resource "aws_default_security_group" "DC-D-DEFAULT-SG" {
  vpc_id = aws_vpc.DC-D.id
  tags   = merge(var.tags, { Name = "DC-D-DEFAULT-SG" })
}

resource "aws_security_group" "DC-D-GSIRT-SG" {
  name        = "DC-D-GSIRT-SG"
  description = "DC-D-GSIRT-SG"
  egress = [
    {
      cidr_blocks      = ["10.251.96.0/19", "10.249.5.128/28", "10.12.236.0/26"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65535
    },
    {
      cidr_blocks      = ["10.251.96.0/19", "10.249.5.128/28", "10.12.236.0/26"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65535
    }
  ]
  ingress = [
    {
      cidr_blocks      = ["10.251.96.0/19", "10.249.5.128/28", "10.12.236.0/26"]
      description      = "GSIRT-TCP-8089"
      from_port        = 8089
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 8089
    },
    {
      cidr_blocks      = ["10.251.96.0/19", "10.249.5.128/28", "10.12.236.0/26"]
      description      = "GSIRT-TCP-9998"
      from_port        = 9998
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 9998
    },
  ]
  tags   = merge(var.tags, { Name = "DC-D-GSIRT-SG" })
  vpc_id = aws_vpc.DC-D.id
}