#Anthony Vitale MARCH 13 2025 Added The SG sg-0ae7c6bc9991ed4b3(GRPS-P2-RDS-PGDBSPBMG1-SG) to its own SG sg-0ae7c6bc9991ed4b3(GRPS-P2-RDS-PGDBSPBMG1-SG) for postgresql port 5432 in both ingress and egress # because without this the 2 Aurora Clusters lsp-rds-pgdbspsme1-prod-01.cluster-cwj2pnzcclfh.eu-central-1.rds.amazonaws.com and lsp-rds-pgdbspbmg1-prod-01-cluster.cluster-cwj2pnzcclfh.eu-central-1.rds.amazonaws.com which # Are actually using the same SG cannot seem to talk to each other. # # See Here From within lsp-rds-pgdbspsme1-prod-01.cluster-cwj2pnzcclfh.eu-central-1.rds.amazonaws.com Running this # select t1.table_prefix # FROM dblink('host=lsp-rds-pgdbspbmg1-prod-01-cluster.cluster-cwj2pnzcclfh.eu-central-1.rds.amazonaws.com port=5432 dbname=ar_db user=XXX password=XXX'::text, 'select table_prefix from smetools.table_prefix_to_schema') t1(table_prefix varchar) # ; # # Gives this # # ERROR: could not establish connection # DETAIL: connection to server at "lsp-rds-pgdbspbmg1-prod-01-cluster.cluster-cwj2pnzcclfh.eu-central-1.rds.amazonaws.com" (10.11.113.187), port 5432 failed: Connection timed out # Is the server running on that host and accepting TCP/IP connections? # # resource "aws_security_group" "sg-0ac7a96ddae21443f" { description = "SG rule for sme-label-copy-schedule-prod-euc1-cluster-01 worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 8230 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8230 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 9031 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9031 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps-CLOUDOPS-18992" from_port = 11706 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11706 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "GDS-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "GDS-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.19.128/28", ] description = "EOM-FF-P-XAPP-1C" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.45/32", ] description = "InfoBlox-2" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.45/32", ] description = "InfoBlox-2" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 4200 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 4200 }, { cidr_blocks = [ "172.34.29.0/27", ] description = "EOM-FF-P-XAPP-1A" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.29.32/27", ] description = "EOM-FF-P-XAPP-1B" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.92.7/32", ] description = "EROS Prod Copyright DB" from_port = 9035 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9035 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.11.188.43/32", "10.11.188.92/32" ] description = "digsysd-ocm" from_port = 1482 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1482 }, { cidr_blocks = [ "10.11.110.231/32", "10.11.110.249/32", "10.11.107.206/32", "10.11.107.200/32" ] description = "digsyss-ocm & digsysp-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, { cidr_blocks = [ "10.250.70.0/24", "10.11.187.0/25", "10.249.1.48/28" ] description = "DIGSYS-S3" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 9093 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9093 }, { cidr_blocks = [ "10.11.189.0/26", "10.11.189.64/26" ] description = "dbmiprod" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.189.75/32", "10.11.187.190/32", "10.11.189.49/32" ] description = "MSK Access ( digsysp3msk01 )" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = ["10.11.189.0/25", "10.11.187.176/28"] description = "digsysp3-ocm" from_port = 1480 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1480 }, { cidr_blocks = ["162.49.251.20/32"] description = "dbsperns7.csservice.arvato-systems.de" from_port = 9035 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9035 }, ] ingress = [ { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 4000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-03045d20ac76fd2d7"] self = false to_port = 11000 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.119.128/26", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.119.128/26", ] description = "VPC-CIDR-6" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.178.160/27", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SharedVPC1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.192/26", ] description = "VPC_CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.26.192/26", ] description = "VPC_CIDR-5" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00b130368a791c04f", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00b130368a791c04f", ] self = false to_port = 65535 }, # { # cidr_blocks = [] # description = "elbv2.k8s.aws/targetGroupBinding=shared" # from_port = 4000 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [ # "sg-03045d20ac76fd2d7", # ] # self = false # to_port = 4000 # }, ] name = "sme-label-copy-schedule-prod-euc1-cluster-01-Worker-node-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Patching" = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "sme-label-copy-schedule-prod-euc1-cluster-01-Worker-node-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Patching" = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "sme-label-copy-schedule-prod-euc1-cluster-01-Worker-node-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-03045d20ac76fd2d7" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }] ingress = [] name = "k8s-traffic-smelabelcopyscheduleprodeuc1cluster01-744bca434c" tags = { eiso-exception = "aws.08.30" "elbv2.k8s.aws/cluster" = "sme-label-copy-schedule-prod-euc1-cluster-01" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "sme-label-copy-schedule-prod-euc1-cluster-01-Shared-Backend-SG" } tags_all = { eiso-exception = "aws.08.30" "elbv2.k8s.aws/cluster" = "sme-label-copy-schedule-prod-euc1-cluster-01" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "sme-label-copy-schedule-prod-euc1-cluster-01-Shared-Backend-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-073685f5cc935cabc" { description = "Allow pgbouncer access from Orchard - 10-01-2020 - tayl054" egress = [ { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.110.0.0/16", "10.120.0.0/16", ] description = "Orchard cidr block" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "orchard_access" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "orchard_access" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "orchard_access" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-076ac1ee9e090796f" { description = "GRPS-P2-EC2-DBSPBMG1-PGB01-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "VPC-CIDR-Dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "VPC-CIDR-Dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", ] description = "GRPS-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.215.128/25", "10.250.97.0/24", ] description = "GRPS-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [] description = "aoma-rds-prod-RDS-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0a62cdd529a710389", ] self = false to_port = 5432 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["10.250.97.192/26"] description = "grpsnv-p3-rds-sng" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.116.64/26", "10.219.24.0/21" ] description = "dx3-p" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.250.97.192/26"] description = "grpsnv-p3-rds-sng" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.250.6.0/24", ] description = "GRPS-D2" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.164/32", "10.11.96.167/32", ] description = "CLOUDOPS-20303" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.215.224/27", "10.12.215.192/27", ] description = "GRPS-PROD-US-EKS" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "Bastion" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.171/32", ] description = "grpsp2-dbspbmg1-pgb01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.113.32/28", ] description = "GRPS-D2-APP-1A" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.37/32", ] description = "Bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.219.24.0/21", ] description = "dx-prod" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.39/32", ] description = "grpsd2-utilities02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.45/32", ] description = "grpsd2-utilities01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-03d00384a05c6b8c6", ] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.133/32", ] description = "gtunxlvz06526.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.134/32", ] description = "gtunxlvs07013.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.165/32", ] description = "gtunxlvv07016.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.166/32", ] description = "gtunxlvw07017.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.64/27", ] description = "Tower" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "TOWER" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "GRPS-D2 VPC-CIDR" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-050fc00a5dd7d4eb2", ] self = false to_port = 6432 }, { cidr_blocks = [] description = "grpsd2-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09d1a4e2013832a14", ] self = false to_port = 22 }, { cidr_blocks = [] description = "sg-09d1a4e2013832a14" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09d1a4e2013832a14", ] self = false to_port = 6432 }, ] name = "GRPS-P2-EC2-DBSPBMG1-PGB01-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-EC2-DBSPBMG1-PGB01-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-EC2-DBSPBMG1-PGB01-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-0886956765e902aad" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.119.128/26", "10.11.178.160/27", "10.250.6.0/24", "10.11.113.128/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, ] name = "eks-cluster-sg-sme-label-copy-schedule-prod-euc1-cluster-01-1381393050" tags = { "Name" = "eks-cluster-sg-sme-label-copy-schedule-prod-euc1-cluster-01-1381393050" "kubernetes.io/cluster/sme-label-copy-schedule-prod-euc1-cluster-01" = "owned" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Name" = "eks-cluster-sg-sme-label-copy-schedule-prod-euc1-cluster-01-1381393050" "kubernetes.io/cluster/sme-label-copy-schedule-prod-euc1-cluster-01" = "owned" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-050fc00a5dd7d4eb2" { description = "GRPS-P2-EC2-SYMMETRICDS01-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "DNS resolution not working" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "DNS resolution not working" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "gtunxlvu07015.server.arvato-systems.de" from_port = 7050 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 7050 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.250.6.0/24", ] description = "GRPS-D2" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "Bastion" from_port = 31417 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 31417 }, { cidr_blocks = [ "10.11.113.37/32", ] description = "grpsd2-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09d1a4e2013832a14", ] self = false to_port = 22 }, { cidr_blocks = [ "10.11.113.37/32", ] description = "grpsd2-bastion01" from_port = 31417 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 31417 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.96.165/32", ] description = "gtunxlvv07016.server.arvato-systems.de" from_port = 31417 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 31417 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.64/27", ] description = "Tower" from_port = 31417 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 31417 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "TOWER" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "INT_LB" from_port = 31417 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0eaaca298bcca5b5e", ] self = false to_port = 31417 }, ] name = "GRPS-P2-EC2-SYMMETRICDS01-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-EC2-SYMMETRICDS01-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-EC2-SYMMETRICDS01-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-0c47b38cd8df197b7" { description = "GRPS-P2-VPCEP-GSIRT-SG" egress = [ { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.113.128/26", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", ] description = "" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", ] description = "" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "GRPS-P2-VPCEP-GSIRT-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-VPCEP-GSIRT-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-VPCEP-GSIRT-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-00b130368a791c04f" { description = "Security Group for sme-label-copy-schedule-prod-euc1-cluster-01" egress = [ { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 4200 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 4200 }, ] ingress = [ { cidr_blocks = [ "10.11.176.200/32", ] description = "DBMONITOR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "SME-VPN" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "TowerVPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0ac7a96ddae21443f", ] self = false to_port = 443 }, ] name = "sme-label-copy-schedule-prod-euc1-cluster-01-ControlPlane-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Patching" = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "sme-label-copy-schedule-prod-euc1-cluster-01-ControlPlane-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Patching" = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Name" = "sme-label-copy-schedule-prod-euc1-cluster-01-ControlPlane-SG" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-017b236ab4fe46a65" { description = "lcs-prod-es-01-sg" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "GRPS-P2-VPC-CDIR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "GRPS-P2-VPC-CDIR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "GRPS-P2-VPC-CDIR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "GRPS-P2-VPC-CDIR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P2-VPC-CDIR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS-P2-VPC-CDIR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "LCS-PROD-ES-01-SG" tags = { "Name" = "LCS-PROD-ES-01-SG" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Patching" = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } tags_all = { "Name" = "LCS-PROD-ES-01-SG" "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Patching" = "General" "Project-Name" = "GRPS" "CLOPS_FW" = "NO" "Team-Name" = "DDEXWATCHER-EROS-GRPS-SCIM-RDX-RDXTRXMGR" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-0782770299c6c69da" { description = "GRPS-P2-LAMBDA-SECRET-ROTATION" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", "10.249.7.144/28", ] description = "VPC-CIDRs" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", "10.249.7.144/28", ] description = "VPC-CIDRs" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "INFOBLOX" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "INFOBLOX" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, ] ingress = [ { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", "10.249.7.144/28", ] description = "VPC-CIDRs" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", "10.11.178.160/27", "10.11.119.128/26", "10.250.6.0/24", "10.249.7.144/28", ] description = "VPC-CIDRs" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "GRPS-P2-LAMBDA-SECRET-ROTATION" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-LAMBDA-SECRET-ROTATION" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-LAMBDA-SECRET-ROTATION" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-0ae7c6bc9991ed4b3" { description = "GRPS-P2-RDS-PGDBSPBMG1-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.46/32", ] description = "grpsd2-pgedb01.smearsys.com" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "VPC-CIDR-Dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "VPC-CIDR-Dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.42/32", ] description = "" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.224/27", ] description = "AOMA-P2-RDS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.114.224/27", ] description = "AOMA-P2-RDS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.193.233/32", ] description = " ca-prod-report-db.smeanalyticsapps.com" from_port = 5439 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5439 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "AOMAP-RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0a62cdd529a710389", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "GRPS-P2-RDS-PGDBSPBMG1-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 5432 }, { cidr_blocks = ["10.11.109.16/28", "10.11.109.48/28"] description = "GRPS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.106.128/25", "10.11.114.192/26", "172.34.27.0/24", "10.250.6.0/24", ] description = "AOMA-P1" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.171/32", ] description = "grpsp2-dbspbmg1-pgb02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.32/28", "10.11.113.48/28", "10.11.113.176/28", ] description = "GRPS-D2 VPC-CIDR" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.114.224/28", "10.11.114.240/28", ] description = "AOMA-P-RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "fivetran-proxy" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = ["sg-0ca79dbe1d1b510a2"] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "GRPS-P2 VPC-CIDR" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-050fc00a5dd7d4eb2", "sg-076ac1ee9e090796f", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "GRPS-P2-APP1-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0f289d4ea3dca394f", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "RDS Secret Rotation lambda" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0782770299c6c69da", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "aoma-rds-prod-RDS-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0a62cdd529a710389", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "grpsp2-dbspbmg1-read-pgb01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-034e4976917d29090", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.11.177.64/26", "10.250.47.32/27", "10.249.4.192/28", ] description = "GRPS-D2-VPC" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "GRPS-P2-RDS-PGDBSPBMG1-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 5432 }, { cidr_blocks = [ "10.12.215.224/27", "10.12.215.192/27" ] description = "GRPS-PROD-US-EKS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.109.0/26", ] description = "LCRSFF-P" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = ["10.11.109.16/28", "10.11.109.48/28"] description = "GRPS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.96.164/32", ] description = "gtunxlvj19640.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.96.165/32", ] description = "gtunxlvk19641.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.116.64/26", ] description = "dx3-p" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.96.166/32", ] description = "gtunxlvv07016.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.96.167/32", ] description = "gtunxlvw07017.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.96.133/32", ] description = "gtunxlvz06526.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.96.134/32", ] description = "gtunxlvs07013.server.arvato-systems.de" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "GRPS-P2-RDS-PGDBSPBMG1-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-RDS-PGDBSPBMG1-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-RDS-PGDBSPBMG1-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-0eaaca298bcca5b5e" { description = "GRPS-P2-ELB-INT_LB-SG" egress = [ { cidr_blocks = [ "10.11.113.128/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.119.128/26", "10.11.178.160/27", "10.250.26.192/26", "10.249.7.144/28", "10.11.113.128/26", "10.250.6.0/24" ] description = "VPC_CIDRs" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 } ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "GRPS-P2-ELB-INT_LB-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-ELB-INT_LB-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-ELB-INT_LB-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-0f289d4ea3dca394f" { description = "GRPS-P2-APP1-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.32/28", ] description = "grpsd2-application02.smearsys.com" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.119.11/32", ] description = "grpsd2-application03.smearsys.com" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.178.160/27", "10.11.119.128/26", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "10.11.113.32/28", ] description = "grpsd2-application02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.119.11/32", ] description = "grpsd2-application03.smearsys.com" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "GRPS-P2-APP1-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-APP1-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-APP1-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-034e4976917d29090" { description = "GRPS-P2-PGB-RO-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "VPC-CIDR-Dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.0/26", ] description = "VPC-CIDR-Dev" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "InfoBlox" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [] description = "AOMAP-RDS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0a62cdd529a710389", ] self = false to_port = 5432 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, ] ingress = [ { cidr_blocks = [ "10.11.113.0/26", "10.11.119.0/25", "10.250.6.0/24", ] description = "GRPS-D2" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "BASTION" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.128/26", ] description = "BASTION" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.11.113.32/28", ] description = "GRPS-D2-APP-1A" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.113.37/32", ] description = "ssh from grpsd2-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09d1a4e2013832a14", ] self = false to_port = 22 }, { cidr_blocks = [ "10.11.113.45/32", ] description = "6432 from grpsd2-utilities01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-03d00384a05c6b8c6", ] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.133/32", ] description = "6432 from gtunxlvz06526.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.134/32", ] description = "6432 from gtunxlvs07013.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.165/32", ] description = "6432 from gtunxlvv07016.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.96.166/32", ] description = "6432 from gtunxlvw07017.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.213.42/32", ] description = "8080 from Bastion" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.64/27", ] description = "Tower" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "49.207.210.15/32", ] description = "Phani Venkata" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [] description = "6432 from GRPS-D2-BASTION-SG" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09d1a4e2013832a14", ] self = false to_port = 6432 }, { cidr_blocks = [] description = "6432 from GRPS-P2-EC2-SYMMETRICDS01-SG" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-050fc00a5dd7d4eb2", ] self = false to_port = 6432 }, { cidr_blocks = [] description = "6432 from Orchard vpc peering" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-073685f5cc935cabc", ] self = false to_port = 6432 }, { cidr_blocks = [] description = "Orchard-FiveTran - remove proxy DB access for 54.175.161.146/32" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-003d21362b208aeb6", ] self = false to_port = 6432 }, ] name = "GRPS-P2-PGB-RO-SG" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "GRPS-P2-PGB-RO-SG" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" "Name" = "GRPS-P2-PGB-RO-SG" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "sg-003d21362b208aeb6" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "default" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "default" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "console-grps-ingress-alb" { description = "console-grps-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }] name = "console-grps-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "console-grps-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "console-grps-ingress-alb" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "federation-ingress-alb-ext" { description = "federation-ingress-alb-ext" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [{ cidr_blocks = ["84.17.180.232/32", "44.199.10.18/32"] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }] name = "federation-ingress-alb-ext" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "federation-ingress-alb-ext" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "federation-ingress-alb-ext" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "console-releaserunway-ingress-alb" { description = "console-releaserunway-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }] name = "console-releaserunway-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "console-releaserunway-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "console-releaserunway-ingress-alb" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "federation-ingress-alb" { description = "federation-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [{ cidr_blocks = ["10.11.0.0/16", "10.12.0.0/16", "162.49.0.0/16", "192.168.10.0/23", "192.168.12.0/24", "192.168.155.0/24", "192.168.227.0/24", "10.250.35.0/25", "10.0.0.0/8"] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }] name = "federation-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "federation-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "federation-ingress-alb" } vpc_id = "vpc-02b83a184edcedd2e" } resource "aws_security_group" "shollie-ingress-alb" { description = "shollie-ingress-alb" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [{ cidr_blocks = ["10.12.111.102/32", "10.11.96.164/32", "10.11.96.165/32", "10.11.96.166/32", "10.11.96.167/32", "10.12.28.68/32"] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }] name = "shollie-ingress-alb" tags = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "shollie-ingress-alb" } tags_all = { "Business-Unit" = "GRPS" "Environment" = "Prod" "Owner" = "Richard Mayer" "Project-Code" = "2000-0497G" Patching = "General" "Project-Name" = "GRPS" CLOPS_FW = "NO" Name = "shollie-ingress-alb" } vpc_id = "vpc-02b83a184edcedd2e" }