resource "aws_security_group" "sg-0d61774a3891274cf" {
  description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads."
  egress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = ""
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = ""
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.11.114.84/32",
      ]
      description      = "aomad2-aomapgbouncer01"
      from_port        = 6432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 6432
    },
  ]
  ingress = [
    {
      cidr_blocks      = []
      description      = ""
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = true
      to_port          = 65535
    },
    {
      cidr_blocks      = []
      description      = ""
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = true
      to_port          = 65535
    },
    {
      cidr_blocks      = []
      description      = ""
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "-1"
      security_groups  = []
      self             = true
      to_port          = 0
    },
  ]
  name = "eks-cluster-sg-amp-dev-da-542992734"
  tags = {
    "kubernetes.io/cluster/amp-dev-da" = "owned"
    "Environment"                      = "Dev"
    "Name"                             = "eks-cluster-sg-amp-dev-da-542992734"
    "CLOPS_FW"                         = "NO"
    "Project-Name"                     = "Asset_Service"
    "Project-Code"                     = "AMP"
    "Owner"                            = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-0d2678027bb8bf5ee" {
  description = "AMP-DIGARCH-D-ASPERA-SG"
  egress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = ""
      from_port        = 33001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 33001
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "AsperaNoded"
      from_port        = 9092
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 9092
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "Arvato-K8S"
      from_port        = 40001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 40001
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = ""
      from_port        = 33001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 33001
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTP"
      from_port        = 80
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 80
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTPS"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks      = ["10.12.246.64/26", "10.12.237.160/27"]
      description      = "SMTPS"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
    {
      cidr_blocks      = ["0.0.0.0/0"]
      description      = "NTP-UDP"
      from_port        = 123
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 123
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 33001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 33001
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 33001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 33001
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 40001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 40001
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 40001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 40001
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 9092
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 9092
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 9092
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 9092
    },
    {
      cidr_blocks = [
        "10.11.176.219/32",
      ]
      description      = "cloudopsff-bastion02"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.11.186.192/28",
      ]
      description      = "ampaasp2-aspconsole01"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.250.2.64/27",
        "10.12.246.64/27",
      ]
      description      = "TOWER-BASTION"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks      = []
      description      = "From Exporter"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups = [
        "sg-045ac3f544042885c",
      ]
      self    = false
      to_port = 65535
    },
    {
      cidr_blocks      = []
      description      = "From Exporter"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups = [
        "sg-045ac3f544042885c",
      ]
      self    = false
      to_port = 65535
    },
  ]
  name = "AMP-DIGARCH-D-ASPERA-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Patch Group"   = "General"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-ASPERA-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-0c34cfa65dee099a4" {
  description = "AMP-DIGARCH-D-RDSPROXY-SG"
  egress = [
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.11.176.192/27",
      ]
      description      = "Shared-FF"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.0.0.0/8",
      ]
      description      = "SME-VPN"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.12.246.75/32",
      ]
      description      = "clshrd-bastion01"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.250.2.30/32",
      ]
      description      = "clshrd-bastion03"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks      = []
      description      = ""
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups = [
        "sg-09e27d299f7cf621a",
      ]
      self    = false
      to_port = 5432
    },
  ]
  name = "AMP-DIGARCH-D-RDSPROXY-SG"
  tags = {
    "Environment"  = "Dev"
    "Name"         = "AMP-DIGARCH-D-RDSPROXY-SG"
    "CLOPS_FW"     = "NO"
    "Project-Name" = "Asset_Service"
    "Project-Code" = "AMP"
    "Owner"        = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-0c09d8c49d6fd0350" {
  description = "AMP-DIGARCH-D-TRANSFEROR-SG"
  egress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTP"
      from_port        = 80
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 80
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTPS"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks      = ["10.12.246.64/26", "10.12.237.160/27"]
      description      = "SMTPS"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
    {
      cidr_blocks      = ["0.0.0.0/0"]
      description      = "NTP-UDP"
      from_port        = 123
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 123
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.12.197.215/32",
      ]
      description      = "AMP-D-BASTION"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.11.176.128/25",
      ]
      description      = "EU-BASTION"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.12.246.64/27",
      ]
      description      = "TOWER-BASTION"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.12.246.75/32",
      ]
      description      = "clshrd-bastion01"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.250.2.64/27",
      ]
      description      = "AnsibleTower"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
  ]
  name = "AMP-DIGARCH-D-TRANSFEROR-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Patch Group"   = "General"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-TRANSFEROR-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-01df690a967234131" {
  description = "default VPC security group"
  egress      = []
  ingress     = []
  name        = "default"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Environment"   = "Dev"
    "Name"          = "default"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-045ac3f544042885c" {
  description = "AMP-DIGARCH-D-EXPORTER-SG"
  egress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTP"
      from_port        = 80
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 80
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTPS"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks      = ["10.12.246.64/26", "10.12.237.160/27"]
      description      = "SMTPS"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
    {
      cidr_blocks      = ["0.0.0.0/0"]
      description      = "NTP-UDP"
      from_port        = 123
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 123
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
        "10.0.0.0/8",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
        "10.0.0.0/8",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.12.197.215/32",
      ]
      description      = "AMP-D-BASTION"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.11.176.128/25",
      ]
      description      = "EU-BASTION"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.12.197.228/32",
      ]
      description      = "ampd-app01"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.12.246.64/27",
      ]
      description      = "TOWER-BASTION"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.250.2.64/27",
      ]
      description      = "AnsibleTower"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
  ]
  name = "AMP-DIGARCH-D-EXPORTER-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Patch Group"   = "General"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-EXPORTER-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-078d3e07adf8fb08a" {
  description = "Security Group for amp-dev-da"
  egress = [
    {
      cidr_blocks = [
        "10.250.26.128/27",
      ]
      description      = "VPC-CIDR-2"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.26.128/27",
      ]
      description      = "VPC-CIDR-2"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "VPC-CIDR-1"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "VPC-CIDR-1"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR-3"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR-3"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.11.114.84/32",
      ]
      description      = "aomad2-aomapgbouncer01"
      from_port        = 6432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 6432
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.12.246.0/24",
      ]
      description      = "API Server access from eks mngr"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "10.0.0.0/8",
      ]
      description      = "Access from SME Intranet"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "10.12.246.105/32",
      ]
      description      = "clshrd-jenkinsmaster01"
      from_port        = 8080
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 8080
    },
    {
      cidr_blocks = [
        "10.250.2.0/24",
      ]
      description      = "TowerVPC"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.2.0/24",
      ]
      description      = "TowerVPC"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  name = "amp-dev-da-ControlPlane-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Environment"   = "Dev"
    "Name"          = "amp-dev-da-ControlPlane-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-09e27d299f7cf621a" {
  description = "AMP-DIGARCH-D-DIGARCH-SG"
  egress = [
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.11.176.200/32",
      ]
      description      = "From cloudopsff-dbmonitor01"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR-DEV"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.12.246.64/27",
        "10.11.176.192/27",
      ]
      description      = "SSH from clshrd-bastion01"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.250.2.64/27",
      ]
      description      = "SSH from clshrd-tower01"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.250.4.100/32",
      ]
      description      = "From pgbouncer only"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks      = []
      description      = "AMP-DIGARCH-D-RDSPROXY-SG"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups = [
        "sg-0c34cfa65dee099a4",
      ]
      self    = false
      to_port = 5432
    },
    {
      cidr_blocks = [
        "10.249.1.112/28",
        "10.12.208.64/27",
      ]
      description      = "dev vpc"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
  ]
  name = "AMP-DIGARCH-D-DIGARCH-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-DIGARCH-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-0ab0345d78d9cccac" {
  description = "AMP-DIGARCH-D-GSIRT-SG"
  egress = [
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "GSIRT TCP-8089"
      from_port        = 8089
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 8089
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "GSIRT TCP-9998"
      from_port        = 9998
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 9998
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.12.246.64/27",
      ]
      description      = "SSH from clshrd-bastion01"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.250.2.64/27",
      ]
      description      = "SSH from clshrd-tower01"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "GSIRT TCP-8089"
      from_port        = 8089
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 8089
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "GSIRT TCP-9998"
      from_port        = 9998
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 9998
    },
  ]
  name = "AMP-DIGARCH-D-GSIRT-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-GSIRT-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-06292914e682e38f6" {
  description = "Security Group for EFS voulme amp-d2"
  egress = [
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.12.246.64/27",
      ]
      description      = "SSH from clshrd-bastion01"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.0.0.0/8",
      ]
      description      = "From AOMA-D EKS"
      from_port        = 2049
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 2049
    },
    {
      cidr_blocks = [
        "10.250.2.64/27",
      ]
      description      = "SSH from clshrd-tower01"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "EFS access from processor app"
      from_port        = 2049
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 2049
    },
  ]
  name = "amp-d2-EFS-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Environment"   = "Dev"
    "Name"          = "amp-d2-EFS-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "sg-0001b41f1ff206a5d" {
  description = "AMP-DIGARCH-D-SMTP-SG"
  egress = [
    {
      cidr_blocks = [
        "10.250.26.128/27",
      ]
      description      = "VPC-CIDR-2"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.26.128/27",
      ]
      description      = "VPC-CIDR-2"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "VPC-CIDR-1"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "VPC-CIDR-1"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR-3"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR-3"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.250.26.128/27",
      ]
      description      = "VPC-CIDR-2"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
      ]
      description      = "VPC-CIDR-1"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
    {
      cidr_blocks = [
        "10.250.6.0/24",
      ]
      description      = "VPC-CIDR-3"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
  ]
  name = "AMP-DIGARCH-D-SMTP-SG"
  tags = {
    "Environment"  = "Dev"
    "Name"         = "AMP-DIGARCH-D-SMTP-SG"
    "CLOPS_FW"     = "NO"
    "Project-Name" = "Asset_Service"
    "Project-Code" = "AMP"
    "Owner"        = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "amp-dev-da-eks-Worker-node-SG" {
  description = "SG rule for amp-dev-da-eks-Worker-node"
  egress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "DNS-TCP"
      from_port        = 53
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 53
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTPS"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks      = ["0.0.0.0/0"]
      description      = "NTP-UDP"
      from_port        = 123
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 123
    },
    {
      cidr_blocks      = ["0.0.0.0/0"]
      description      = "NTP-UDP"
      from_port        = 323
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 323
    },
    {
      cidr_blocks = [
        "10.11.104.229/32",
      ]
      description      = "aomaresolver-stage.smecloudops.com"
      from_port        = 6432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 6432
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "DNS-UDP"
      from_port        = 53
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 53
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTP"
      from_port        = 80
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 80
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "SMTPS"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.250.11.0/26",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.250.11.0/26",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.1.192/26",
        "10.250.203.0/26",
      ]
      description      = "AMP-DIGARCH-P-VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.1.192/26",
        "10.250.203.0/26",
      ]
      description      = "AMP-DIGARCH-P-VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.12.237.0/24",
        "10.12.246.0/25",
        "10.250.2.0/24",
        "10.250.2.64/27",
      ]
      description      = "TowerVPCcidr"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.12.237.0/24",
        "10.12.246.0/25",
        "10.250.2.0/24",
        "10.250.2.64/27",
      ]
      description      = "TowerVPCcidr"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.12.208.64/27",
        "10.249.1.112/28",
        "10.0.0.0/8",
      ]
      description      = "dev vpc"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.0.0.0/8",
      ]
      description      = "VPC-CIDR"
      from_port        = 6432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 6432
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "Aspera-Noded"
      from_port        = 9092
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 9092
    },
    {
      cidr_blocks = [
        "10.250.11.0/26",
        "10.249.3.128/28",
      ]
      description      = "stage vpc"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
    {
      cidr_blocks = [
        "10.250.11.32/28",
        "10.250.11.48/28",
      ]
      description      = "stage RDS"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.11.176.219/32",
      ]
      description      = "cloudopsff-bastion02"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
    {
      cidr_blocks = [
        "10.0.0.0/8",
      ]
      description      = "VPC-CIDR"
      from_port        = 6432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 6432
    },
    {
      cidr_blocks = [
        "10.0.0.0/8",
      ]
      description      = "SME Intranet access"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "10.11.184.128/25",
      ]
      description      = "VPC-CIDR-1"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.11.184.128/25",
      ]
      description      = "VPC-CIDR-1"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.12.237.0/24",
        "10.12.246.0/25",
        "10.250.2.0/24",
        "10.250.2.64/27",
      ]
      description      = "TowerVPCcidr"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.12.237.0/24",
        "10.12.246.0/25",
        "10.250.2.0/24",
        "10.250.2.64/27",
      ]
      description      = "TowerVPCcidr"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.6.0/24",
        "10.250.26.128/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.6.0/24",
        "10.250.26.128/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },

    {
      cidr_blocks      = []
      description      = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups = [
        "sg-0d61774a3891274cf",
      ]
      self    = false
      to_port = 443
    },
    {
      cidr_blocks      = []
      description      = "Allow worker Kubelets and pods to receive communication from the cluster control plane"
      from_port        = 1025
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups = [
        "sg-078d3e07adf8fb08a",
      ]
      self    = false
      to_port = 65535
    },
    {
      cidr_blocks      = []
      description      = "Allow amp-da-openobserve-int-alb to communicate with worker nodes"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups = [
        "sg-0a203d9b3b652fd7c",
      ]
      self    = false
      to_port = 65535
    },
    {
      cidr_blocks = [
        "10.250.11.0/26",
        "10.249.3.128/28",
      ]
      description      = "stage vpc"
      from_port        = 5432
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 5432
    },
  ]
  name = "amp-dev-da-eks-Worker-node-SG"
  tags = {
    "Business-Unit"          = "AMP-Digital-Archive"
    "karpenter.sh/discovery" = "amp-dev-da"
    "Environment"            = "Dev"
    "Name"                   = "amp-dev-da-eks-Worker-node-SG"
    "CLOPS_FW"               = "NO"
    "Project-Name"           = "Asset_Service"
    "Project-Code"           = "AMP"
    "Owner"                  = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "AMP-DIGARCH-D-INT-ALB-SG" {
  description = "SG rule for AMP-DIGARCH-D-INT-ALB-SG"
  egress = [
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.12.208.64/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.12.208.64/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTPS"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTP"
      from_port        = 80
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 80
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.0.0.0/8",
        "162.49.0.0/16",
        "192.168.0.0/16",
      ]
      description      = "Aspera Port for Arvato"
      from_port        = 40001
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 40001
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.12.208.64/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.12.208.64/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "162.49.0.0/16",
        "10.0.0.0/8",
        "192.168.0.0/16"
      ]
      description      = "VPN Access"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    }
  ]
  name = "AMP-DIGARCH-D-INT-ALB-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-INT-ALB-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "AMP-DIGARCH-D-ES-SG" {
  description = "AMP-DIGARCH-D-ES-SG"
  egress = [

    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
        "10.12.208.64/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
        "10.12.208.64/27",
      ]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "10.0.0.0/8",
        "162.49.0.0/16",
        "192.168.10.0/23",
        "192.168.12.0/24",
        "192.168.155.0/24",
        "192.168.227.0/24",
      ]
      description      = "sme-vpn"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "10.250.4.64/26",
        "10.250.26.128/27",
        "10.250.6.0/24",
        "10.249.1.112/28",
        "10.12.208.64/27",
      ]
      description      = "vpc cidrs"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
  ]
  name = "AMP-DIGARCH-D-ES-SG"
  tags = {
    "Business-Unit" = "AMP-Digital-Archive"
    "Patch Group"   = "General"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-ES-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"

}

resource "aws_security_group" "AMP-DIGARCH-D-TUSD-SG" {
  description = "AMP-DIGARCH-D-TUSD-SG"
  egress = [
    {
      cidr_blocks      = ["0.0.0.0/0", ]
      description      = "From the World"
      from_port        = 8080
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 8080
    },
    {
      cidr_blocks      = ["0.0.0.0/0", ]
      description      = "From the World"
      from_port        = 8080
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 8080
    },
    {
      cidr_blocks      = ["0.0.0.0/0"]
      description      = "NTP-UDP"
      from_port        = 123
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 123
    },
    {
      cidr_blocks      = ["0.0.0.0/0"]
      description      = "NTP-UDP"
      from_port        = 323
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 323
    },
    {
      cidr_blocks      = ["0.0.0.0/0", ]
      description      = "HTTP"
      from_port        = 80
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 80
    },
    {
      cidr_blocks      = ["0.0.0.0/0", ]
      description      = "HTTPS"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks      = ["10.12.246.64/26", "10.12.237.160/27"]
      description      = "CLOPS-SMTP-EP"
      from_port        = 587
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 587
    },
    {
      cidr_blocks      = ["10.250.4.64/26", "10.250.26.128/27", "10.250.6.0/24", "10.12.208.64/27"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks      = ["10.250.4.64/26", "10.250.26.128/27", "10.250.6.0/24", "10.12.208.64/27"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
  ]
  ingress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 8080
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 8080
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "HTTPS-TUSD"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "From the World"
      from_port        = 8080
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 8080
    },
    {
      cidr_blocks      = ["10.250.4.64/26", "10.250.26.128/27", "10.250.6.0/24", "10.12.208.64/27"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks      = ["10.11.176.219/32", "10.12.246.64/27", "10.250.2.64/27"]
      description      = "CloudOPS Bastions"
      from_port        = 22
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 22
    },
  ]
  name = "AMP-DIGARCH-D-TUSD-SG"
  tags = {
    "Business-unit" = "SME-AMP"
    "Patch Group"   = "General"
    "Environment"   = "Dev"
    "Name"          = "AMP-DIGARCH-D-TUSD-SG"
    "CLOPS_FW"      = "NO"
    "Project-Name"  = "Asset_Service"
    "Project-Code"  = "AMP"
    "Owner"         = "Nathaniel Lovett"
  }
  vpc_id = "vpc-09c83633eb7b315a2"
}
