resource "aws_network_acl" "acl-05ea040b438cb8828" {
  # checkov:skip=CKV2_AWS_1:Ensure that all NACL are attached to subnets
  # checkov:skip=CKV_AWS_231:Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "4"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  subnet_ids = ["subnet-0159c2fa85b41e125", "subnet-02ba7d583ac8ef458", "subnet-0441afbd3261862e4"]

  tags = {
    Business-unit = "GRPS"
    Environment   = "PROD"
    Name          = "GRPS-P1-PUB-NACL"
    Owner         = "Richard Mayer"
    Project-code  = "2000-0497G"
    Project-name  = "GRPS"
  }

  tags_all = {
    Business-unit = "GRPS"
    Environment   = "PROD"
    Name          = "GRPS-P1-PUB-NACL"
    Owner         = "Richard Mayer"
    Project-code  = "2000-0497G"
    Project-name  = "GRPS"
  }

  vpc_id = "vpc-019370c87583a0502"
}

resource "aws_network_acl" "acl-0944cb3556b1937c4" {
  # checkov:skip=CKV2_AWS_1:Ensure that all NACL are attached to subnets
  # checkov:skip=CKV_AWS_231:Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  subnet_ids = ["subnet-03b9bc7ead00f546d", "subnet-0835bbd963d720893"]

  tags = {
    Business-unit = "GRPS"
    Environment   = "PROD"
    Name          = "GRPS-P1-RDS-NACL"
    Owner         = "Richard Mayer"
    Project-code  = "2000-0497G"
    Project-name  = "GRPS"
  }

  tags_all = {
    Business-unit = "GRPS"
    Environment   = "PROD"
    Name          = "GRPS-P1-RDS-NACL"
    Owner         = "Richard Mayer"
    Project-code  = "2000-0497G"
    Project-name  = "GRPS"
  }

  vpc_id = "vpc-019370c87583a0502"
}

resource "aws_network_acl" "acl-0e3b5580bd3112d21" {
  # checkov:skip=CKV2_AWS_1:Ensure that all NACL are attached to subnets
  # checkov:skip=CKV_AWS_231:Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "6"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "5"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "7"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "8"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "3"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "4"
    to_port    = "0"
  }

  subnet_ids = ["subnet-0356503414af7dabd", "subnet-04c08e2d69a8879f1", "subnet-072827f6baf03661f", "subnet-086e962dc264a2676", "subnet-0a4e3f337be70942e", "subnet-0be8065e2f8ec0f5d", "subnet-0d4cf89802bc4a156", "subnet-0ebc0635371a7ad3d", "subnet-0fa7b50a0a7eadd6a"]

  tags = {
    Business-unit = "GRPS"
    Environment   = "PROD"
    Name          = "GRPS-P1-APP-NACL"
    Owner         = "Richard Mayer"
    Project-code  = "2000-0497G"
    Project-name  = "GRPS"
  }

  tags_all = {
    Business-unit = "GRPS"
    Environment   = "PROD"
    Name          = "GRPS-P1-APP-NACL"
    Owner         = "Richard Mayer"
    Project-code  = "2000-0497G"
    Project-name  = "GRPS"
  }

  vpc_id = "vpc-019370c87583a0502"
}

resource "aws_network_acl" "acl-0ff359e5278e2c8cb" {
  # checkov:skip=CKV2_AWS_1:Ensure that all NACL are attached to subnets
  # checkov:skip=CKV_AWS_231:Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  vpc_id = "vpc-019370c87583a0502"
}