resource "aws_security_group" "sg-01c86c44fd491e2e0" { description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", "10.12.0.0/16", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-devgrpsr-grpsdepl-d2ec008729" tags = { "Name" = "grps-deployment-ingress-alb" "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "dev-grps-rr/grps-deployment-ingress" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } tags_all = { "Name" = "grps-deployment-ingress-alb" "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "dev-grps-rr/grps-deployment-ingress" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0a411ef24bb0c85d8" { description = "GRPSNV-D3-GSIRT-SG" egress = [ { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.25.0/26", "10.12.214.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.25.0/26", "10.12.214.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "GRPSNV-D3-GSIRT-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "DEV" "Owner" = "Richard Mayer" "Project-Code" = "SME-2000-0497G" "Project-Name" = "RDX" Name = "GRPSNV-D3-GSIRT-SG" CLOPS_FW = "NO" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "DEV" "Owner" = "Richard Mayer" "Project-Code" = "SME-2000-0497G" "Project-Name" = "RDX" Name = "GRPSNV-D3-GSIRT-SG" CLOPS_FW = "NO" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-051007a62274c9251" { description = "GRPSNV-D3-PGBOUNCER-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["162.49.75.150/32"] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = ["162.49.75.150/32"] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["10.250.243.0/26", "10.250.243.64/26"] description = "DX3-D1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.237.160/27", "10.12.246.64/26", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.249.3.32/28", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.249.3.32/28", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "10.11.113.39/32", "10.11.119.22/32" ] description = "grpsd2-utilities02.smearsys.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "cloudopsff-dbmonitor01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "cloudopsff-dbmonitor01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.133/32", ] description = "gtunxlvz06526.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.134/32", ] description = "gtunxlvs07013.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.165/32", ] description = "gtunxlvv07016.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.166/32", ] description = "gtunxlvw07017.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "lcsd-use1-eks01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "pods connection" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "162.49.202.1/32", ] description = "Ashburn Proxy for Arvato" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [] description = "GRPSNV-D3-RDS01-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-060720910610cd2e5", ] self = false to_port = 65534 }, { cidr_blocks = [] description = "GRPSNV-D3-RDS01-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-060720910610cd2e5", ] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.202.64/26", "10.12.202.96/27" ] description = "CONSOLED GOLD-D-APP" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, ] name = "GRPSNV-D3-PGBOUNCER-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Patch Group" = "General" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" Name = "GRPSNV-D3-PGBOUNCER-SG" CLOPS_FW = "NO" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Patch Group" = "General" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" Name = "GRPSNV-D3-PGBOUNCER-SG" CLOPS_FW = "NO" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0062dce0899da5f98" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }] ingress = [] name = "k8s-traffic-smelabelcopyscheduledevuse1cluster01-01fd2b7334" tags = { "elbv2.k8s.aws/cluster" = "sme-label-copy-schedule-dev-use1-cluster-01" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "backend-sg" } tags_all = { "elbv2.k8s.aws/cluster" = "sme-label-copy-schedule-dev-use1-cluster-01" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "backend-sg" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0cfcb3630d67a2fdd" { description = "Security group for AWS Cloud9 environment aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }] ingress = [] name = "aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a-InstanceSecurityGroup-1HD81IKV4NBBI" tags = { Name = "aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } tags_all = { Name = "aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0837c4fda23796193" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "default" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "default" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0b8af61cfc15392cc" { description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", "10.12.0.0/16", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-devgrpsr-grpsdepl-528433b725" tags = { "Name" = "grps-deployment-ingress-alb" "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "dev-grps-rr/grps-deployment-ingress-int" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } tags_all = { "Name" = "grps-deployment-ingress-alb" "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "dev-grps-rr/grps-deployment-ingress-int" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-093e94cf33e9f1eb2" { description = "SG rule for GRPSNV-D3-EKS Worker Nodes" egress = [ { cidr_blocks = [ "10.11.113.32/28", "10.11.113.48/28", ] description = "grpsd2-rds-sng" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = ["162.49.75.150/32"] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17530 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17530 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de - TEST" from_port = 11703 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11703 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 9031 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9031 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "gtunxlva06527.server.arvato-systems.de" from_port = 11700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11700 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.32/28", "10.11.119.0/25" ] description = "grpsd2-pgbouncer02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.214.134/32", ] description = "grpsd2-pgdbstbmg1" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.237.0/24", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.0/24", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 11700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 17530 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17710 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17710 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.11.188.43/32", "10.11.188.92/32" ] description = "digsysd-ocm" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "10.11.110.231/32", "10.11.110.249/32", "10.11.107.206/32", "10.11.107.200/32" ] description = "digsyss-ocm & digsysp-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, { cidr_blocks = [ "10.250.70.0/24", "10.11.187.0/25", "10.249.1.48/28" ] description = "DIGSYS-S3" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 9093 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9093 }, { cidr_blocks = [ "10.11.189.0/26", "10.11.189.64/26" ] description = "dbmiprod" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 11709 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11709 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "arvato proxy" from_port = 17210 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17210 }, { cidr_blocks = [ "10.12.240.0/24", ] description = "MSK Access (qa-switchboard, qa-order-history)" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.242.0/24", "10.250.70.0/24" ] description = "MSK Access (digsysd3msk01, digsyss3msk01)" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.177.0/24", "10.11.108.0/24", "10.11.180.0/24" ] description = "MSK Access (sme-global-msk-dev, sme-global-msk-uat)" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = ["10.11.189.0/25", "10.11.187.176/28"] description = "digsysp3-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, ] ingress = [ { cidr_blocks = ["10.11.176.219/32", "10.12.246.64/27", "10.250.2.64/27"] description = "FF-Bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.237.128/26", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.128/26", ] description = "TowerVPCcidr3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 4000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0062dce0899da5f98"] self = false to_port = 11000 }, { cidr_blocks = [] description = "From GRPSNV-D3-INT_LB-SG" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0967194217d9bdff8"] self = false to_port = 80 }, ] name = "GRPSNV-D3-EKS-Worker-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" "karpenter.sh/discovery" = "sme-label-copy-schedule-dev-use1-cluster-01" Name = "GRPSNV-D3-EKS-Worker-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" "karpenter.sh/discovery" = "sme-label-copy-schedule-dev-use1-cluster-01" Name = "GRPSNV-D3-EKS-Worker-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-046b2be1a8abecabc" { description = "SG rule for LogsToElasticsearch_lcs-dev-es-01" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.0/26", "10.250.25.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.249.3.32/28", "10.12.214.128/25", "10.250.6.0/24", "10.251.12.0/22", "10.250.47.32/27", "10.249.4.192/28", ] description = "VPC-CIDR-1,2,3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.0/26", "10.250.25.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.249.3.32/28", "10.12.214.128/25", "10.250.6.0/24", "10.251.12.0/22", "10.250.47.32/27", "10.249.4.192/28", ] description = "VPC-CIDR-1,2,3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "VPC CIDR-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.119.0/25", ] description = "VPC CIDR-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.177.64/26", "10.11.119.0/25", "10.249.4.192/28", "10.250.47.32/27", "10.250.6.0/24", "10.251.12.0/22", "10.11.113.0/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.64/26", "10.11.119.0/25", "10.249.4.192/28", "10.250.47.32/27", "10.250.6.0/24", "10.251.12.0/22", "10.11.113.0/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.64/26", ] description = "VPC CIDR-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.47.32/27", ] description = "VPC CIDR-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC CIDR-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", "10.249.3.32/28", "10.12.214.128/25", "10.250.25.0/26", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "lcsd-LogsToElasticsearch_lcs-dev-es-01_SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "lcsd-LogsToElasticsearch_lcs-dev-es-01_SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "lcsd-LogsToElasticsearch_lcs-dev-es-01_SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-06a2302cd9e04df5f" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65534 }, ] name = "eks-cluster-sg-lcsd-use1-eks01-1116474416" tags = { "Name" = "eks-cluster-sg-lcsd-use1-eks01-1116474416" "kubernetes.io/cluster/lcsd-use1-eks01" = "owned" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Name" = "eks-cluster-sg-lcsd-use1-eks01-1116474416" "kubernetes.io/cluster/lcsd-use1-eks01" = "owned" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0560d4c85a993e45b" { description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", "10.12.0.0/16", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "k8s-stagegrp-grpsingr-1e40adf95e" tags = { "Name" = "grps-ingress-alb" "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "stage-grps-rr/grps-ingress-int" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } tags_all = { "Name" = "grps-ingress-alb" "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "ingress.k8s.aws/stack" = "stage-grps-rr/grps-ingress-int" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0edd6ea4b2458a8bf" { description = "Security Group for lcsd-use1-eks01" egress = [ { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.119.44/32", ] description = "GutRunner" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.214.134/32", ] description = "grpsd2-pgdbstbmg1-nv-pgb01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0255df43a1037a7f4", ] self = false to_port = 443 }, ] name = "lcsd-use1-eks01-ControlPlane-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "lcsd-use1-eks01-ControlPlane-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "lcsd-use1-eks01-ControlPlane-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0591ab1175cc996fa" { description = "GRPSNV-D3-GRPS-EXT-LB-SG" egress = [ { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "CLOUDOPS-7949" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GRPSNV-D3-GRPS-EXT-LB-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-GRPS-EXT-LB-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-GRPS-EXT-LB-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0eac7d2ef175a4339" { description = "Security Group for GRPSNV-D3-EKS-Cluster-SG" egress = [ { cidr_blocks = [ "10.11.113.0/26", "10.250.47.32/27", "10.11.177.64/26", "10.11.119.0/25", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.0/26", "10.250.47.32/27", "10.11.177.64/26", "10.11.119.0/25", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.113.0/26", "10.250.47.32/27", "10.11.177.64/26", "10.11.119.0/25", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.0/26", "10.250.47.32/27", "10.11.177.64/26", "10.11.119.0/25", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.96.132/32", ] description = "gtunxlvf15008.server.arvato-systems.de" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.202.1/32", ] description = "gtunxlvf15008.server.arvato-systems.de" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", "10.250.37.0/26", "10.11.114.32/27", "10.250.227.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", "10.12.214.128/25", "10.250.25.0/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-093e94cf33e9f1eb2", ] self = false to_port = 443 }, { cidr_blocks = [ "10.11.96.133/32", "10.11.96.134/32", "10.11.96.165/32", "10.11.96.166/32", ] description = "Arvato Systems" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 443 }, ] name = "GRPSNV-D3-EKS-Cluster-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-EKS-Cluster-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-EKS-Cluster-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0255df43a1037a7f4" { description = "SG rule for lcsd-use1-eks01 worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "Testing" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.11.113.32/28", ] description = "grpsd2-pgbouncer02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-1,2,3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-1,2,3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.134/32", ] description = "grpsd2-pgdbstbmg1" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.240.120/32", ] description = "qa-order-history-api.switchboard.fm" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.240.78/32", ] description = "qa-order-history-api.switchboard" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.120/32", ] description = "Testing" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.120/32", ] description = "Testing" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "CLSHRD-ANSIBLE" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "CLSHRD-ANSIBLE" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 11700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17530 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17530 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17530 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17710 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17710 }, { cidr_blocks = ["10.11.189.0/25", "10.11.187.176/28"] description = "digsysp3-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, ] ingress = [ { cidr_blocks = [ "10.11.113.32/28", ] description = "grpsd2-pgbouncer02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-1,2,3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC-CIDR-1,2,3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.134/32", ] description = "grpsd2-pgdbstbmg1" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.240.120/32", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clops-bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "CLSHRD-ANSIBLE" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "CLSHRD-ANSIBLE" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17530 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17530 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0edd6ea4b2458a8bf", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allowing ALB SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0591ab1175cc996fa", ] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allowing ALB SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-0591ab1175cc996fa", ] self = false to_port = 65534 }, { cidr_blocks = [] description = "lcsd-use1-eks01-ControlPlane-SG" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0edd6ea4b2458a8bf", ] self = false to_port = 443 }, { cidr_blocks = [] description = "lcsd-use1-eks01-Worker-node-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "lcsd-use1-eks01-Worker-node-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65534 }, ] name = "lcsd-use1-eks01-Worker-node-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "lcsd-use1-eks01-Worker-node-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "lcsd-use1-eks01-Worker-node-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-069667325c843fdb8" { description = "GRPSNV-D3-PGDBSIBMG1-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.250.243.0/26", "10.250.243.64/26"] description = "DX3-D1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.160/27", "10.12.246.64/26", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.249.3.32/28", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.249.3.32/28", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.25.0/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "GRPSNV-D3-PGBOUNCER-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-051007a62274c9251", ] self = false to_port = 0 }, { cidr_blocks = [ "10.11.112.160/28", "10.11.112.176/28" ] description = "To lcrsffd-pgdbotdsr2-cluster" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.113.32/27", "10.11.119.22/32" ] description = "grpsd2-utilities02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.11.113.39/32", "10.11.119.22/32"] description = "grpsd2-utilities02.smearsys.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = ["10.250.243.0/26", "10.250.243.64/26"] description = "DX3-D1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "cloudopsff-dbmonitor01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "cloudopsff-dbmonitor01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.219/32", "10.12.246.75/32", ] description = "cloudops Bastions" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.133/32", ] description = "gtunxlvz06526.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.134/32", ] description = "gtunxlvs07013.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.165/32", ] description = "gtunxlvv07016.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.166/32", ] description = "gtunxlvw07017.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "GRPSNV-D3-VPC-CIDR-1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.214.128/25", ] description = "lcsd-use1-eks01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.6.0/24", "10.251.12.0/22", ] description = "pods connection" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "162.49.202.1/32", ] description = "Ashburn Proxy for Arvato" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [] description = "GRPSNV-D3-PGDBSIBMG1-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 0 }, { cidr_blocks = [] description = "GRPSNV-D3-RDS01-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-060720910610cd2e5", ] self = false to_port = 65534 }, { cidr_blocks = [] description = "GRPSNV-D3-RDS01-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-060720910610cd2e5", ] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.119.0/28", ] description = "Access from EUC1 EKS cluster - subnet 1A" from_port = 5432 protocol = "tcp" to_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] security_groups = [] self = false }, { cidr_blocks = [ "10.11.119.16/28", ] description = "Access from EUC1 EKS cluster - subnet 1B" from_port = 5432 protocol = "tcp" to_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] security_groups = [] self = false }, { cidr_blocks = [ "10.11.112.160/28", "10.11.112.176/28" ] description = "From lcrsffd-pgdbotdsr2-cluster" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 } ] name = "GRPSNV-D3-PGDBSIBMG1-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-PGDBSIBMG1-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-PGDBSIBMG1-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-060720910610cd2e5" { description = "Created by RDS management console" egress = [ { cidr_blocks = [] description = "GRPSNV-D3-PGBOUNCER-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-051007a62274c9251"] self = false to_port = 65534 }, { cidr_blocks = [] description = "GRPSNV-D3-PGBOUNCER-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = ["sg-051007a62274c9251"] self = false to_port = 65534 }, { cidr_blocks = ["10.250.243.0/26", "10.250.243.64/26"] description = "DX3-D1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = ["10.11.113.39/32", "10.11.119.22/32"] description = "grpsd2-utilities02.smearsys.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = ["10.11.119.0/25", "10.250.6.0/24", "10.251.12.0/22"] description = "GRPS-D2-VPC-CIDR" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.11.176.200/32"] description = "cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.11.176.219/32"] description = "cloudopsff-bastion02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.12.214.128/25"] description = "GRPSNV-D3-VPC-CIDR-1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.12.246.75/32"] description = "clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.250.25.0/26"] description = "GRPSNV-D3-VPC-CIDR-2" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "GRPSNV-D3-PGDBSIBMG1-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-069667325c843fdb8"] self = false to_port = 65534 }, { cidr_blocks = ["10.11.119.0/28"] description = "grpsd2-(int-)pgbouncer03 " from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.250.243.0/26", "10.250.243.64/26"] description = "DX3-D1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "GRPSNV-D3-RDS01-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-RDS01-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-RDS01-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "sg-0af14a6a714a398ea" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [] name = "k8s-traffic-lcsduse1eks01-f7d7728989" tags = { "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "k8s-traffic-lcsduse1eks01-f7d7728989" } tags_all = { "elbv2.k8s.aws/cluster" = "lcsd-use1-eks01" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "k8s-traffic-lcsduse1eks01-f7d7728989" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "GRPSNV-D3-INT_LB-SG" { description = "GRPSNV-D3-INT_LB-SG" egress = [ { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.249.3.32/28", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.249.3.32/28", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", ] description = "SME-VPN" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GRPSNV-D3-INT_LB-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-INT_LB-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-INT_LB-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "GRPSNV-D3-GRPS-RR-EXT_LB-SG" { description = "GRPSNV-D3-GRPS-RR-EXT_LB-SG" egress = [ { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.214.128/25", "10.250.25.0/26", "10.250.6.0/24", "10.251.12.0/22", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0" ] description = "CLOUDOPS-12834" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GRPSNV-D3-GRPS-RR-EXT_LB-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-GRPS-RR-EXT_LB-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" Name = "GRPSNV-D3-GRPS-RR-EXT_LB-SG" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "security_group" { description = "Security group for AWS Cloud9 environment aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }] ingress = [] name = "aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a-InstanceSecurityGroup-1HD81IKV4NBBI" tags = { Name = "aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } tags_all = { Name = "aws-cloud9-appsync-sme-fwm401-2-c6d856d7d70f4c4ba53187191714953a" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" CLOPS_FW = "NO" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "uat-rdx-federation-ingress" { description = "UAT RDX Federation Ingress" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "10.11.0.0/16", "10.12.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", "10.12.111.102/32", "10.251.80.138/32", ] description = "VPN + DataDog" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "uat-rdx-federation-ingress" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "uat-rdx-federation-ingress" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "uat-rdx-federation-ingress" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "uat-shollie-ingress" { description = "UAT Shollie Ingress" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "10.11.0.0/16", "10.12.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", "10.12.28.68/32", "10.11.96.133/32", "10.11.96.134/32", "10.12.111.102/32", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "uat-shollie-ingress" tags = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "uat-shollie-ingress" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "RDX" "CLOPS_FW" = "NO" "Name" = "uat-shollie-ingress" } vpc_id = "vpc-071995abcfc106bd5" } resource "aws_security_group" "grps-use1-openobserve-alb-sg" { name = "grps-use1-openobserve-alb-sg" description = "Security group for OpenObserve ALB Ingress" vpc_id = "vpc-071995abcfc106bd5" ingress = [ { cidr_blocks = ["10.11.0.0/16", "10.12.0.0/16", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24"] description = "HTTP" from_port = 80 to_port = 80 protocol = "tcp" ipv6_cidr_blocks = [] prefix_list_ids = [] security_groups = [] self = false }, { cidr_blocks = ["10.11.0.0/16", "10.12.0.0/16", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24"] description = "HTTPS" from_port = 443 to_port = 443 protocol = "tcp" ipv6_cidr_blocks = [] prefix_list_ids = [] security_groups = [] self = false } ] egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "All outbound traffic" from_port = 0 to_port = 65535 protocol = "tcp" ipv6_cidr_blocks = [] prefix_list_ids = [] security_groups = [] self = false } ] tags = { "Name" = "grps-use1-openobserve-alb-sg" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Purpose" = "OpenObserve ALB Security Group" } tags_all = { "Name" = "grps-use1-openobserve-alb-sg" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Purpose" = "OpenObserve ALB Security Group" } } resource "aws_security_group" "grps-use-1-openobserve-rds-sg" { name = "prsd1-openobserve-rds-sg" description = "Security group for OpenObserve PostgreSQL RDS instance" vpc_id = "vpc-071995abcfc106bd5" ingress { description = "PostgreSQL from EKS worker nodes" from_port = 5432 to_port = 5432 protocol = "tcp" security_groups = ["sg-093e94cf33e9f1eb2"] } ingress { description = "AnsibleTower" from_port = 5432 to_port = 5432 protocol = "tcp" cidr_blocks = ["10.250.2.64/27"] ipv6_cidr_blocks = [] prefix_list_ids = [] security_groups = [] self = false } tags = { "Name" = "grps-use1-dev-openobserve-rds-sg" "Business-Unit" = "GRPS" "Environment" = "Dev" "Owner" = "Richard Mayer" "Patch Group" = "General" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" "Purpose" = "OpenObserve RDS Security Group" } }