resource "aws_security_group" "sg-023d8204742130c0d" { description = "aoma-core-lambda-SG" egress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24", "10.11.114.96/28", "10.11.114.112/28" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Lambda" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-01f19efd2fe268cf6"] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.104.208/28", "10.11.104.192/28", "10.11.104.224/28" ] description = "kafka" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24", "10.11.114.96/28", "10.11.114.112/28" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-01f19efd2fe268cf6"] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.104.208/28", "10.11.104.192/28", "10.11.104.224/28" ] description = "kafka" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "aoma-core-lambda-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aoma-core-lambda-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aoma-core-lambda-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-08c3d12f81fc63a33" { description = "AOMA-D2-GSIRT-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.114.128/26", "10.11.114.0/25", "172.34.23.0/24", "10.11.104.128/25", "10.11.109.64/26", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.249.3.64/28", "10.251.29.0/24", ] description = "" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.23.0/24", "10.11.114.0/25", "10.11.114.128/26", "10.11.104.128/25", "10.11.109.64/26", "10.250.6.0/24", "10.251.12.0/22", "10.249.3.64/28", "10.250.16.208/28", "10.250.42.128/25", "10.251.29.0/24", ] description = "" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "AOMA-D2-GSIRT-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-GSIRT-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-GSIRT-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-091e45be6b836a949" { description = "ECS ALB sg for aomad2-metadata-import-service" egress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "App-Port" from_port = 8090 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8090 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "Container-Port" from_port = 31000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.0.0/16", "10.11.0.0/16", "192.168.227.0/24", "192.168.12.0/24", "162.49.0.0/16", "192.168.10.0/23", "192.168.155.0/24", ] description = "Allow public traffic on port 443" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "aomad2-metadata-import-service-ALB-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-GSIRT-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-GSIRT-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0e99f077a85334897" { description = "AOMA-D2-MQ-GRAS-SG" egress = [ { cidr_blocks = [ "10.11.114.128/26", "10.11.114.0/25", "10.250.42.128/25", "10.250.16.208/28", "10.11.55.128/27", "10.251.29.0/24" ] description = "VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", "10.11.114.0/25", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", "10.12.0.0/16", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", ] description = "SME-Intranet" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "Arvato-K8S" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 61614 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61614 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 61617 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61617 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 61619 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61619 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", "10.11.114.5/32", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 8883 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8883 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 61614 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61614 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 61617 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61617 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 61619 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61619 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 8883 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8883 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.250.0.0/16", ] description = "" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "" from_port = 61614 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61617 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = [ "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.249.3.64/28", ] description = "aoma-d2 vpc cidr" from_port = 61619 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61619 }, { cidr_blocks = [ "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.249.3.64/28", ] description = "aoma-d2 vpc cidr" from_port = 8883 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8883 }, ] name = "AOMA-D2-MQ-GRAS-SG" tags = { "Name" = "AOMA-D2-MQ-GRAS-SG" "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" } tags_all = { "Name" = "AOMA-D2-MQ-GRAS-SG" "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-08933c2d21c945dd4" { description = "AOMAD2-ECS-LOGS-ES-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.16.208/28", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.16.208/28", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.182.192/27", ] description = "MCON-D2-IAPP-1A" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", "10.0.0.0/8", "172.34.18.64/27", "172.34.16.0/25", "192.168.155.0/24", "192.168.10.0/23", "192.168.12.0/24", "192.168.227.0/24", "10.11.114.0/25", "10.11.114.128/26", "10.250.16.208/28", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "AOMAD2-ECS-LOGS-ES-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-ECS-LOGS-ES-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-ECS-LOGS-ES-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-01f19efd2fe268cf6" { description = "aomad2-aoma-rds-sg" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.113.42/32", "10.11.184.160/27", "10.11.184.206/32", "10.11.184.197/32", "10.11.184.128/27", ] description = "lsd-rds-pgdbstbmg1-dev-01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "AOMA-D2-AOMARDSPROXY-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-02a1c711859ffd366", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.169.123/32", ] description = "csgtras1" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "162.49.169.190/32", ] description = "degtlun5097" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "10.11.114.0/27", "10.11.114.32/27" ] description = "VPN IP" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "RDS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "lambda" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-023d8204742130c0d"] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.112.176/28", "10.11.112.160/28", "10.11.184.160/27", "10.11.184.206/32", "10.11.184.197/32", "10.11.184.128/27", ] description = "LCRFFD-RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.0/26", "10.11.113.48/28", ] description = "GRPS-D2-RDS-DEV-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.116.128/28", ] description = "ARFF-D-RDS-1C" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", "10.11.114.0/27", "10.11.114.32/27" ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "From awxd-dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "172.34.18.64/27", "172.34.16.0/25", ] description = "EKS-Worker-Nodes" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "ameba-dev-ext-worker-nodes-NodeSecurityGroup" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0e325156c2eadf8e7", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "ameba-dev-int-worker-node-NodeSecurityGroup" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-057adc0c93dc675aa", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "aomad-ameba-rds-sg" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-07512bb29c4ab82c5", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "aomad2-PGBouncer" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-02c7f689d0e644bad", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "AOMA-D2-AOMARDSPROXY-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-02a1c711859ffd366", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "RDS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "lambda" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-023d8204742130c0d"] self = false to_port = 5432 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", ] description = "VPN IP" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, ] name = "aomad2-aoma-rds-sg" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aomad2-aoma-rds-sg" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aomad2-aoma-rds-sg" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-07512bb29c4ab82c5" { description = "aomad-ameba-rds-sg" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.113.48/28", ] description = "GRPS-D2-RDS1B" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.48/28", ] description = "GRPS-D2-RDS1B" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.169.123/32", ] description = "csgtras1" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "162.49.169.190/32", ] description = "degtlun5097" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.112.176/28", "10.11.112.160/28", "10.11.113.42/32", ] description = "LCRFFD-RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.48/28", ] description = "aomad2-aoma-rds-sg" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-01f19efd2fe268cf6", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", ] description = "VPC-CIDR-2" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "From awxd-dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EKS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "AMEBA-D1-AMEBARDSPROXY-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0c83294846b31441c" ] self = false to_port = 5432 } ] name = "aomad-ameba-rds-sg" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aomad-ameba-rds-sg" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aomad-ameba-rds-sg" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-ameba_d1_amebardproxy_sg" { description = "AMEBA-D1-AMEBARDSPROXY-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.113.48/28", ] description = "GRPS-D2-RDS1B" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.48/28", ] description = "GRPS-D2-RDS1B" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.169.123/32", ] description = "csgtras1" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "162.49.169.190/32", ] description = "degtlun5097" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.112.176/28", "10.11.112.160/28", "10.11.113.42/32", ] description = "LCRFFD-RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.48/28", ] description = "aomad2-aoma-rds-sg" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-01f19efd2fe268cf6", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.128/26", "10.250.42.128/25", "10.250.16.208/28", ] description = "VPC-CIDR-2" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "From awxd-dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EKS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "AMEBA-D1-AMEBARDSPROXY-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AMEBA-D1-AMEBARDSPROXY-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-02c7f689d0e644bad" { description = "AOMA-D2-AOMAPGBOUNCER-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "ArvatoK8S" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.169.123/32", ] description = "csgtras1" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "162.49.169.190/32", ] description = "degtlun5097" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.0/25", "10.11.59.0/25", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "172.29.29.0/24", "10.250.42.128/25", "35.158.127.192/27", "10.250.16.208/28", "10.11.115.183/32", "10.11.113.170/32", "10.11.114.0/24", "10.11.176.200/32", "10.12.208.64/27", "10.250.5.128/25", "10.250.2.0/24", "10.0.0.0/8", ] description = "" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-023d8204742130c0d", ] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", "10.11.176.192/26", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.55.128/27" ] description = "Arvatok8s dev" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.109.125/32", "10.11.109.92/32", "10.11.109.111/32", "10.11.109.69/32" ] description = "aomas-pg-ecs-txmgr" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, ] name = "AOMA-D2-AOMAPGBOUNCER-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-AOMAPGBOUNCER-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-02ab17ec96679e8ae" { description = "AOMA-D2-SFTS-RDSPROXY-SG with new ports from AOMA-D2-RDS-SFTSPGBOUNCER-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.169.123/32", ] description = "csgtras1" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "162.49.169.190/32", ] description = "degtlun5097" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, ] ingress = [ { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "PG-Bouncer from CIDR-1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "PG-Bouncer from CIDR-2" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.59.0/25", ] description = "ARVATO RDS VLAN" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.60.64/26", ] description = "ARVATO SFTS VLAN" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.236.151/32", ] description = "SSH from Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "PG-Bouncer from CIDR-3" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "AOMA-D2-SFTS-RDSPROXY-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-SFTS-RDSPROXY-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-SFTS-RDSPROXY-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-08ae273e8fd8d0410" { description = "vpc" egress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "AOMA-D2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "AOMA-D2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.114.0/24", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/24", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "AOMA-VPCcidr" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-VPCcidr" } tags_all = {} vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0d148cab17e6597fd" { description = "ECS ALB sg for aomad2-gateway" egress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "App-Port" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "App-Port" from_port = 8099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8099 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "Container-Ports" from_port = 31000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.0.0/16", "10.11.0.0/16", "192.168.227.0/24", "192.168.12.0/24", "162.49.0.0/16", "192.168.10.0/23", "192.168.155.0/24", ] description = "Allow public traffic on port 443" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "aomad2-gateway-ALB-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aomad2-gateway-ALB-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "aomad2-gateway-ALB-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-057adc0c93dc675aa" { description = "Security group for all nodes in the cluster" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.1.72.136/32", "84.17.184.248/32", ] description = "cmail.servicemail24.de-CLOUDOPS-22636" from_port = 25 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 25 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "For RDS Proxy" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "44.198.76.204/32", "107.20.179.0/32", "34.192.59.192/32", ] description = "amp-aspera-dad-ext and amp-aspera2-das-ext" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "44.198.76.204/32", "107.20.179.0/32", "34.192.59.192/32", ] description = "amp-aspera-dad-ext and amp-aspera2-das-ext" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.107.0/25", ] description = "dbotmist.medigitalapps.com" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.84/32", ] description = "aoma-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "GDS-D1" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.49.10/32", ] description = "degtluv0917.server.arvato-systems.de" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.49.68/32", ] description = "degtluv0321.server.arvato-systems.de" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.102/32", ] description = "gtunxlnb06528" from_port = 11980 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11980 }, { cidr_blocks = [ "10.12.199.41/32", "10.12.239.12/32", "10.12.199.14/32", "10.12.239.50/32", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.85/32", "10.11.104.237/32", ] description = "" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.169.123/32", ] description = "csgtras1" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "162.49.169.190/32", ] description = "degtlun5097" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "52.29.94.181/32", "35.156.89.2/32", ] description = "digsysdevsftp.medigitalapps.com" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.117.52/32", ] description = "mc-dev-pgbouncer.smecloudops.com" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "172.29.6.85/32", ] description = "mc-del-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "172.29.27.64/28", "172.29.27.80/28", ] description = "mc-promo-dev-db.smecloudops.com" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.49.13/32", ] description = "gtunxlvp04228.server.arvato-systems.de" from_port = 8280 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8280 }, { cidr_blocks = [ "10.11.177.192/27", "10.11.177.224/27", "10.11.108.0/27", "10.11.114.0/27", "10.11.114.32/27", "10.11.114.64/27", ] description = "global-msk-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = ["10.11.104.128/25", "10.11.109.64/26", "10.251.28.0/24"] description = "AOMA-S VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.104.128/25", "10.11.109.64/26", "10.251.28.0/24"] description = "AOMA-S VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.250.42.224/28", "10.250.16.208/28"] description = "aomad2-aspera01" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["10.250.42.224/28", "10.250.16.208/28"] description = "aomad2-aspera01" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["10.250.42.224/28", "10.250.16.208/28"] description = "aomad2-aspera01" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["10.250.42.224/28", "10.250.16.208/28"] description = "aomad2-aspera01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["10.11.104.128/25"] description = "AOMA-S ActiveMQ" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 } ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "172.34.23.0/24", "10.11.114.0/25", "10.11.114.128/26", "10.251.29.0/24" ] description = "VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "172.34.23.0/24", "10.11.114.0/25", "10.11.114.128/26", "10.251.29.0/24" ] description = "VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0e325156c2eadf8e7", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-0e325156c2eadf8e7", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-026dfc278ef7b565d", "sg-04e54680a2176e6ee", "sg-06e1286ff5c57a7b1", "sg-081d54c65a6efc04e", "sg-0c919a2d7dca27d02", "sg-0f4c2ee6082f56a13", "sg-0f596a75a1afc180a", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09f4a75ab321706d0", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09f4a75ab321706d0", ] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.192/27", "10.11.177.224/27", "10.11.108.0/27", "10.11.114.0/27", "10.11.114.32/27", "10.11.114.64/27", ] description = "global-msk-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [] description = "Allow ALB to communicate with worker nodes for health checks and traffic" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cb1f8504162601cc", ] self = false to_port = 65535 }, ] name = "ameba-dev-int-worker-node-NodeSecurityGroup-16VSUO7E1ICZL" tags = { "Business-Unit" = "SME-AOMA-Core" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "Project-Code" = "SME-2000-0306A" "Project-Name" = "AOMA-Core" Name = "ameba-dev-int-worker-node-NodeSecurityGroup-16VSUO7E1ICZL" CLOPS_FW = "NO" "karpenter.sh/discovery" = "ameba-dev" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "Project-Code" = "SME-2000-0306A" "Project-Name" = "AOMA-Core" Name = "ameba-dev-int-worker-node-NodeSecurityGroup-16VSUO7E1ICZL" CLOPS_FW = "NO" "karpenter.sh/discovery" = "ameba-dev" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0f08baefb9e67cf4a" { description = "AOMA-D2-MONGO-SG" egress = [] ingress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24" ] description = "AOMA-D2-VPC-CIDR" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.176.201/32", "10.11.176.192/27" ] description = "cloudopsff-dbutils02" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, ] name = "AOMA-D2-DOCDB-SG" tags = { "Name" = "AOMA-D2-DOCDB-SG" "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" } tags_all = { "Name" = "AOMA-D2-DOCDB-SG" "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0757030fabb964cb5" { description = "AOMA-D2-ASPUTIL-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.114.155/32", ] description = "ssh from bastion IP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.65/32", ] description = "degtluv0307.server.arvato-systems.de" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "ArvatoK8S-Aoma-Dev" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308.server.arvato-systems.de" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.236.160/27", ] description = "SSH from Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "AOMA-D2-ASPUTIL-SG" tags = { "Name" = "AOMA-D2-ASPUTIL-SG" "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" } tags_all = { Name = "AOMA-D2-ASPUTIL-SG" "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0f50a9ac3b65efc52" { description = "AOMA-D2-EFS-SG" egress = [ { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EFS-Access-for-Pods" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EFS-Access-for-Pods" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-1" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.250.54.128/26" ] description = "Allow MCON-D2-XWIP-1A Batch NFS to EFS" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.250.54.192/26" ] description = "Allow MCON-D2-XWIP-1B Batch NFS to EFS" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.250.67.128/25" ] description = "Allow Media Conversion Batch 1A NFS to EFS" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.250.67.96/27" ] description = "Allow Media Conversion Batch 1B NFS to EFS" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] security_groups = [] protocol = "tcp" self = false to_port = 2049 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "Arvato-K8S-DevStage" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-1" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.114.128/26" ] description = "VPC-2" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EFS Access for Pods" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-2" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "AOMA-D2-EFS-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-EFS-SG" } tags_all = {} vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0d68a18c44e5a167d" { description = "AOMA-D2-EKS-SG" egress = [ { cidr_blocks = [ "10.11.114.32/27", ] description = "GithubRunner" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.32/27", ] description = "GithubRunner" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.197.13/32", ] description = "aoma-dev-int.smcdp-de.net" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "34.192.59.192/32", "107.20.179.0/32" ] description = "amp-aspera2-das-ext.smcdp-aws.net" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, ] ingress = [ { cidr_blocks = [ "10.11.114.32/27", ] description = "GithubRunner" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.236.166/32", "10.11.176.0/24", "10.250.6.0/24", "10.251.12.0/22", ] description = "central EKS mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "Vault Authentication" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "AOMA-D2-EKS-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-EKS-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-EKS-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0efe522f1c5644b63" { description = "AOMA-D2-TXMGR1B-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["0.0.0.0/0"] description = "CHRONYD-TCP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "CHRONYD-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["10.11.188.0/25", "10.250.242.0/24"] description = "DIGSYS-D3 for Oracle" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "10.11.177.192/26", "10.11.108.0/27", ] description = "GDS-D1-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.107.0/25", ] description = "dbotmist.medigitalapps.com" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "10.11.107.64/27", ] description = "DIGSYS-D-RDS SUBNETS" from_port = 1521 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1521 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.84/32", ] description = "aoma-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308.server.arvato-systems.de" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309.server.arvato-systems.de" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "84.17.184.248/32", ] description = "cmail.servicemail24.de" from_port = 25 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 25 }, { cidr_blocks = [ "10.11.180.64/27", ] description = "sme-global-msk-uat-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.108.112/28", ] description = "sme-global-msk-uat-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.180.96/27", ] description = "sme-global-msk-uat-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.109.125/32", "10.11.109.92/32", "10.11.109.111/32", "10.11.109.69/32" ] description = "aomas-pg-ecs-txmgr" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.114.74/32" ] description = "aoma-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.180.92/32", "10.11.108.123/32", "10.11.180.106/32" ] description = "sme-global-msk-uat" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.177.207/32", "10.11.108.12/32", "10.11.177.241/32" ] description = "sme-global-msk-dev" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.177.253/32", "10.11.177.219/32", ] description = "global-ds-uat-gw.smcdp-aws.net" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.177.237/32", "10.11.177.221/32", ] description = "global-ds-dev-gw.smcdp-aws.net" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.83/32", "10.11.114.45/32", ] description = "ActiveMQ 8162" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = [ "10.11.114.83/32", "10.11.114.45/32", ] description = "ActiveMQ 5671" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310.server.arvato-systems.de" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311.server.arvato-systems.de" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "ssh from AWX instance" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "Arvato-Dev-Stage" from_port = 8801 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8801 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "Arvato-Dev-Stage" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [] description = "AOMA-D2-TXMGR1A-SG" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-02e47972ad7b57ce8", ] self = false to_port = 5455 }, { cidr_blocks = [] description = "AOMA-D2-AOMAD2-GITRUN01-SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0c67b157063e32133", "sg-057adc0c93dc675aa", ] self = false to_port = 8080 }, { cidr_blocks = ["10.11.114.32/27"] description = "AOMA-D2-IAPP-1B" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = ["10.12.246.0/25", "10.250.2.0/24", "10.12.237.128/26", "10.250.37.0/26", "10.250.200.0/23", "10.250.227.0/24"] description = "CLSHRD-P" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, ] name = "AOMA-D2-TXMGR1B-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-TXMGR1B-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-TXMGR1B-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0e325156c2eadf8e7" { description = "Security group for all nodes in the cluster" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "dbotmist" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [] description = "CLOUDOPS-12885" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-02e47972ad7b57ce8"] self = false to_port = 5455 }, { cidr_blocks = ["0.0.0.0/0"] description = "CLOUDOPS-14393" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "CLOUDOPS-14393" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["10.250.7.64/26"] description = "CLOUDOPS-12901" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "10.11.104.128/25", "10.11.109.64/26", ] description = "AOMA-S" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "AOMA-S" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.104.128/25", ] description = "AOMA-S" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.104.128/25", ] description = "AOMA-S" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.104.237/32", ] description = "Stage-pgbouncer" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.104.240/28", "10.11.104.224/28", ] description = "DEV-VPC" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "GDS-D1" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.49.10/32", ] description = "degtluv0917.server.arvato-systems.de" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.49.68/32", ] description = "degtluv0321.server.arvato-systems.de" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.49.68/32", ] description = "degtluv0321.server.arvato-systems.de" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.96.102/32", ] description = "gtunxlnb06528" from_port = 11980 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11980 }, { cidr_blocks = [ "10.12.239.12/32", "10.12.199.41/32", "10.12.239.50/32", "10.12.199.14/32", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", "10.11.177.128/25", ] description = "globalds-dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", "10.11.177.128/25", ] description = "globalds-dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.85/32", "10.11.114.84/32", ] description = "" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.250.16.208/28", "10.250.42.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.250.16.208/28", "10.250.42.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "gtunxlva06527" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "52.29.94.181/32", "35.156.89.2/32", ] description = "digsysdevsftp.medigitalapps.com" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "EFS - AMP-Dev" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.11.117.52/32", ] description = "mc-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "172.29.6.85/32", ] description = "mc-del-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "172.29.27.0/25", "172.29.8.0/24", ] description = "mc-promo-dev-db.smecloudops.com" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.49.13/32" ] description = "gtunxlvp04228.server.arvato-systems.de" from_port = 8280 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8280 }, { cidr_blocks = [ "10.11.177.192/27", "10.11.177.224/27", "10.11.108.0/27", ] description = "global-msk-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "Bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EKS-PODS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EKS-PODS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-057adc0c93dc675aa", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-057adc0c93dc675aa", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-026dfc278ef7b565d", "sg-081d54c65a6efc04e", "sg-0f4c2ee6082f56a13", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09f4a75ab321706d0", ] self = false to_port = 53 }, { cidr_blocks = [] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-09f4a75ab321706d0", ] self = false to_port = 53 }, { cidr_blocks = [] description = "ALB-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-06e1286ff5c57a7b1", "sg-0b139dd7f94bd1c05", "sg-0c919a2d7dca27d02", "sg-0f596a75a1afc180a", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "ALB-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-06e1286ff5c57a7b1", "sg-0b139dd7f94bd1c05", "sg-0c919a2d7dca27d02", "sg-0f596a75a1afc180a", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09f4a75ab321706d0", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09f4a75ab321706d0", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 30327 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0e71c7686ccbc507f", ] self = false to_port = 30640 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cb1f8504162601cc", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-0cb1f8504162601cc", ] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.192/27", "10.11.177.224/27", "10.11.108.0/27", ] description = "global-msk-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "ameba-dev-ext-worker-nodes-NodeSecurityGroup-19LHN62KWVNSC" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "ameba-dev-ext-worker-nodes-NodeSecurityGroup-19LHN62KWVNSC" "kubernetes.io/cluster/ameba-dev" = "owned" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "ameba-dev-ext-worker-nodes-NodeSecurityGroup-19LHN62KWVNSC" "kubernetes.io/cluster/ameba-dev" = "owned" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-06c2a4f9073be0c63" { description = "AOMA-D2-AMPCNTPV-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.114.155/32", ] description = "ssh from bastion IP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.160/27", ] description = "SSH from Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "AOMA-D2-AMPCNTPV-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-AMPCNTPV-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-AMPCNTPV-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0917e47c1a5b1e38f" { description = "AOMAD2-KAFKA-MSK01-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.104.192/26", ] description = "AOMA-S-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", "10.11.114.0/25", "10.11.114.128/26", "10.250.16.160/27", "10.11.114.9/32", "10.11.114.54/32", "10.251.29.0/24" ] description = "" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "VPN-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "192.168.0.0/16", ] description = "VPN-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", "10.11.114.0/25", "10.11.114.128/26", "10.250.16.160/27", "10.11.114.9/32", "10.11.114.54/32", "10.251.29.0/24" ] description = "" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.114.0/25", "172.34.23.0/24", "10.11.114.128/26", "10.11.104.128/25", "172.34.19.128/25", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-057adc0c93dc675aa", ] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.114.0/25", "172.34.23.0/24", "10.11.114.128/26", "10.11.104.220/32", "10.11.104.128/25", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.11.115.128/27", ] description = "DEL-D_App-Subnets" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.11.115.128/27", ] description = "DEL-D_App-Subnets" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.184.128/25", "10.250.69.0/25", ] description = "AMP-AAS-D2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "From awxd-dbutils01" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "Prometheus" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "Prometheus" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "From awxd-dbutils01" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.250.1.0/24", ] description = "DIGSYS-D" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.1.16/32", ] description = "digsysd-tools01" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "EKS PODS" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "VPN-2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.23.160/27", ] description = "aomad2-ameba-utils" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "172.34.23.160/27", ] description = "aomad2-ameba-utils" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "VPN-5" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "VPN-4" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "VPN-6" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "VPN-3" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [] description = "ameba-dev EKS" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0e325156c2eadf8e7", ] self = false to_port = 9094 }, { cidr_blocks = [ "192.168.1.219/32", ] description = "AMEBA DEV MSK local" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "4.15.150.138/32", ] description = "AMEBA DEV MSK local nygateway" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.3.96/27", "10.250.3.64/27", ] description = "DELD" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "AOMAD2-KAFKA-MSK01-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-KAFKA-MSK01-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-KAFKA-MSK01-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-09f4a75ab321706d0" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.107.58/32", ] description = "dstest.smedigitalapps.com/dsmsgWS/rs/data-services/send" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.16.208/28", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.16.208/28", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.29.27.80/28", "172.29.27.64/28" ] description = "mc-promo-dev-db.smecloudops.com" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "172.29.6.85/32", "10.11.117.52/32" ] description = "mc-del-dev-pgbouncer.smecloudops.com and mc-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.177.160/28", "10.11.177.176/28", ] description = "gateway-dev-rds" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/27", "10.11.114.32/27", "10.11.114.64/27", ] description = "ameba msk" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, { cidr_blocks = [ "10.11.114.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.200.87/32", ] description = "Allowing inbound connection from Vault dev" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-057adc0c93dc675aa", "sg-0e325156c2eadf8e7", ] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.0/27", "10.11.114.32/27", "10.11.114.64/27", ] description = "ameba msk" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "eks-cluster-sg-ameba-dev-196388736" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "eks-cluster-sg-ameba-dev-196388736" "kubernetes.io/cluster/ameba-dev" = "owned" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "eks-cluster-sg-ameba-dev-196388736" "kubernetes.io/cluster/ameba-dev" = "owned" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0cdd4c39bef424246" { description = "AOMAD2-ANSIBLE-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.114.84/32", "10.251.29.0/24" ] description = "" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.236.160/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.236.173/32", ] description = "awxd-bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "From awxd-dbutils01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "da-asset-importer" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.208.64/27", ] description = "da-asset-importer" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, ] name = "AOMAD2-ANSIBLE-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-ANSIBLE-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-ANSIBLE-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0cb1f8504162601cc" { description = "AOMA-D2-INTERNAL-LB-SG" egress = [ { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.104.128/25", "10.11.109.64/26", ] description = "STAGE-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.104.128/25", "10.11.109.64/26", ] description = "STAGE-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "SME-VPN-1-HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.0.0/16", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "AOMA-D2-INTERNAL-LB-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-INTERNAL-LB-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-INTERNAL-LB-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-0c67b157063e32133" { description = "AOMA-D2-AOMAD2-GITRUN01-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.104.128/25", "10.11.106.128/25", ] description = "Txmngr-SG_CLOUDOPS-12981" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-02e47972ad7b57ce8", "sg-0efe522f1c5644b63", ] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.249.3.64/28", "10.250.42.128/25", ] description = "AOMA-D2-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.249.3.64/28", "10.250.42.128/25", ] description = "AOMA-D2-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "145.228.6.206/32", ] description = "ArvatoK8s API Server" from_port = 12263 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 12263 }, { cidr_blocks = [ "145.228.6.206/32", ] description = "ArvatoK8s-Prod API Server" from_port = 13538 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 13538 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.205/32", ] description = "cloudopsff-dbutils01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.114.8/32", "10.11.114.43/32", "10.11.109.121/32", "10.11.109.94/32", "10.11.109.122/32", "10.11.109.126/32", "10.11.106.201/32", "10.11.106.237/32", "10.11.106.207/32", "10.11.106.251/32" ] description = "aomad2-txmgr,aomas-txmg & aomap-txmgr" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, ] ingress = [ { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "AOMA-D2-AOMAD2-GITRUN01-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-AOMAD2-GITRUN01-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-AOMAD2-GITRUN01-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-067e2f7c83961ba38" { description = "AOMA-D2-esDeleteIndex-Lambda-SG" egress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "172.34.23.0/24", "10.11.114.128/26", "10.11.114.0/25", "10.251.29.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, ] name = "AOMA-D2-esDeleteIndex-Lambda-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-esDeleteIndex-Lambda-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-esDeleteIndex-Lambda-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-03b6df3744589fa0f" { description = "default VPC security group" egress = [] ingress = [ { cidr_blocks = [ "10.11.176.201/32", ] description = "CLOUDOPS-7393" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, ] name = "default" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "default" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "default" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "sg-02e47972ad7b57ce8" { description = "AOMA-D2-TXMGR1A-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = ["0.0.0.0/0"] description = "CHRONYD-TCP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "CHRONYD-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["10.11.188.0/25", "10.250.242.0/24"] description = "DIGSYS-D3 for Oracle" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.177.192/26", "10.11.108.0/27", ] description = "GDS-D1-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.107.0/25", ] description = "dbotmist.medigitalapps.com" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "10.11.107.64/27", ] description = "DIGSYS-D-RDS SUBNETS" from_port = 1521 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1521 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.84/32", ] description = "aoma-dev-pgbouncer.smecloudops.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308.server.arvato-systems.de" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.9/32", ] description = "gtunxlvn04226.server.arvato-systems.de" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", "10.250.16.208/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "84.17.184.248/32", ] description = "cmail.servicemail24.de" from_port = 25 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 25 }, { cidr_blocks = [ "10.11.180.64/27", ] description = "sme-global-msk-uat-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.108.112/28", ] description = "sme-global-msk-uat-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.180.96/27", ] description = "sme-global-msk-uat-ext" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.109.125/32", "10.11.109.92/32", "10.11.109.111/32", "10.11.109.69/32" ] description = "aomas-pg-ecs-txmgr" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.250.6.0/24", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "CLOUDOPS-12885" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0e325156c2eadf8e7"] self = false to_port = 5455 }, { cidr_blocks = ["10.250.6.0/24", "10.251.12.0/22"] description = "CLOUDOPS-12972" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.65/32", ] description = "degtluv0307.server.arvato-systems.de" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308.server.arvato-systems.de" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310.server.arvato-systems.de" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311.server.arvato-systems.de" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "Arvato K8S" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "ssh from AWX instance" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "From eks manager" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "AOMA-D2-TXMGR1B-SG" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0efe522f1c5644b63", ] self = false to_port = 5455 }, { cidr_blocks = [] description = "AOMA-D2-AOMAD2-GITRUN01-SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0c67b157063e32133", "sg-057adc0c93dc675aa", "sg-0e325156c2eadf8e7", ] self = false to_port = 8080 }, { cidr_blocks = ["10.11.114.32/27"] description = "AOMA-D2-IAPP-1B" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = ["10.12.246.0/25", "10.250.2.0/24", "10.12.237.128/26", "10.250.37.0/26", "10.250.200.0/23", "10.250.227.0/24"] description = "CLSHRD-P" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, ] name = "AOMA-D2-TXMGR1A-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-TXMGR1A-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-TXMGR1A-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "AOMA-CORE-DEV-01-MQ-SG" { description = "AOMA-CORE-DEV-01-MQ-SG" egress = [ { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.249.3.64/28", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24"] description = "All Traffic for VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.249.3.64/28", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24"] description = "All Traffic for VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24", "10.11.109.64/26", "10.11.104.128/25"] description = "MQ-5671-VPC-CIDRS" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24", "10.11.109.64/26", "10.11.104.128/25"] description = "MQ-8162-VPC-CIDRS" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24"] description = "MQ-8883-VPC-CIDRS" from_port = 8883 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8883 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24"] description = "MQ-61614-VPC-CIDRS" from_port = 61614 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61614 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24"] description = "MQ-61617-VPC-CIDRS" from_port = 61617 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61617 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.250.42.128/25", "10.250.16.208/28", "10.251.29.0/24"] description = "MQ-61619-VPC-CIDRS" from_port = 61619 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61619 }, { cidr_blocks = ["10.11.55.128/27", ] description = "MQ-5671-ARVATO-EKS-CIDR" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, { cidr_blocks = ["10.11.55.128/27", ] description = "MQ-8162-ARVATO-EKS-CIDR" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = ["10.11.55.128/27", ] description = "MQ-8883-ARVATO-EKS-CIDR" from_port = 8883 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8883 }, { cidr_blocks = ["10.11.55.128/27", ] description = "MQ-61614-ARVATO-EKS-CIDR" from_port = 61614 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61614 }, { cidr_blocks = ["10.11.55.128/27", ] description = "MQ-61617-ARVATO-EKS-CIDR" from_port = 61617 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61617 }, { cidr_blocks = ["10.11.55.128/27", ] description = "MQ-61619-ARVATO-EKS-CIDR" from_port = 61619 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 61619 }, { cidr_blocks = ["10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", ] description = "sony vpn cidrs" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = [ "10.11.114.37/32" ] description = "aomad-txmgr-kafka-consumer" from_port = 8162 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8162 }, { cidr_blocks = [ "10.11.114.37/32" ] description = "aomad-txmgr-kafka-consumer" from_port = 5671 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5671 }, ] name = "AOMA-CORE-DEV-01-MQ-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-CORE-DEV-01-MQ-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "AOMA-D2-INT-ALB-SG" { description = "AOMA-D2-INT-ALB-SG" egress = [ { cidr_blocks = [ "10.11.176.0/25", ] description = "CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.249.3.64/28", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDR-AOMA-D2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "To CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "To CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "10.249.3.64/28", "10.250.16.208/28", "10.251.29.0/24" ] description = "VPC-CIDR-AOMA-D2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", ] description = "VPN" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "172.34.21.0/25" ] description = "SWITCHBOARD-QA" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0" ] description = "EXT-QA-SWD-APP-1A,EXT-QA-SWD-APP-1B,EXT-QA-SWD-APP-1C" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "AOMAD2-INT-ALB-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-INT-ALB-SG" } tags_all = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMAD2-INT-ALB-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "AOMA-D2-AOMARDSPROXY-SG" { description = "AOMA-D2-AOMARDSPROXY-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "ArvatoK8S" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.0/25", "10.251.29.0/24" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.104.128/25", "10.11.109.64/26", "10.251.28.0/24"] description = "AOMA-S VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.104.128/25", "10.11.109.64/26", "10.251.28.0/24"] description = "AOMA-S VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.128/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.66/32", ] description = "degtluv0308" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.50.67/32", ] description = "degtluv0309" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.68/32", ] description = "degtluv0310" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "10.11.50.69/32", ] description = "degtluv0311" from_port = 1099 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1099 }, { cidr_blocks = [ "10.11.50.76/32", ] description = "degtluv0918" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.59.9/32", ] description = "degtlun5191" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.42.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.169.123/32", ] description = "csgtras1" from_port = 17800 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17800 }, { cidr_blocks = [ "162.49.169.190/32", ] description = "degtlun5097" from_port = 8180 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8180 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "aomad2-aoma-rds-sg" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-01f19efd2fe268cf6", ] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.128/25", ] description = "amp-eks-dev" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.50.0/25", "10.11.59.0/25", "172.34.23.0/24", "10.250.6.0/24", "10.251.12.0/22", "172.29.29.0/24", "10.250.42.128/25", "35.158.127.192/27", "10.250.16.208/28", "10.11.115.183/32", "10.11.113.170/32", "10.11.114.0/24", "10.11.176.200/32", "10.12.208.64/27", "10.250.5.128/25", "10.250.2.0/24", "10.0.0.0/8", ] description = "" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-023d8204742130c0d", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", "10.11.176.192/26", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.55.128/27" ] description = "Arvatok8s dev" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "aomad2-aoma-rds-sg" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-01f19efd2fe268cf6", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.55.0/24", "162.49.0.0/16" ] description = "" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "AOMA-D2-AOMARDSPROXY-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-AOMARDSPROXY-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "AOMA-D2-QUEUE01-SG" { description = "AOMA-D2-QUEUE01-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.55.128/27", ] description = "ArvatoK8S" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.0/25", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/25", "10.12.246.0/24", ] description = "CCShare" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", "10.11.176.192/26", ] description = "Bastions" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24" ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.55.128/27" ] description = "Arvatok8s dev" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.55.128/27" ] description = "Arvatok8s-dev" from_port = 8443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8443 }, { cidr_blocks = [ "10.11.55.128/27" ] description = "Arvatok8s dev" from_port = 5455 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5455 }, ] name = "AOMA-D2-QUEUE01-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" Name = "AOMA-D2-QUEUE01-SG" } vpc_id = "vpc-050b7040cb12315e1" } resource "aws_security_group" "AOMA-D2-ASPERA-SG" { description = "AOMA-D2-ASPERA-SG" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = ["0.0.0.0/0"] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.12.246.64/26", "10.12.237.160/27"] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24"] description = "AOMA-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24"] description = "AOMA-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-TCP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-TCP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-UDP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-TCP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-UDP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-TCP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-UDP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["10.11.59.204/32"] description = "s3-file-gateway-devstage" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, ] ingress = [ { cidr_blocks = [] description = "Aspera INT NLB" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [aws_security_group.aoma-d2-aspera-nlb-int.id] self = false to_port = 22 }, { cidr_blocks = ["10.11.176.219/32", "10.12.246.64/27", "10.250.2.64/27"] description = "CloudOPS Bastions" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["10.11.186.192/27"] description = "SSH from ampaasp-aspconsole03" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-TCP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-UDP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-TCP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-UDP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-TCP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-UDP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, ] name = "AOMA-D2-ASPERA-SG" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" "Name" = "AOMA-D2-ASPERA-SG" } vpc_id = aws_vpc.vpc-050b7040cb12315e1.id } resource "aws_security_group" "aoma-d2-aspera-nlb" { description = "aoma-d2-aspera-nlb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = ["0.0.0.0/0"] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.12.246.64/26", "10.12.237.160/27"] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24"] description = "AOMA-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24"] description = "AOMA-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-TCP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-TCP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-UDP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-TCP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-UDP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-TCP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-UDP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["10.11.59.204/32"] description = "s3-file-gateway-devstage" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, ] ingress = [ { cidr_blocks = ["10.11.176.219/32", "10.12.246.64/27", "10.250.2.64/27"] description = "CloudOPS Bastions" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["10.11.186.192/27"] description = "SSH from ampaasp-aspconsole03" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["10.0.0.0/8"] description = "Aspera-9092-TCP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["10.0.0.0/8"] description = "Aspera-9092-UDP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-TCP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-UDP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["10.0.0.0/8"] description = "Aspera-40001-TCP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["10.0.0.0/8"] description = "Aspera-40001-UDP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, ] name = "aoma-d2-aspera-nlb" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" "Name" = "aoma-d2-aspera-nlb" } vpc_id = aws_vpc.vpc-050b7040cb12315e1.id } resource "aws_security_group" "aoma-d2-aspera-nlb-int" { description = "aoma-d2-aspera-nlb-int" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = ["0.0.0.0/0"] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.12.246.64/26", "10.12.237.160/27"] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24"] description = "AOMA-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", "10.250.42.128/25", "10.250.16.208/28", "10.251.12.0/22", "10.251.29.0/24"] description = "AOMA-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-TCP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-TCP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-UDP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-TCP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-UDP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-TCP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-UDP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["10.11.59.204/32"] description = "s3-file-gateway-devstage" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, ] ingress = [ { cidr_blocks = ["10.11.176.219/32", "10.12.246.64/27", "10.250.2.64/27"] description = "CloudOPS Bastions" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["10.11.176.128/25", "10.12.246.64/27", "10.250.2.64/27"] description = "CloudOPS Bastions" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = ["10.11.176.128/25", "10.12.246.64/27", "10.250.2.64/27"] description = "CloudOPS Bastions" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.11.186.192/27"] description = "SSH from ampaasp-aspconsole03" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-TCP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-9092-UDP" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-TCP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-33001-UDP" from_port = 33001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 33001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-TCP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 40001 }, { cidr_blocks = ["0.0.0.0/0"] description = "Aspera-40001-UDP" from_port = 40001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 40001 }, ] name = "aoma-d2-aspera-nlb-int" tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" "Name" = "aoma-d2-aspera-nlb-int" } vpc_id = aws_vpc.vpc-050b7040cb12315e1.id } resource "aws_security_group" "mi-load-comparison-test-lambda-sg" { name = "mi-load-comparison-test-lambda-sg" description = "Security group for mi-load-comparison-test Lambda" vpc_id = aws_vpc.vpc-050b7040cb12315e1.id egress = [ { cidr_blocks = ["10.250.242.64/28", "10.250.242.80/28", "10.11.187.0/25"] description = "dbotmist" from_port = 1480 to_port = 1482 protocol = "tcp" self = false security_groups = [] prefix_list_ids = [] ipv6_cidr_blocks = [] }, { cidr_blocks = ["10.11.187.61/32"] description = "dbotmist" from_port = 1480 to_port = 1480 protocol = "tcp" self = false security_groups = [] prefix_list_ids = [] ipv6_cidr_blocks = [] }, { cidr_blocks = ["0.0.0.0/0"] description = "443 all" from_port = 443 to_port = 443 protocol = "tcp" self = false security_groups = [] prefix_list_ids = [] ipv6_cidr_blocks = [] } ] tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" "Name" = "mi-load-comparison-test-lambda-sg" } } resource "aws_security_group" "sme-aoma-core-storage-gateway-dev-aws-sg" { name = "sme-aoma-core-storage-gateway-dev-aws-sg" description = "sme-aoma-core-storage-gateway-dev-aws-sg" vpc_id = aws_vpc.vpc-050b7040cb12315e1.id ingress = [ { cidr_blocks = ["10.11.114.132/32"] description = "aomad2-aspera01" from_port = 2049 to_port = 2049 protocol = "tcp" self = false security_groups = [] prefix_list_ids = [] ipv6_cidr_blocks = [] }, { cidr_blocks = ["10.11.114.0/24", "10.251.0.0/16"] description = "Ameba-Dev EKS Subnets" from_port = 2049 to_port = 2049 protocol = "tcp" self = false security_groups = [] prefix_list_ids = [] ipv6_cidr_blocks = [] } ] egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "HTTPs Internet" from_port = 443 to_port = 443 protocol = "tcp" self = false security_groups = [] prefix_list_ids = [] ipv6_cidr_blocks = [] } ] tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" "Name" = "sme-aoma-core-storage-gateway-dev-aws-sg" } } resource "aws_security_group" "aomad-s3-files-vpce-sg" { name = "aomad-s3-files-vpce-sg" description = "aomad-s3-files-vpce-sg" vpc_id = aws_vpc.vpc-050b7040cb12315e1.id ingress = [ { description = "NFS from storage gateway EC2" from_port = 2049 to_port = 2049 protocol = "tcp" security_groups = [aws_security_group.sme-aoma-core-storage-gateway-dev-aws-sg.id] cidr_blocks = [] ipv6_cidr_blocks = [] prefix_list_ids = [] self = false }, { description = "HTTPS from storage gateway EC2" from_port = 443 to_port = 443 protocol = "tcp" security_groups = [aws_security_group.sme-aoma-core-storage-gateway-dev-aws-sg.id] cidr_blocks = [] ipv6_cidr_blocks = [] prefix_list_ids = [] self = false } ] egress = [] tags = { "Business-Unit" = "SME-AOMA-Core" "Project-Name" = "AOMA-Core" "Project-Code" = "SME-2000-0306A" "Environment" = "Dev" "Owner" = "Nathaniel Lovett" "CLOPS_FW" = "NO" "Name" = "aomad-s3-files-vpce-sg" } }