resource "aws_security_group" "sg-0cea4aef90af6b58b" { description = "GDS-U1-RDS-SG" egress = [ { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared-Bastion" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared-Bastion" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "Dev-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "Dev-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "vpc-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "vpc-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "RDS Connection" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0b7f478b8b54a5cca", ] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "FF-Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", ] description = "Ameba-Dev-EKS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.37.128/25", "10.250.88.128/25", ] description = "VPC-CIDRS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "GDS-Dev" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "RDS Connection" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0b7f478b8b54a5cca", ] self = false to_port = 5432 }, ] name = "GDS-U1-RDS-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-RDS-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-RDS-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0c22ca18a165610c8" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [] name = "k8s-traffic-globaldsuat-1d49454f37" tags = { "elbv2.k8s.aws/cluster" = "global-ds-uat" "elbv2.k8s.aws/resource" = "backend-sg" "Environment" = "UAT" "CLOPS_FW" = "NO" "Name" = "k8s-traffic-globaldsuat-1d49454f37" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "elbv2.k8s.aws/cluster" = "global-ds-uat" "elbv2.k8s.aws/resource" = "backend-sg" "Environment" = "UAT" "CLOPS_FW" = "NO" "Name" = "k8s-traffic-globaldsuat-1d49454f37" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0c133119933938749" { description = "GDS-U1-ELK-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.118.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.118.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.12.0/22", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.12.0/22", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "192.168.227.0/24", "192.168.155.0/24", "192.168.10.0/23", "10.0.0.0/8", "192.168.12.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-U1-ELK-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-ELK-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-ELK-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0ac2d90591dd7ca15" { description = "GDS-U1-GSIRT-SG" egress = [ { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "GDS-U1-GSIRT-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-GSIRT-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-GSIRT-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0256922103be2b7a6" { description = "Security Group for global-ds-uat" egress = [ { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0499b82be4c44af3d", ] self = false to_port = 443 }, ] name = "global-ds-uat-ControlPlane-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-uat-ControlPlane-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-uat-ControlPlane-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0965c8e27f5908d33" { description = "GDS-U1-INFOSEC-SG-443" egress = [] ingress = [ { cidr_blocks = [ "10.10.40.132/32", ] description = "Qualys Internal Scanner (vm_or_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.191/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.192/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.193/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_3)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.194/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_4)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.112.97/32", ] description = "Acunetix Internal Scanner 2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.2.50/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.2.51/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.222.36/32", ] description = "Whitehat Satellite VM" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.40.0.49/32", ] description = "Qualys Internal Scanner (vm_or_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "148.253.176.50/32", "162.244.5.6/32", "50.207.94.58/32", "162.244.4.3/32", "194.46.129.108/32", "162.244.4.2/32", "162.244.5.3/32", "52.204.38.40/32", "162.244.4.5/32", "162.223.124.0/27", "162.244.5.2/32", "38.122.74.18/32", "162.244.4.6/32", "64.244.165.6/32", "50.207.94.59/32", "162.244.5.5/32", "63.128.163.0/27", ] description = "Whitehat" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.129.13/32", ] description = "Qualys Australia VM (vm_au_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.129.2/32", ] description = "Qualys Australia VM (vm_au_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.150.34/32", ] description = "Qualys Internal Scanner (vm_hk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.225.48/32", ] description = "Qualys Internal Scanner (vm_uk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.225.55/32", ] description = "Qualys UK VM (vm_uk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.69.17/32", ] description = "Qualys Internal Scanner (vm_pmg_scanner_new)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.83.8/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.83.9/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "3.212.1.134/32", ] description = "AWS Scanner - WhiteHat" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "3.91.255.69/32", "54.205.42.52/32", "52.86.59.184/32", "52.44.144.28/32", ] description = "AWS Scanner" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "4.15.150.132/32", ] description = "Acunetix and other Internal Scanners (25 Madison)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "64.39.96.0/20", ] description = "Qualys" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-U1-INFOSEC-SG-443" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-INFOSEC-SG-443" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-INFOSEC-SG-443" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0de59d60921266254" { description = "global-ds-uat-gw-EXT-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-10325" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "Vamsi" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "global-ds-uat-gw-EXT-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-uat-gw-EXT-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-uat-gw-EXT-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0a0a7c85807300499" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "default" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "default" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-058ac20cfeb2c2fb5" { description = "GDS-U1-INT_LB-SG" egress = [ { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-U1-INT_LB-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-INT_LB-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-INT_LB-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0e0a75179bf70a080" { description = "managed LoadBalancer securityGroup by ALB Ingress Controller" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [] name = "235f9039-globalds-gw-c0bf" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "235f9039-globalds-gw-c0bf" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "235f9039-globalds-gw-c0bf" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0e0dfcc2605031eb5" { description = "GDS-U1-INFOSEC-SG-80" egress = [] ingress = [ { cidr_blocks = [ "10.10.40.132/32", ] description = "Qualys Internal Scanner (vm_or_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.191/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.192/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.193/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_3)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.194/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_4)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.112.97/32", ] description = "Acunetix Internal Scanner 2" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.2.50/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.2.51/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.222.36/32", ] description = "Whitehat Satellite VM" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.40.0.49/32", ] description = "Qualys Internal Scanner (vm_or_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.129.13/32", ] description = "Qualys Australia VM (vm_au_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.129.2/32", ] description = "Qualys Australia VM (vm_au_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.150.34/32", ] description = "Qualys Internal Scanner (vm_hk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.225.48/32", ] description = "Qualys Internal Scanner (vm_uk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.225.55/32", ] description = "Qualys UK VM (vm_uk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.69.17/32", ] description = "Qualys Internal Scanner (vm_pmg_scanner_new)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.83.8/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.83.9/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "3.212.1.134/32", ] description = "AWS Scanner - WhiteHat" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "3.91.255.69/32", "52.44.144.28/32", "52.86.59.184/32", "54.205.42.52/32", ] description = "AWS Scanner" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "4.15.150.132/32", ] description = "Acunetix and other Internal Scanners (25 Madison)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "50.207.94.58/32", "64.244.165.6/32", "162.244.5.6/32", "63.128.163.0/27", "162.244.5.5/32", "162.244.4.5/32", "162.244.4.6/32", "38.122.74.18/32", "162.244.5.3/32", "162.223.124.0/27", "162.244.5.2/32", "162.244.4.3/32", "148.253.176.50/32", "50.207.94.59/32", "52.204.38.40/32", "162.244.4.2/32", "194.46.129.108/32", ] description = "Whitehat" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "64.39.96.0/20", ] description = "Qualys" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "GDS-U1-INFOSEC-SG-80" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-INFOSEC-SG-80" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-INFOSEC-SG-80" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-03b945cdd793b6190" { description = "GDS-U1-DOCDB-SG" egress = [ { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "EKS-Subnets" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "EKS-Subnets" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.250.6.0/24", "10.250.88.128/25", ] description = "EKS-CIDR" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.37.128/25", ] description = "VPC-CIDR" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "GDS-D" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-4" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-3" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, ] name = "GDS-U1-DOCDB-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-DOCDB-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-DOCDB-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0f9d891cec2be3c40" { description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "172.34.19.0/25", ] description = "AMP-FF-S" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-globalds-gw-47d534ffff" tags = { "Name" = "gdsu-gw-alb" "elbv2.k8s.aws/cluster" = "global-ds-uat" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "global-ds/gw" "Environment" = "UAT" "CLOPS_FW" = "NO" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } tags_all = { "Name" = "gdsu-gw-alb" "elbv2.k8s.aws/cluster" = "global-ds-uat" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "global-ds/gw" "Environment" = "UAT" "CLOPS_FW" = "NO" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-04120d21e889123a2" { description = "managed LoadBalancer securityGroup by ALB Ingress Controller" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [] name = "235f9039-globalds-gw1-2916" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "235f9039-globalds-gw1-2916" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "235f9039-globalds-gw1-2916" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0f107828a30058366" { description = "GDS-U1-EXT_LB-SG" egress = [ { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", "10.11.180.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "HTTPS_TO_WORLD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-U1-EXT_LB-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-EXT_LB-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-EXT_LB-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0a9197c9ec4e23a05" { description = "GDS-U1-MSK-EXT-SG" egress = [ { cidr_blocks = [ "10.11.108.112/28", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.108.112/28", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "GDS-D-VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "GDS-D-VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.104.192/26", "10.11.109.64/26", "10.11.106.32/27", ] description = "AOMA-S-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.113.32/28", ] description = "GRPS-D2-IAPP-1A-CLOUDOPS-11787" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.238.64/27", ] description = "SCUBA" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.119.0/24", ] description = "LCS-D" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "DBUTILS" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.11.182.128/25", "10.12.199.0/25", "10.250.10.0/25" ] description = "DBUTILS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "dbutils" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.92.167/32", ] description = "gtunxlng12461" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.96.133/32", ] description = "gtunxlvz06526.server.arvato-systems.de" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.96.134/32", ] description = "gtunxlvs07013.server.arvato-systems.de" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.230.202/32", ] description = "prsd-tools01" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "GDS-D-EKS" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "GDS-D1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "EKS PODS" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 9194 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9194 }, { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 9196 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9196 }, { cidr_blocks = [ "115.112.36.106/32", "115.112.65.139/32", "115.112.65.140/32", "122.186.213.222/32", "122.187.191.74/32", "122.187.191.76/32", "52.142.13.64/32", "40.87.111.207/32", ] description = "CLOUDOPS-9751" from_port = 9198 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9198 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "GVAMSIK" from_port = 9194 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9194 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "GVAMSIK" from_port = 9196 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9196 }, { cidr_blocks = [ "173.70.148.76/32", ] description = "GVAMSIK" from_port = 9198 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9198 }, { cidr_blocks = [ "18.193.142.245/32", "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "cloudopsff-dbutils02" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "cloudopsff-dbutils02" from_port = 9194 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9198 }, { cidr_blocks = [ "18.193.142.245/32", ] description = "dbutils" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "3.68.126.10/32", ] description = "GDS-D" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "3.68.126.10/32", ] description = "GDS-D1" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.11.114.0/26", ] description = "aomad2-txmgr-ecs" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.3.64/26", ] description = "AOMA DEL-D-XAPP" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.16.172/32", "10.250.16.167/32", ] description = "dels2-docker03" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "GDS-U1-MSK-EXT-SG" tags = { "Name" = "GDS-U1-MSK-EXT-SG" "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Name" = "GDS-U1-MSK-EXT-SG" "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-0499b82be4c44af3d" { description = "SG rule for global-ds-uat worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "GDS-D" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.128/25", ] description = "GDS-D" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.177.134/32", ] description = "gitrun" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.134/32", ] description = "gitrun" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0256922103be2b7a6", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0256922103be2b7a6", ] self = false to_port = 65535 }, ] name = "global-ds-uat-Worker-node-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-uat-Worker-node-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "global-ds-uat-Worker-node-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "sg-098e9065cd6bb6263" { description = "GDS-U1-MSK-SG" egress = [ { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.11.104.192/26", "10.11.109.64/26", "10.11.114.0/25", ] description = "AOMA-S-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.184.128/25", ] description = "AMP-Dev-Workers" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.88.128/25", ] description = "GDS-U-K8S-CLOUDSD-5972" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.104.128/25", "10.250.15.0/25", "10.11.109.64/26", "10.250.6.0/25", "10.250.88.128/25", ] description = "AOMA-S1-VPC-CIDR" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.11.182.128/25", "10.12.199.0/25", "10.250.10.0/25", "10.250.6.0/25" ] description = "MC-S-EKS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.104.128/25", "10.250.15.0/25", "10.11.109.64/26", "10.250.6.0/25", ] description = "AOMA-S1-VPC-CIDR" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.11.104.128/25", ] description = "AOMA-U1-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "grpsd2-application02" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.176.203/32", ] description = "cloudopsff-haproxy01" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.96.133/32", "10.11.96.134/32", ] description = "CLOUDOPS-9540" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.240.0/24", ] description = "From SWITCHBOARD-QA CIDR-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.240.32/28", ] description = "From QA-SWD-APP-1B" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.15.0/25", "10.250.6.0/25", ] description = "AOMA-S1-VPC-CIDR" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "GDS-D-VPC" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "GDS-D-VPC" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "EKS" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "EKS" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "EKS" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.37.164/32", ] description = "Wroker" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.250.6.0/25", "10.11.109.64/26", "10.250.15.0/25", "10.11.104.128/25", ] description = "AOMA-S1-VPC-CIDR" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "VPN-2" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.19.0/25", "172.34.19.128/25", ] description = "sme-amp-asset-srv-s" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.21.0/25", ] description = "From SWITCHBOARD-QA CIDR-2" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "192.168.0.0/16", ] description = "VPN-3" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.106.32/28", "10.11.106.48/28", ] description = "DEL-S2 delivery-package-archiver-tf-stage Lambda - MSK IAM auth" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "GDS-U1-MSK-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-MSK-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-MSK-SG" } vpc_id = "vpc-0f4e730056c83b418" } resource "aws_security_group" "GDS-U1-GDSRDSPROXY-SG" { description = "GDS-U1-GDSRDSPROXY-SG" egress = [ { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.88.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared-Bastion" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared-Bastion" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "Dev-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "Dev-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "vpc-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.128/25", ] description = "vpc-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "RDS Connection" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cea4aef90af6b58b", ] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "FF-Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.0/25", "10.11.114.128/26", ] description = "Ameba-Dev-EKS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "cloudopsff-dbutils02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.180.0/25", "10.250.37.128/25", "10.250.88.128/25", ] description = "VPC-CIDRS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.26.64/26", ] description = "GDS-Dev" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "RDS Connection" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cea4aef90af6b58b", ] self = false to_port = 5432 }, ] name = "GDS-U1-GDSRDSPROXY-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-GDSRDSPROXY-SG" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "UAT" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" "Name" = "GDS-U1-GDSRDSPROXY-SG" } vpc_id = "vpc-0f4e730056c83b418" }