resource "aws_security_group" "sg-0f5ced7a1b6862395" { description = "AMP-AAS-P2-GSIRT-SG" egress = [ { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.46.0/25", "10.11.186.128/25", "10.250.6.0/24", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.46.0/25", "10.11.186.128/25", "10.250.6.0/24", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "AMP-AAS-P2-GSIRT-SG" tags = { "Environment" = "Prod" "Name" = "AMP-AAS-P2-GSIRT-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "sg-0a000b63ba6679a38" { description = "AMP-AAS-P2-ASPCONSOLE-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "To The World for Aspera" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "To The World for Aspera" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "To The World for Aspera" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "To The World for Aspera" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "To The World for Aspera" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "To The World for Aspera" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "10.11.186.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "For SSH Access to all Aspera servers" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.237.160/27", "10.12.246.64/26", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.250.46.0/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.46.0/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "TESTING" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "AMP-AAS-P2-INT-LB-SG" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0e90606cd43204739", ] self = false to_port = 443 }, ] name = "AMP-AAS-P2-ASPCONSOLE-SG" tags = { "Environment" = "Prod" "Name" = "AMP-AAS-P2-ASPCONSOLE-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "sg-0a13e6501f136f5a3" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Environment" = "Prod" "Name" = "default" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "sg-0e90606cd43204739" { description = "AMP-AAS-P2-INT_LB-SG" egress = [ { cidr_blocks = [ "10.250.46.0/25", "10.11.186.128/25", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.46.0/25", "10.11.186.128/25", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", "10.11.0.0/16", "10.12.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "AMP-AAS-P2-INT_LB-SG" tags = { "Environment" = "Prod" "Name" = "AMP-AAS-P2-INT_LB-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "AMPP-EKS-Cluster-SG" { description = "Security Group for AMPP-EKS-Cluster-SG" egress = [ { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24" ] description = "VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24" ] description = "VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.192/27", "10.11.106.192/27", "10.11.106.224/27", ] description = "aomap-ameba-msk-01" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "10.12.246.0/24", "10.11.114.32/27", "10.250.37.0/26" ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [] description = "API Server access from shared-orcd-atlantis-private-subnet-prefix-list" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = ["pl-00b0c74f9eabf51c3"] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ aws_security_group.AMPP-EKS-Worker-SG.id ] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.192/27", "10.11.106.192/27", "10.11.106.224/27", ] description = "aomap-ameba-msk-01" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "AMPP-EKS-Cluster-SG" tags = { "Environment" = "Prod" "Name" = "AMPP-EKS-Cluster-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "AMPP-EKS-Worker-SG" { description = "SG rule for AMPP-EKS-Worker-SG worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "10.11.180.128/25", "10.11.106.224/27", "10.11.106.192/27", "10.11.114.192/27", ] description = "GDS-P-MSK-Access" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "CLOUDOPS-13061" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "CLOUDOPS-13061" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "10.11.106.128/25", ] description = "AOMA-P-MSK-Access" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.22.128/25", "172.34.31.128/25", "172.34.8.192/26", "172.34.12.144/28", "10.0.0.0/8", ] description = "amp-assets-rds-prod" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.198/32", ] description = "AOMA-P-MSK-Access" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.237.0/24", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.237.0/24", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "TowerVPCcidr2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "TowerVPCcidr2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPCcidr1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPCcidr1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.22.176/28", ] description = "sme-AAS-P-APP-1B" from_port = 1024 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.106.192/27", ] description = "aomap1-aomapgbouncer01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.184.96/27", "10.11.184.64/27", "10.250.46.32/27", "10.250.46.0/27", ] description = "CLOUDOPS-13288" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 } ] ingress = [ { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24", "10.250.46.0/25" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24", "10.250.46.0/25" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.237.0/24", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.237.0/24", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "TowerVPCcidr2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "TowerVPCcidr2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 18080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0938863d9724ac184"] self = false to_port = 18080 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0c20aa2ab4e0a3524"] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0c20aa2ab4e0a3524"] self = false to_port = 65535 } ] name = "AMPP-EKS-Worker-SG" tags = { "Environment" = "Prod" "Name" = "AMPP-EKS-Worker-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "AMPP-INT-ALB-SG" { description = "SG rule for AMPP-INT-ALB-SG worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24", "10.250.46.0/25" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.6.0/24", "10.250.46.0/25" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "10.0.0.0/8", "192.168.0.0/16" ] description = "SME-VPN" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "AMPP-INT-ALB-SG" tags = { "Environment" = "Prod" "Name" = "AMPP-INT-ALB-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "AMP-AAS-P2-ASPERA1-SG" { description = "AMP-AAS-P2-ASPERA1-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "apod.cimediacloud.com-CLOUDOPS-10944" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "apod.cimediacloud.com-CLOUDOPS-10944" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "AMP-AAS-P2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "AMP-AAS-P2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.186.192/28", ] description = "ampaasp2-aspconsole01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.186.128/26", ] description = "AMP-AAS-P2-IDMZ" from_port = 1024 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, ] name = "AMP-AAS-P2-ASPERA1-SG" tags = { "Business-Unit" = "SME-AMP" "Patch Group" = "General" "Environment" = "Prod" "Name" = "AMP-AAS-P2-ASPERA1-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = "vpc-0869359855245eb83" } resource "aws_security_group" "AMP-AAS-P2-BATCH-SG" { description = "AMP-AAS-P2-BATCH-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "MSK" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "172.34.22.128/25", "172.34.31.128/25", "172.34.8.192/26", "172.34.12.144/28", ] description = "sme-amp-asset-srv-p" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.22.128/25", "172.34.31.128/25", "172.34.8.192/26", "172.34.12.144/28", ] description = "sme-amp-asset-srv-p" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", ] description = "AMP-AAS-P2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", ] description = "AMP-AAS-P2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "172.34.22.128/25", "172.34.31.128/25", "172.34.8.192/26", "172.34.12.144/28", ] description = "sme-amp-asset-srv-p" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.22.128/25", "172.34.31.128/25", "172.34.8.192/26", "172.34.12.144/28", ] description = "sme-amp-asset-srv-p" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", ] description = "AMP-AAS-P2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", ] description = "AMP-AAS-P2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "AMP-AAS-P2-BATCH-SG" tags = { "Business-Unit" = "SME-AMP" "Environment" = "Prod" "Name" = "AMP-AAS-P2-BATCH-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = "vpc-0869359855245eb83" } resource "aws_security_group" "AMPP2-AAS-RDS-PROD-SG" { description = "SG rules for PROD RDS" egress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "To CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "To CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "From awxd-dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "Worker nodes to RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0df0307ebd02bdc14", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "From clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "CLSHRD-P" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "Allowing RDS Proxy to DB" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0c3fb7b895e52d196", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN CIDR" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "VPC" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "AMPP2-AAS-RDS-PROD-SG" tags = { "Business-Unit" = "SME-AMP" "Environment" = "Prod" "Name" = "AMPP2-AAS-RDS-PROD-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = "vpc-0869359855245eb83" } resource "aws_security_group" "AMPP2-AAS-RDSPROXY-PROD-SG" { description = "SG rules for PROD RDS PROXY" egress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "To CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "To CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = ["0.0.0.0/0"] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "From awxd-dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "From GDS-Prod" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.106.128/25", ] description = "From Ameba-Prod" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "SME-VPN" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "CLSHRD-P" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "VPC" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "AMPP2-AAS-RDSPROXY-PROD-SG" tags = { "Business-Unit" = "SME-AMP" "Environment" = "Prod" "Name" = "AMPP2-AAS-RDSPROXY-PROD-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = "vpc-0869359855245eb83" } resource "aws_security_group" "sme-amp-asset-srv-P-ES-SG" { description = "sme-amp-asset-srv-P-ES-SG" egress = [ { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "AMP-AAS-P2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "AMP-AAS-P2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.5.128/25", "10.11.108.64/27", "10.11.108.96/28", ] description = "sme-amp-asset-srv-d-VPC-CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24", ] description = "AMP-AAS-P2-VPC-CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "172.34.19.0/25", ] description = "sme-amp-asset-srv-s" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "sme-amp-asset-srv-P-ES-SG" tags = { "Environment" = "Prod" "Name" = "sme-amp-asset-srv-P-ES-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = "vpc-0869359855245eb83" } resource "aws_security_group" "AMP-AAS-P2-EXT-ALB-SG" { description = "AMP-AAS-P2-EXT-ALB-SG" egress = [ { cidr_blocks = ["10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24"] description = "AMP-AAS-P2-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24"] description = "AMP-AAS-P2-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "AMP-AAS-P2-EXT-ALB-SG" tags = { "Business-Unit" = "SME-AMP" "Environment" = "Prod" "Name" = "AMP-AAS-P2-EXT-ALB-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "AMP-AAS-P2-TUSD-SG" { description = "AMP-AAS-P2-TUSD-SG" egress = [ { cidr_blocks = ["0.0.0.0/0", ] description = "From the World" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = ["0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = ["0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.12.246.64/26", "10.12.237.160/27"] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24"] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24"] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16"] description = "SME-CORP" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "From the World" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS-TUSD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.11.186.128/25", "10.250.46.0/25", "10.250.6.0/24"] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.176.219/32", "10.12.246.64/27", "10.250.2.64/27"] description = "CloudOPS Bastions" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "AMP-AAS-P2-TUSD-SG" tags = { "Business-Unit" = "SME-AMP" "Environment" = "Prod" "Name" = "AMP-AAS-P2-TUSD-SG" "CLOPS_FW" = "NO" "Project-Name" = "AMP" "Project-Code" = "SME-AMP" "Owner" = "Nathaniel Lovett" } vpc_id = aws_vpc.vpc-0869359855245eb83.id } resource "aws_security_group" "eks-cluster-sg-amp-prod-as-eks-1377022689" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = ["10.11.106.224/27", "10.11.114.192/27", "10.11.106.192/27"] description = "" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }] ingress = [{ cidr_blocks = ["10.11.106.192/27", "10.11.114.192/27", "10.11.106.224/27"] description = "" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = ["10.11.114.0/26"] description = "AOMA-D2-IAPP Subnets" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }] name = "eks-cluster-sg-amp-prod-as-eks-1377022689" name_prefix = null revoke_rules_on_delete = null tags = { Name = "eks-cluster-sg-amp-prod-as-eks-1377022689" "kubernetes.io/cluster/amp-prod-as-eks" = "owned" Terraform = "True" } tags_all = { Name = "eks-cluster-sg-amp-prod-as-eks-1377022689" "kubernetes.io/cluster/amp-prod-as-eks" = "owned" Terraform = "True" } vpc_id = "vpc-0869359855245eb83" }