## Module functionality
Module creates number of security groups with specific rules. Security groups are separated to two logical groups.

First group:
* creates empty security groups, one security group per entity (e.g. security group for alb, security group for ecs service, security group for aurora)
* creates generic rules with list of maps. Each list contains maps which allow access for other security groups. These list of maps are defined as local variables in main.tf because IDs of security groups used in them are generic.

Second group:
Creates two groups with specific access for IP addresses listed in module ip_whitelist and in variable projectgroup_whitelist. Usually this is remote access group which allows access on SSH and RDP ports, and debug group with allows access to databases ports and http/https.

If vpn_enabled is set to true, this module provides remote access to offices IP addresses for only to VPN server.
If alooma_proxy_enabled is set to true, creates additional SG for alooma proxy host and gives it access to Aurora