Allow small and medium CI runner fleets to access EFS (#2030)

Co-authored-by: mattgodbolt-molty <mattgodbolt-molty@users.noreply.github.com>

Author: mattgodbolt-molty

terraform/security.tf

@@ -733,6 +733,8 @@ resource "aws_security_group_rule" "efs_inbound" {
     "CI-x64"             = data.aws_security_group.linux_x64.id
     "CI-arm64"           = data.aws_security_group.linux_arm64.id
     "CI-lin-builder-x64" = data.aws_security_group.linux_x64_builder.id
+    "CI-x64-small"       = data.aws_security_group.linux_x64_small.id
+    "CI-x64-medium"      = data.aws_security_group.linux_x64_medium.id
   }
   security_group_id        = aws_security_group.efs.id
   type                     = "ingress"
@@ -844,6 +846,20 @@ data "aws_security_group" "linux_x64_builder" {
   }
 }
 
+data "aws_security_group" "linux_x64_small" {
+  filter {
+    name   = "tag:ghr:environment"
+    values = ["ce-ci-linux-x64-small"]
+  }
+}
+
+data "aws_security_group" "linux_x64_medium" {
+  filter {
+    name   = "tag:ghr:environment"
+    values = ["ce-ci-linux-x64-medium"]
+  }
+}
+
 resource "aws_security_group_rule" "WinBuilder_SmbLocally" {
   security_group_id        = aws_security_group.CompilerExplorer.id
   type                     = "ingress"