resource "aws_security_group" "sg-0dec89740238a0922" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }] ingress = [{ cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }] name = "eks-cluster-sg-sme-label-copy-schedule-prod-use1-cluster-01-1688910650" tags = { Name = "eks-cluster-sg-sme-label-copy-schedule-prod-use1-cluster-01-1688910650" "kubernetes.io/cluster/sme-label-copy-schedule-prod-use1-cluster-01" = "owned" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { Name = "eks-cluster-sg-sme-label-copy-schedule-prod-use1-cluster-01-1688910650" "kubernetes.io/cluster/sme-label-copy-schedule-prod-use1-cluster-01" = "owned" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "sg-0ae8abfff1c66fb34" { description = "Security Group for lcsp-use1-eks01" egress = [ { cidr_blocks = [ "10.12.215.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.97.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.97.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.12.246.0/25", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-03efaeebb5a6d6af0", ] self = false to_port = 443 }, ] name = "lcsp-use1-eks01-ControlPlane-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "lcsp-use1-eks01-ControlPlane-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "lcsp-use1-eks01-ControlPlane-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "sg-006d61968fbe27c9c" { description = "GRPS-P1-RDS-PG-SG" egress = [ { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02.smecloudops.com" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02.smecloudops.com" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", ] description = "GRPS-P1-VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", ] description = "GRPS-P1-VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "cloudops-bastion01.smecloudops.com" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "cloudops-bastion01.smecloudops.com" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P1-VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P1-VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.97.0/24", ] description = "GRPS-P1-VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.97.0/24", ] description = "GRPS-P1-VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.109.16/28", "10.11.109.48/28" ] description = "GRPS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = ["10.11.113.39/32", "10.11.119.22/32"] description = "grpsd2-utilities02.smearsys.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.215.192/26", "10.250.6.0/24", "10.250.97.96/27", "10.250.97.128/26", ] description = "VPC APP Subnets" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.250.47.32/27", "10.249.4.192/28", "10.11.178.176/28", ] description = "GRPS-D2" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.109.16/28", "10.11.109.48/28" ] description = "GRPS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "GRPS-P1-RDS-PG-SG" tags = { "Name" = "GRPS-P1-RDS-PG-SG" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" } tags_all = { "Name" = "GRPS-P1-RDS-PG-SG" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "sg-0cca7203cbb6e778b" { description = "GRPS-P1-PGBOUNCER-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.215.128/25", ] description = "GRPS-P1-VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", ] description = "GRPS-P1-VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.160/27", "10.12.246.64/26", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P1-VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P1-VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.97.0/24", ] description = "GRPS-P1-VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.97.0/24", ] description = "GRPS-P1-VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.75.150/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.75.150/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.39/32", "10.11.119.22/32" ] description = "grpsd2-utilities02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "cloudopsff-dbmonitor01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "cloudopsff-dbmonitor01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.133/32", ] description = "gtunxlvz06526.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.134/32", ] description = "gtunxlvs07013.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.165/32", ] description = "gtunxlvv07016.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.166/32", ] description = "gtunxlvw07017.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.215.128/25", ] description = "GRPS-P1-VPC-CIDR-1" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-D2-VPC-CIDR-3" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.97.0/24", ] description = "GRPS-P1-VPC-CIDR-2" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "162.49.202.1/32", ] description = "Ashburn Proxy IP for Arvato" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.31.13.0/24", "10.31.14.0/24", "10.31.15.0/24", ] description = "GDB Delphi QA private subnets" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.32.13.0/24", "10.32.14.0/24", "10.32.15.0/24", ] description = "GDB Delphi Stage private subnets" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.33.13.0/24", "10.33.14.0/24", "10.33.15.0/24", ] description = "GDB Delphi Prod private subnets" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, ] name = "GRPS-P1-PGBOUNCER-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-PGBOUNCER-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-PGBOUNCER-SG" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "sg-0136b91ebf584b5de" { description = "GRPS-P1-GSIRT-SG" egress = [ { cidr_blocks = [ "10.250.97.0/24", "10.250.6.0/24", "10.12.215.128/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.97.0/24", "10.250.6.0/24", "10.12.215.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = [ "10.250.97.0/24", "10.250.6.0/24", "10.12.215.128/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.97.0/24", "10.250.6.0/24", "10.12.215.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "GRPS-P1-GSIRT-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-GSIRT-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-GSIRT-SG" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "sg-03efaeebb5a6d6af0" { description = "SG rule for lcsp-use1-eks01 worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.160/27", "10.12.246.64/26", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["10.11.189.0/25", "10.11.187.176/28"] description = "digsysp3-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, ] ingress = [ { cidr_blocks = [ "10.12.215.128/25", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "TFC Utils" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "lcsp-use1-eks01-Worker-node-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "lcsp-use1-eks01-Worker-node-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "lcsp-use1-eks01-Worker-node-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "sg-0054c01c9ff16c215" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "default" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "default" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "lcs-prod-es-use1-sg" { description = "lcs-prod-es-use1-sg" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "GRPS-P2-VPC-CDIR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "GRPS-P2-VPC-CDIR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26" ] description = "GRPS-P2-VPC-CDIR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26" ] description = "GRPS-P2-VPC-CDIR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P2-VPC-CDIR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P2-VPC-CDIR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26" ] description = "VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26" ] description = "VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "LCS-PROD-ES-USE1-SG" tags = { "Name" = "LCS-PROD-ES-USE1-SG" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Name" = "LCS-PROD-ES-USE1-SG" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "GRPS-P1-EKS-Worker-SG" { description = "SG rule for GRPS-P1-EKS Worker Nodes" egress = [ { cidr_blocks = [ "10.12.252.64/26" ] description = "SWITCHBOARD-PROD-APP" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.187.176/28", "10.11.189.0/25" ] description = "DIGSYS-P3-IAPP" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.180.128/26", ] description = "SME-GLOBAL-MSK-PROD" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 9031 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9031 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 8230 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8230 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 11706 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11706 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 17710 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 17710 }, { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.26.192/26", ] description = "grpsd2-pgbouncer02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "162.49.251.209/32", ] description = "tsmegrps.arvato-systems.de" from_port = 11700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 17530 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.0/24", "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.0/24", "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.11.188.43/32", "10.11.188.92/32" ] description = "digsysd-ocm" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "10.11.110.231/32", "10.11.110.249/32", "10.11.107.206/32", "10.11.107.200/32" ] description = "digsyss-ocm & digsysp-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, { cidr_blocks = [ "10.250.70.0/24", "10.11.187.0/25", "10.249.1.48/28" ] description = "DIGSYS-S3" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 9093 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9093 }, { cidr_blocks = [ "10.11.113.160/28", "10.11.113.176/28" ] description = "GRPS-PROD-EU-RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.160/28" ] description = "grpsp2-dbspbmg1-pgb02.smearsys.com" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = ["162.49.251.20/32"] description = "Arvato Proxy" from_port = 9035 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9035 }, { cidr_blocks = ["10.11.189.0/26", "10.11.189.64/26"] description = "dbmiprod" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.11.189.0/25", "10.11.187.176/28"] description = "digsysp3-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, ] ingress = [ { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 4000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0ebada0612307b337"] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "FF-Bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", "10.12.237.0/24", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", "10.12.237.0/24", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 } ] name = "GRPS-P1-EKS-Worker-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-EKS-Worker-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-EKS-Worker-SG" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "GRPS-P1-EKS-Cluster-SG" { description = "Security Group for GRPS-P1-EKS-Cluster-SG" egress = [ { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.250.47.32/27", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.250.47.32/27", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/24", "10.250.2.0/24", "10.12.237.0/24", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/24", "10.250.2.0/24", "10.12.237.0/24", ] description = "VA-Shared" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 } ] ingress = [ { cidr_blocks = [ "10.12.246.0/24", "10.11.114.32/27", "10.250.37.0/26", "10.250.2.0/24", "10.12.237.0/24", "10.250.227.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.250.47.32/27", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.250.47.32/27", ] description = "GRPS-VPC-CIDR-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ aws_security_group.GRPS-P1-EKS-Worker-SG.id ] self = false to_port = 443 }, { cidr_blocks = ["10.11.96.132/32", "162.49.202.1/32"] description = "Arvato GH Actions Runner" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 } ] name = "GRPS-P1-EKS-Cluster-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-EKS-Cluster-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-EKS-Cluster-SG" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "GRPS-P1-ELB-INT_LB-SG" { description = "GRPS-P1-ELB-INT_LB-SG" egress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", "10.250.6.0/24" ] description = "VPC_CIDRs" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 } ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GRPS-P1-ELB-INT_LB-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-ELB-INT_LB-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P1-ELB-INT_LB-SG" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "rdx-federation-ingress-alb" { description = "rdx-federation-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "rdx-federation-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "rdx-federation-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "rdx-federation-ingress-alb" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "smelabelcopyscheduleproduse1cluster01-backend-traffic-shared" { description = "smelabelcopyscheduleproduse1cluster01-backend-traffic-shared" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [] name = "smelabelcopyscheduleproduse1cluster01-backend-traffic-shared" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "smelabelcopyscheduleproduse1cluster01-backend-traffic-shared" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "smelabelcopyscheduleproduse1cluster01-backend-traffic-shared" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "rdx-federation-ext-ingress-alb" { description = "rdx-federation-ext-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "44.199.10.18/32", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "84.17.180.232/32", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "rdx-federation-ext-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "rdx-federation-ext-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "rdx-federation-ext-ingress-alb" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "akhq-ingress-alb" { description = "akhq-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "akhq-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "akhq-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "akhq-ingress-alb" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "console-releaserunway-ingress-alb" { description = "console-releaserunway-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "console-releaserunway-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "console-releaserunway-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" } vpc_id = "vpc-019370c87583a0502" } resource "aws_security_group" "grpsweb-console" { description = "grpsweb-console" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0" ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "grpsweb-console" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "grpsweb-console" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "grpsweb-console" } vpc_id = "vpc-019370c87583a0502" }