[ec2] allow_to for IPv6 has no effect on connections

[gergnz]

Unable to allow all outbound/egress traffic for IPv6 on a connection class.

Reproduction Steps

asg = asg.AutoScalingGroup(self, "asg",
                vpc=vpc,
                instance_type=ec2.InstanceType('t3a.nano'),            
                machine_image=ec2.MachineImage.latest_amazon_linux(generation=ec2.AmazonLinuxGeneration('AMAZON_LINUX_2')))

asg.connections.allow_to(ec2.Peer.any_ipv6(),ec2.Port.all_traffic())

Error Log

No error is produced.

Environment

• **CLI Version: 1.51.0 (build 8c2d53c)
• **Framework Version: aws-cdk.aws-ec2 1.51.0
• **Node.js Version: v12.8.0
• **OS : MacOS 10.15.5 (19F101)
• **Language (Version): Python 3.7.7

Other

Expected Result:

        "SecurityGroupEgress": [
          {
            "CidrIp": "0.0.0.0/0",
            "Description": "Allow all outbound traffic by default",
            "IpProtocol": "-1"
          },
          {
            "CidrIp": "::/0",
            "IpProtocol": "-1"
          }
        ],

Actual Result:

        "SecurityGroupEgress": [
          {
            "CidrIp": "0.0.0.0/0",
            "Description": "Allow all outbound traffic by default",
            "IpProtocol": "-1"
          }
        ],

---

This is 🐛 Bug Report

[NetaNir]

The SecurityGroupEgress resource is created by the configuration set on the AutoScalingGroup default SecurityGroup, which is created when no SecurityGroup is provided to the AutoScalingGroup constructor. By default, all IPV4 traffic is allowed (we have an issue #7094 to change the default behavior to allow IPV6 & IPV4 by default). You can set custom rules by providing a SecurityGroup to the AutoScalingGroup:

const securityGroup = new ec2.SecurityGroup(stack, 'Resource-Security-Group', { vpc,
  allowAllOutbound: false
})
securityGroup.addEgressRule(Peer.anyIpv6(), Port.allTraffic())

new autoscaling.AutoScalingGroup(this, 'ASG', {
  vpc,
  instanceType: ec2.InstanceType.of(ec2.InstanceClass.BURSTABLE2, ec2.InstanceSize.MICRO),
  machineImage: new ec2.AmazonLinuxImage(),
  securityGroup,
});

[NetaNir]

Im closing this as duplicate of #7094 as it will prevent the need to actually add the "allow traffic from Ipv6"