resource "aws_network_acl" "acl-0160983a069862436" {
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets. Migrated existing NACL as-is.
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.192/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "4"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.249.3.224/28"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.1.192/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.2.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "3"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "9"
    to_port    = "0"
  }

  subnet_ids = ["subnet-064b7a15b0e279837"]

  tags = {
    Business-unit = "AMP Digital Archive"
    Environment   = "PROD2"
    Name          = "AMP-DIGARCH-P-RDS-NACL"
    Owner         = "Nathaniel Lovett"
    Project-code  = "SME-AMP"
    Project-name  = "AMP"
  }

  tags_all = {
    Business-unit = "AMP Digital Archive"
    Environment   = "PROD2"
    Name          = "AMP-DIGARCH-P-RDS-NACL"
    Owner         = "Nathaniel Lovett"
    Project-code  = "SME-AMP"
    Project-name  = "AMP"
  }

  vpc_id = "vpc-0d1e554606bf981b1"
}

resource "aws_network_acl" "acl-0164ea931632c08b6" {
  #checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389. Migrated existing NACL as-is.
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets. Migrated existing NACL as-is.
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "4"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "9092"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "7"
    to_port    = "9092"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "40001"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "8"
    to_port    = "40001"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.249.3.224/28"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.1.192/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  subnet_ids = ["subnet-0245c1e5f51eaeccc", "subnet-0b4c2a37c99b164f5", "subnet-0ec040e707e33adf8"]

  tags = {
    Business-unit = "AMP Digital Archive"
    Environment   = "PROD2"
    Name          = "AMP-DIGARCH-P-PUB-NACL"
    Owner         = "Nathaniel Lovett"
    Project-code  = "SME-AMP"
    Project-name  = "AMP"
  }

  tags_all = {
    Business-unit = "AMP Digital Archive"
    Environment   = "PROD2"
    Name          = "AMP-DIGARCH-P-PUB-NACL"
    Owner         = "Nathaniel Lovett"
    Project-code  = "SME-AMP"
    Project-name  = "AMP"
  }

  vpc_id = "vpc-0d1e554606bf981b1"
}

resource "aws_network_acl" "acl-096fa438d598569a8" {
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets. Migrated existing NACL as-is.
  vpc_id = "vpc-0d1e554606bf981b1"
}

resource "aws_network_acl" "acl-0e7a6ba167546cd84" {
  #checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389. Migrated existing NACL as-is.
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets. Migrated existing NACL as-is.
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "6"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "5"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "33001"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "11"
    to_port    = "33001"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "9092"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "15"
    to_port    = "9092"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "33001"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "12"
    to_port    = "33001"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "40001"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "16"
    to_port    = "40001"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "10"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.197.215/32"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "9"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.249.3.224/28"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "13"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.1.192/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.2.64/27"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "8"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "14"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "4"
    to_port    = "22"
  }

  subnet_ids = ["subnet-0b659f004ce6d9bcf", "subnet-0f466cd6371731d90", "subnet-04fc952cfad9274ca", "subnet-0e588b021a8daed08", "subnet-0dd720b35d3963386"]

  tags = {
    Business-unit = "AMP Digital Archive"
    Environment   = "PROD2"
    Name          = "AMP-DIGARCH-P-APP-NACL"
    Owner         = "Nathaniel Lovett"
    Project-code  = "SME-AMP"
    Project-name  = "AMP"
  }

  tags_all = {
    Business-unit = "AMP Digital Archive"
    Environment   = "PROD2"
    Name          = "AMP-DIGARCH-P-APP-NACL"
    Owner         = "Nathaniel Lovett"
    Project-code  = "SME-AMP"
    Project-name  = "AMP"
  }

  vpc_id = "vpc-0d1e554606bf981b1"
}