resource "aws_security_group" "sg-0e87c59ec4cd0f02c" { description = "SG rule for global-ds-prod worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "Prod-Kafka" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "Prod-Kafka" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "RDS-Proxy" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Clops-OutBound" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.75/32", "10.11.176.219/32", ] description = "Bastions" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SharedVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0a7040e7dace06f2c", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0a7040e7dace06f2c", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 31957 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0d4fb44cbfe3899e5", ] self = false to_port = 31957 }, ] name = "global-ds-prod-Worker-node-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-099d37dfd75d4b207" { description = "GDS-P1-MSK-SG" egress = [ { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.106.128/25", "10.11.114.192/26", "172.34.27.0/24", "10.250.6.0/24", "10.250.35.121/32", "10.250.35.22/32", "10.250.35.11/32", "10.250.35.104/32", "10.250.35.120/32", "10.11.105.64/27", "10.11.105.96/27", "10.11.106.203/32", "10.11.106.243/32", "10.11.106.247/32", "10.11.106.239/32", "10.11.106.198/32", "10.11.106.212/32", "10.11.106.222/32", "10.11.106.253/32", ] description = "AOMA-P2-VPC" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.106.128/25", "10.11.114.192/26", "172.34.27.0/24", "10.250.6.0/24", ] description = "AOMA-P1-VPC" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.11.106.128/25", "10.11.114.192/26", "172.34.27.0/24", "10.250.6.0/24", "10.250.35.121/32", "10.250.35.22/32", "10.250.35.11/32", "10.250.35.104/32", "10.250.35.120/32", "10.250.72.0/21", "10.11.106.212/32", "10.11.106.222/32", "10.11.106.253/32", ] description = "AOMA-P2-VPC" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.72.0/21", ] description = "SCUBA" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "10.11.106.128/25", "10.11.114.192/26", "172.34.27.0/24", ] description = "AOMA-P1-VPC" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.11.113.44/32", ] description = "global-ds-gw.smcdp-aws.net" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.44/32", ] description = "grpsd2-application02" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "DB-UTILS" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "DB-UTILS" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "DB-UTILS" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "DB-UTILS" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "DB-UTILS" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "DB-UTILS" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.96.165/32", "10.11.96.166/32", ] description = "NGD" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.37.96/27", "10.250.35.128/27", ] description = "SWB-P-VPC" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 11001 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11001 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 2182 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2182 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.226.96/27", ] description = "SCUBA" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "AOMA-P-VPC" from_port = 11002 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11002 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "VPN-2" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.22.128/25", "172.34.31.128/25", "172.34.8.192/26", ] description = "AMP-Asset-SRV-P" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "192.168.0.0/16", ] description = "VPN-3" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.105.64/27", "10.11.105.96/27", ] description = "DEL-P2 delivery-package-archiver-tf Lambda - MSK IAM auth port 9098" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "GDS-P1-MSK-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-02b627d07f0a3d29a" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-05c82a5391cf8c123" { description = "GDS-P1-RDS-SG" egress = [ { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "FF-Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "GDS-P1-GDSRDSPROXY-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [aws_security_group.GDS-P1-GDSRDSPROXY-SG.id] self = false to_port = 5432 }, ] name = "GDS-P1-RDS-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "GDS-P1-GDSRDSPROXY-SG" { description = "GDS-P1-GDSRDSPROXY-SG" egress = [ { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "GDS-P1-RDS-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-05c82a5391cf8c123"] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "FF-Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.106.128/25", "10.250.6.0/24", ] description = "From-Aoma-Prod-EKS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "Bastion" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "GDS-P1-GDSRDSPROXY-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-0d3bddcbedb190ea7" { description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.10.0/23", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.96.166/32", "10.11.96.165/32", ] description = "NGD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "172.34.22.128/25", ] description = "AMP-Prod" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-globalds-gw-acd2fe3172" tags = { "Name" = "gdsp-gw-alb" "elbv2.k8s.aws/cluster" = "global-ds-prod" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "global-ds/gw" } tags_all = { "Name" = "gdsp-gw-alb" "elbv2.k8s.aws/cluster" = "global-ds-prod" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "global-ds/gw" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-061b79de73feabcf9" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, ] name = "eks-cluster-sg-global-ds-prod-1523003989" tags = { "Name" = "eks-cluster-sg-global-ds-prod-1523003989" "kubernetes.io/cluster/global-ds-prod" = "owned" } tags_all = { "Name" = "eks-cluster-sg-global-ds-prod-1523003989" "kubernetes.io/cluster/global-ds-prod" = "owned" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-0a76d72cc954fd273" { description = "GDS-P1-ELK-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.0.0/16", ] description = "VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GDS-P1-ELK-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-01858b76e5fd5c073" { description = "GDS-P1-DOCDB-SG" egress = [ { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.176.201/32", ] description = "DB-UTILS" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "VPN-2" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, { cidr_blocks = [ "192.168.0.0/16", ] description = "VPN-3" from_port = 27017 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 27017 }, ] name = "GDS-P1-DOCDB-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-0f77ac6ea79108ac3" { description = "GDS-P1-GSIRT-SG" egress = [ { cidr_blocks = [ "10.11.180.128/25", "10.250.38.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.250.38.128/25", "10.11.180.128/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, ] ingress = [ { cidr_blocks = [ "10.11.180.128/25", "10.250.38.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.250.38.128/25", "10.11.180.128/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, ] name = "GDS-P1-GSIRT-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-0a7040e7dace06f2c" { description = "Security Group for global-ds-prod" egress = [ { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.177.128/25", ] description = "Gutrun-Dev" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.38.128/25", ] description = "VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0e87c59ec4cd0f02c", ] self = false to_port = 443 }, ] name = "global-ds-prod-ControlPlane-SG" tags = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Global-DS" "Environment" = "PROD" "Owner" = "Dave Wenger" "Project-code" = "SME-GLOBAL-DS" "Project-name" = "Global-DS-MSK" "CLOPS_FW" = "NO" } vpc_id = "vpc-01b4d8a02500fa28b" } resource "aws_security_group" "sg-0d4fb44cbfe3899e5" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [] name = "k8s-traffic-globaldsprod-b348498ee8" tags = { "elbv2.k8s.aws/cluster" = "global-ds-prod" "elbv2.k8s.aws/resource" = "backend-sg" } tags_all = { "elbv2.k8s.aws/cluster" = "global-ds-prod" "elbv2.k8s.aws/resource" = "backend-sg" } vpc_id = "vpc-01b4d8a02500fa28b" }