resource "aws_network_acl" "acl-0675d293f48cdfe68" {
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  tags = {
    Name = "GDS-U1-DEFAULT-NACL"
  }

  tags_all = {
    Name = "GDS-U1-DEFAULT-NACL"
  }

  vpc_id = "vpc-0f4e730056c83b418"
}

resource "aws_network_acl" "acl-0dd21de804640d71e" {
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  #checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "4"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  subnet_ids = ["subnet-071db630e75ab535d", "subnet-0e8f56e10a39ba59e", "subnet-0ff42ee59a76c5076"]

  tags = {
    Business-unit = "Global-DS"
    Environment   = "UAT"
    Name          = "GDS-U1-PUB-NACL"
    Owner         = "Dave Wenger"
    Project-code  = "SME-GLOBAL-DS"
    Project-name  = "Global-DS-MSK"
  }

  tags_all = {
    Business-unit = "Global-DS"
    Environment   = "UAT"
    Name          = "GDS-U1-PUB-NACL"
    Owner         = "Dave Wenger"
    Project-code  = "SME-GLOBAL-DS"
    Project-name  = "Global-DS-MSK"
  }

  vpc_id = "vpc-0f4e730056c83b418"
}

resource "aws_network_acl" "acl-0eac45d9ff2f8273e" {
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  #checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "6"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "5"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "12"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "4"
    to_port    = "22"
  }

  subnet_ids = ["subnet-00a7a7f655670dd62", "subnet-019dcb34e30f2f748", "subnet-04fc0ff2de7d4d6a4", "subnet-07c26f08668d7f87c", "subnet-0b84b1612acc05bcd", "subnet-0cd2841923a80e90e", "subnet-0e41bf2b1214ffb6c", "subnet-0fd7a392515765db0"]

  tags = {
    Business-unit = "Global-DS"
    Environment   = "UAT"
    Name          = "GDS-U1-APP-NACL"
    Owner         = "Dave Wenger"
    Project-code  = "SME-GLOBAL-DS"
    Project-name  = "Global-DS-MSK"
  }

  tags_all = {
    Business-unit = "Global-DS"
    Environment   = "UAT"
    Name          = "GDS-U1-APP-NACL"
    Owner         = "Dave Wenger"
    Project-code  = "SME-GLOBAL-DS"
    Project-name  = "Global-DS-MSK"
  }

  vpc_id = "vpc-0f4e730056c83b418"
}

resource "aws_network_acl" "acl-0f56262698ac1fadf" {
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  subnet_ids = ["subnet-045f4aba8fa17805c"]

  tags = {
    Business-unit = "Global-DS"
    Environment   = "UAT"
    Name          = "GDS-U1-RDS-NACL"
    Owner         = "Dave Wenger"
    Project-code  = "SME-GLOBAL-DS"
    Project-name  = "Global-DS-MSK"
  }

  tags_all = {
    Business-unit = "Global-DS"
    Environment   = "UAT"
    Name          = "GDS-U1-RDS-NACL"
    Owner         = "Dave Wenger"
    Project-code  = "SME-GLOBAL-DS"
    Project-name  = "Global-DS-MSK"
  }

  vpc_id = "vpc-0f4e730056c83b418"
}