resource "aws_security_group" "sg-03d27d0f3c2a30eb8" { description = "GDS-D1-DOCDB-SG" egress = [ { cidr_blocks = [ "10.11.108.0/27", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.108.0/27", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.47.160/27", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.47.160/27", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.250.6.0/24", ] description = "AOMA-D2" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.176.192/28", ] description = "cloudopsff-dbutils02" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", "10.250.26.64/26", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-4" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-3" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, ] name = "GDS-D1-DOCDB-SG" tags = { "Name" = "GDS-D1-DOCDB-SG" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Name" = "GDS-D1-DOCDB-SG" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-033891663b44a868c" { description = "SG for global-ds-dev-gw-EXT" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "Vamsi" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "global-ds-dev-gw-EXT-SG" tags = { "Name" = "global-ds-dev-gw-EXT-SG\t" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Name" = "global-ds-dev-gw-EXT-SG\t" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-09ad20064082fa5e3" { description = "GDS-D1-INFOSEC-SG-443" egress = [] ingress = [ { cidr_blocks = [ "10.10.40.132/32", ] description = "Qualys Internal Scanner (vm_or_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.191/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.192/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.193/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_3)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.194/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_4)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.112.97/32", ] description = "Acunetix Internal Scanner 2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.2.50/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.2.51/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.222.36/32", ] description = "Whitehat Satellite VM" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.40.0.49/32", ] description = "Qualys Internal Scanner (vm_or_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "148.253.176.50/32", "162.244.5.6/32", "50.207.94.58/32", "162.244.4.3/32", "194.46.129.108/32", "162.244.4.2/32", "162.244.5.3/32", "52.204.38.40/32", "162.244.4.5/32", "162.223.124.0/27", "162.244.5.2/32", "38.122.74.18/32", "162.244.4.6/32", "64.244.165.6/32", "50.207.94.59/32", "162.244.5.5/32", "63.128.163.0/27", ] description = "Whitehat" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.129.13/32", ] description = "Qualys Australia VM (vm_au_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.129.2/32", ] description = "Qualys Australia VM (vm_au_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.150.34/32", ] description = "Qualys Internal Scanner (vm_hk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.225.48/32", ] description = "Qualys Internal Scanner (vm_uk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.225.55/32", ] description = "Qualys UK VM (vm_uk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.69.17/32", ] description = "Qualys Internal Scanner (vm_pmg_scanner_new)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.83.8/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.83.9/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "3.212.1.134/32", ] description = "AWS Scanner - WhiteHat" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "3.91.255.69/32", "54.205.42.52/32", "52.86.59.184/32", "52.44.144.28/32", ] description = "AWS Scanner" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "4.15.150.132/32", ] description = "Acunetix and other Internal Scanners (25 Madison)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "64.39.96.0/20", ] description = "Qualys" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-D1-INFOSEC-SG-443" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-INFOSEC-SG-443" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-INFOSEC-SG-443" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0d0abe961de0b424b" { description = "GDS-D1-GSIRT-SG" egress = [ { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", "10.250.26.64/26", "10.250.47.160/27", "10.11.108.0/27", "10.249.3.96/28", "10.250.6.0/24", "10.250.88.128/25" ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", "10.250.26.64/26", "10.250.47.160/27", "10.11.108.0/27", "10.249.3.96/28", "10.250.6.0/24", "10.250.88.128/25" ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", "10.250.26.64/26", "10.250.47.160/27", "10.11.108.0/27", "10.249.3.96/28", "10.250.6.0/24", "10.250.88.128/25" ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", "10.250.26.64/26", "10.250.47.160/27", "10.11.108.0/27", "10.249.3.96/28", "10.250.6.0/24", "10.250.88.128/25" ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "GDS-D1-GSIRT-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-GSIRT-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-GSIRT-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0884632da7bdade05" { description = "Security group for Kubernetes ELB a104f8a08844c4d6688314d7a6c6174d (global-ds/gw)" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 3 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [] self = false to_port = 4 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-elb-a104f8a08844c4d6688314d7a6c6174d" tags = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a104f8a08844c4d6688314d7a6c6174d" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a104f8a08844c4d6688314d7a6c6174d" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0521256b3276add2b" { description = "GDS-D1-HAPROXY-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 5010 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5015 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "Vamsi" from_port = 5010 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5015 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "cloudopsff-dbutils02" from_port = 5010 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5015 }, { cidr_blocks = [ "49.207.211.175/32", ] description = "Phani" from_port = 5010 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5015 }, ] name = "GDS-D1-HAPROXY-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Patch Group" = "General" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-HAPROXY-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Patch Group" = "General" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-HAPROXY-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0ff77077a786fe113" { description = "GDS-D1-INFOSEC-SG-80" egress = [] ingress = [ { cidr_blocks = [ "10.10.40.132/32", ] description = "Qualys Internal Scanner (vm_or_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.191/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.192/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.193/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_3)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.194/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_4)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.112.97/32", ] description = "Acunetix Internal Scanner 2" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.2.50/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.2.51/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.222.36/32", ] description = "Whitehat Satellite VM" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.40.0.49/32", ] description = "Qualys Internal Scanner (vm_or_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.129.13/32", ] description = "Qualys Australia VM (vm_au_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.129.2/32", ] description = "Qualys Australia VM (vm_au_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.150.34/32", ] description = "Qualys Internal Scanner (vm_hk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.225.48/32", ] description = "Qualys Internal Scanner (vm_uk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.225.55/32", ] description = "Qualys UK VM (vm_uk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.69.17/32", ] description = "Qualys Internal Scanner (vm_pmg_scanner_new)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.83.8/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.83.9/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "3.212.1.134/32", ] description = "AWS Scanner - WhiteHat" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "3.91.255.69/32", "52.44.144.28/32", "52.86.59.184/32", "54.205.42.52/32", ] description = "AWS Scanner" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "4.15.150.132/32", ] description = "Acunetix and other Internal Scanners (25 Madison)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "50.207.94.58/32", "64.244.165.6/32", "162.244.5.6/32", "63.128.163.0/27", "162.244.5.5/32", "162.244.4.5/32", "162.244.4.6/32", "38.122.74.18/32", "162.244.5.3/32", "162.223.124.0/27", "162.244.5.2/32", "162.244.4.3/32", "148.253.176.50/32", "50.207.94.59/32", "52.204.38.40/32", "162.244.4.2/32", "194.46.129.108/32", ] description = "Whitehat" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "64.39.96.0/20", ] description = "Qualys" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "GDS-D1-INFOSEC-SG-80" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-INFOSEC-SG-80" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-INFOSEC-SG-80" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-00d36e091b9184e78" { description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", "10.250.5.128/25", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-globalds-gw-f3cdf40638" tags = { "Name" = "gdsd-gw-alb" "elbv2.k8s.aws/cluster" = "global-ds-dev" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "global-ds/gw" "CLOPS_FW" = "NO" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "Name" = "gdsd-gw-alb" "elbv2.k8s.aws/cluster" = "global-ds-dev" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "global-ds/gw" "CLOPS_FW" = "NO" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0c48dfd58027bdc92" { description = "GDS-D1-MSK-SG" egress = [ { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.88.128/25", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.88.128/25", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "VPN-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", ] description = "CLOUDOPS-10780" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.6.0/24", "10.11.114.0/24", "172.34.23.0/24", ] description = "AOMA-D1-VPC-CIDR" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "172.34.23.0/24", "10.250.6.0/24", "10.11.114.0/24", ] description = "AOMA-D1-VPC-CIDR" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.11.176.192/28", ] description = "cloudopsff-dbutils02" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.11.92.167/32", ] description = "gtunxlng12461.server.arvato-systems.de" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.240.0/24", ] description = "From SWITCHBOARD-QA CIDR-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.26.64/26", "10.250.88.128/25", ] description = "EKS" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.250.26.64/26", "10.250.88.128/25", ] description = "EKS" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.236.224/27", "10.12.236.192/27" ] description = "SCUBA" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.5.128/25", ] description = "sme-amp-asset-srv-d" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "VPN-2" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.21.0/25", ] description = "From SWITCHBOARD-QA CIDR-2" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.23.0/24", "10.11.114.0/25", "10.11.114.128/26", "10.250.6.0/24", ] description = "AOMA-D1-VPC-CIDR" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "172.34.23.0/24", "10.250.6.0/24", "10.11.114.128/26", "10.11.114.0/25", "10.250.88.128/25", ] description = "AOMA-D1-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.23.0/24", ] description = "AOMA-D1-VPC-CIDR" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.182.128/25", "10.12.199.0/25", "10.250.10.0/25" ] description = "AOMA-D1-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.182.128/25", "10.12.199.0/25", "10.250.10.0/25" ] description = "AOMA-D1-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "cloudopsff-dbutils02" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "192.168.0.0/16", ] description = "VPN-3" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [] description = "GDS-D1-HAPROXY-SG" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0521256b3276add2b", ] self = false to_port = 9098 }, ] name = "GDS-D1-MSK-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Patch Group" = "General" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-MSK-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Patch Group" = "General" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-MSK-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0fa91df587f48cf35" { description = "SG rule for global-ds-dev-1 worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [] name = "global-ds-dev-1-Worker-node-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-1-Worker-node-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-1-Worker-node-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0d1b4a16cd27a4399" { description = "globalds-dev-logs-elasticsearch-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.118.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.118.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.12.0/22", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.12.0/22", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "192.168.227.0/24", "192.168.155.0/24", "192.168.10.0/23", "10.0.0.0/8", "192.168.12.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "globalds-dev-logs-elasticsearch-SG" tags = { "Name" = "globalds-dev-logs-elasticsearch-SG" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Name" = "globalds-dev-logs-elasticsearch-SG" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0f63d7c478e65377e" { description = "GDS-D1-MSK-EXT-SG" egress = [ { cidr_blocks = [ "10.11.108.0/27", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.108.0/27", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.47.160/27", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.47.160/27", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.51/32", "10.11.114.15/32", "10.11.114.11/32", "10.11.114.37/32", "10.250.6.0/24", "10.249.5.80/28", "10.250.16.128/27", "10.250.3.0/25", "10.11.115.128/25", ] description = "ameba-dev" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 9194 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9194 }, { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 9196 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9196 }, { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 9198 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9198 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "GVAMSIK" from_port = 9194 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9194 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "GVAMSIK" from_port = 9196 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9196 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "GVAMSIK" from_port = 9198 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9198 }, { cidr_blocks = [ "18.193.142.245/32", "10.11.176.192/28", ] description = "cloudopsff-dbutils02" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "cloudopsff-dbutils02" from_port = 9194 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9194 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "cloudopsff-dbutils02" from_port = 9196 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9196 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "cloudopsff-dbutils02" from_port = 9198 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9198 }, { cidr_blocks = [ "10.11.114.51/32", "10.11.114.15/32", "10.11.114.11/32", "10.11.114.37/32", "10.250.6.0/24", "10.249.5.80/28", "10.250.16.128/27", "10.250.3.0/25", "10.11.115.128/25", ] description = "ameba-dev" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.109.125/32", "10.11.109.92/32", "10.11.109.111/32", "10.11.109.69/32" ] description = "aomas-pg-ecs-txmgr" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "GDS-D1-MSK-EXT-SG" tags = { "Name" = "GDS-D1-MSK-EXT-SG" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Name" = "GDS-D1-MSK-EXT-SG" "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-035be860c34b5f8fd" { description = "GDS-D1-GLOBALDSD-GITRUN01-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "10.11.176.219/32", ] description = "SSH from Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from Tower1" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.81/32", ] description = "CIS-DB" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "GDS-D1-GLOBALDSD-GITRUN01-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Patch Group" = "General" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-GLOBALDSD-GITRUN01-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Patch Group" = "General" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-GLOBALDSD-GITRUN01-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-012ba5b78f5159c32" { description = "GDS-D1-RDS-SG" egress = [ { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.88.128/25", ] description = "VPC-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.88.128/25", ] description = "VPC-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared-Bastion" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared-Bastion" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "vpc-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "vpc-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/28", ] description = "cloudopsff-dbutils02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.88.128/25", ] description = "EKS-Subnets" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", ] description = "VPC-CIDRS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.26.64/26", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", "172.34.23.0/24", "10.249.3.64/28", "10.250.42.128/25", "10.250.16.208/28", ] description = "ameba-dev eks" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "GDS-D1-RDS-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-RDS-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-RDS-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0f8fef4f2108f4d61" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [] name = "k8s-traffic-globaldsdev-191b4b3db6" tags = { "elbv2.k8s.aws/cluster" = "global-ds-dev" "elbv2.k8s.aws/resource" = "backend-sg" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-traffic-globaldsdev-191b4b3db6" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "elbv2.k8s.aws/cluster" = "global-ds-dev" "elbv2.k8s.aws/resource" = "backend-sg" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-traffic-globaldsdev-191b4b3db6" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-020557643868df1a9" { description = "GDS-D1-INT_LB-SG" egress = [ { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-D1-INT_LB-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-INT_LB-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-INT_LB-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-03b5688b9015e1619" { description = "Security group for Kubernetes ELB a94e3af9f6dc14aecb2376d074ce44ce (global-ds/gw)" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", "10.0.0.0/8", "162.49.0.0/16", ] description = "" from_port = 3 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [] self = false to_port = 4 }, ] name = "k8s-elb-a94e3af9f6dc14aecb2376d074ce44ce" tags = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a94e3af9f6dc14aecb2376d074ce44ce" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a94e3af9f6dc14aecb2376d074ce44ce" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0938d3abe02fe088c" { description = "Security Group for global-ds-dev" egress = [ { cidr_blocks = [ "10.11.108.0/27", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.108.0/27", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.249.3.96/28", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.249.3.96/28", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.47.160/27", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.47.160/27", ] description = "VPC-CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.177.128/25", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.198.0/25", "10.250.37.0/26", ] description = "Jenkins and ArgoCD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0a08548a75a938002", ] self = false to_port = 443 }, ] name = "global-ds-dev-ControlPlane-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-ControlPlane-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-ControlPlane-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0a08548a75a938002" { description = "SG rule for global-ds-dev worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", "10.250.26.64/26", "10.250.47.160/27", "10.11.108.0/27", "10.249.3.96/28", "10.250.6.0/24", "10.250.88.128/25" ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", "10.250.26.64/26", "10.250.47.160/27", "10.11.108.0/27", "10.249.3.96/28", "10.250.6.0/24", "10.250.88.128/25" ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.108.112/28", ] description = "UAT-VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.108.112/28", ] description = "UAT-VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "UAT-VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "UAT-VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "UAT-VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "UAT-VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.45/32", "162.49.203.44/32", ] description = "Infoblox" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.45/32", "162.49.203.44/32", ] description = "Infoblox" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "SME-VPN" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "10.11.114.54/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.54/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.134/32", ] description = "gitrun" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.134/32", ] description = "gitrun" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.37.128/25", ] description = "GDS-U" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.37.128/25", ] description = "GDS-U" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 30146 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00d36e091b9184e78", ] self = false to_port = 30146 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0938d3abe02fe088c", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0938d3abe02fe088c", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 31391 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0f8fef4f2108f4d61", ] self = false to_port = 32001 }, ] name = "global-ds-dev-Worker-node-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-Worker-node-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-Worker-node-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-09bfe417826c2b920" { description = "GDS-D1-EXT_LB-SG" egress = [ { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", "10.250.25.192/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "HTTPS_TO_WORLD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-D1-EXT_LB-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-EXT_LB-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-D1-EXT_LB-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0ab158316a81ec206" { description = "Security Group for global-ds-dev-1" egress = [ { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.25.192/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fa91df587f48cf35", ] self = false to_port = 443 }, ] name = "global-ds-dev-1-ControlPlane-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-1-ControlPlane-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-dev-1-ControlPlane-SG" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0a7322f389684db30" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, ] name = "eks-cluster-sg-global-ds-dev-1197784897" tags = { "Name" = "eks-cluster-sg-global-ds-dev-1197784897" "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "Name" = "eks-cluster-sg-global-ds-dev-1197784897" "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-0b1221654a6af60f6" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "default" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "DEV" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "default" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-056741bdad1d8378e" { description = "Security group for Kubernetes ELB a24bdf6cbdc5f4d759448117d4564fb5 (global-ds/gw)" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 3 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [] self = false to_port = 4 }, { cidr_blocks = [ "162.49.0.0/16", "192.168.10.0/23", "10.0.0.0/8", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-elb-a24bdf6cbdc5f4d759448117d4564fb5" tags = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a24bdf6cbdc5f4d759448117d4564fb5" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a24bdf6cbdc5f4d759448117d4564fb5" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0b6089ab2eda0058f" } resource "aws_security_group" "sg-03653e07f4f12cde9" { description = "Security group for Kubernetes ELB a83a08138803146388c127b68bb2ab34 (global-ds/gw)" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 3 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [] self = false to_port = 4 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-elb-a83a08138803146388c127b68bb2ab34" tags = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a83a08138803146388c127b68bb2ab34" } tags_all = { "kubernetes.io/cluster/global-ds-dev" = "owned" "Environment" = "DEV" "CLOPS_FW" = "NO" "Name" = "k8s-elb-a83a08138803146388c127b68bb2ab34" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0b6089ab2eda0058f" }