        prefix_list_ids  = []
+      }
     })
     autoscaling = optional(object({
       max_capacity                 = optional(number, 5)