resource "aws_network_acl" "acl-07a0d16cd50e774b2" {
  # checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  # checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "105"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "104"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "106"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "108"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "101"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.23.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "103"
    to_port    = "0"
  }

  subnet_ids = ["subnet-03850eeb366195b45", "subnet-05cd8ac5edb70fbfb", "subnet-07b1525823637b397", "subnet-088a7b93149fb5d47", "subnet-0b30070fe44625e8b", "subnet-0f8ca49e26fcecceb", "subnet-0fa58a5f0d4c3c8f6"]

  tags = {
    Name    = "AOMA-D2-XDMZ-NACL"
    Project = "DEL"
  }

  tags_all = {
    Name    = "AOMA-D2-XDMZ-NACL"
    Project = "DEL"
  }

  vpc_id = "vpc-050b7040cb12315e1"
}

resource "aws_network_acl" "acl-085a093d39ae28e8e" {
  # checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  # checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "2"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "4"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "5"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.30.0/24"
    from_port  = "6432"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "9"
    to_port    = "6432"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.12.0/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "10"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.21.0/25"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "11"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.28.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "12"
    to_port    = "0"
  }

  subnet_ids = ["subnet-01c5ce177dd81bc22", "subnet-03a0cf285badfdc64", "subnet-0881b826886cb97f0", "subnet-0b5a48b5835fc3935", "subnet-0bd6e967de4f78b99", "subnet-0dd89f02965c32573", "subnet-0ee5db461c576e715"]

  tags = {
    Name    = "AOMA-S-APP-NACL"
    Project = "AOMA"
  }

  tags_all = {
    Name    = "AOMA-S-APP-NACL"
    Project = "AOMA"
  }

  vpc_id = "vpc-0aa20ae4059ad2f09"
}

resource "aws_network_acl" "acl-0bb88c84023ec3313" {
  # checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  # checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  tags = {
    Name = "AOMA-D2-DEFAULT-NACL"
  }

  tags_all = {
    Name = "AOMA-D2-DEFAULT-NACL"
  }

  vpc_id = "vpc-050b7040cb12315e1"
}

resource "aws_network_acl" "acl-0cf352d00856c5b96" {
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "9"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "3"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.23.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  subnet_ids = ["subnet-0481065d6bcb91a0f", "subnet-0b6fc112e2bd3c7fe", aws_subnet.AOMA-D2-XRDS-1A.id, aws_subnet.AOMA-D2-XRDS-1B.id]

  tags = {
    Name    = "AOMA-D2-RDS-NACL"
    Project = "DEL"
  }

  tags_all = {
    Name    = "AOMA-D2-RDS-NACL"
    Project = "DEL"
  }

  vpc_id = "vpc-050b7040cb12315e1"
}

resource "aws_network_acl" "acl-0ea31faeb0ed2e84b" {
  # checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "105"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "104"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "130"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "106"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "172"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "173"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.114.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "170"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.6.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "171"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.251.12.0/22"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "211"
    to_port    = "0"
  }


  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "9094"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "150"
    to_port    = "9094"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.23.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "103"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "9094"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "160"
    to_port    = "9094"
  }

  subnet_ids = ["subnet-004ba29e5577689c0", "subnet-00e1abd0f0d804e4c", "subnet-01d136c1d224c6370", "subnet-0294d45e7486903d4", "subnet-041910364f2c9f9cd", "subnet-05683f17a210241cf", "subnet-05e3533bcaefcddff", "subnet-05e3c2befd5bc815e", "subnet-0848bfd1179db9280", "subnet-0a7a27ea466387ba4", "subnet-0afe8d939051da794", "subnet-0bc719a3b8205e0c2", "subnet-0e320c25c3ca7b86d", aws_subnet.AOMA-D2-XEKS-251-1A.id, aws_subnet.AOMA-D2-XEKS-251-1B.id]

  tags = {
    Name    = "AOMA-D2-APP-NACL"
    Project = "DEL"
  }

  tags_all = {
    Name    = "AOMA-D2-APP-NACL"
    Project = "DEL"
  }

  vpc_id = "vpc-050b7040cb12315e1"
}