resource "aws_network_acl" "acl-032f417f38408a8c8" {
  #checkov:skip=CKV2_AWS_1: Ensure that all NACL are attached to subnets
  #checkov:skip=CKV_AWS_229: Ensure no NACL allow ingress from 0.0.0.0:0 to port 21
  #checkov:skip=CKV_AWS_232: Ensure no NACL allow ingress from 0.0.0.0:0 to port 22
  #checkov:skip=CKV_AWS_230: Ensure no NACL allow ingress from 0.0.0.0:0 to port 20
  #checkov:skip=CKV_AWS_231: Ensure no NACL allow ingress from 0.0.0.0:0 to port 3389
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "-1"
    icmp_type  = "-1"
    protocol   = "1"
    rule_no    = "120"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.117.0/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "118"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.119.128/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "112"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "110"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.192/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "89"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.201/32"
    from_port  = "5432"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "111"
    to_port    = "5432"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.34.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "116"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.37.10/32"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "115"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.37.9/32"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "114"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.55.128/27"
    from_port  = "6432"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "119"
    to_port    = "6432"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.2.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "87"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.6.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "113"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.9.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "117"
    to_port    = "0"
  }

  subnet_ids = ["subnet-01dd956810068e179", "subnet-0990204d4c64dec6a", "subnet-09d3597ffc42063f5", "subnet-0df78a601cc0e472b", "subnet-0ebf6ab9ad3816813"]

  tags = {
    Name = "MCSEC-D1-DEFAULT-NACL"
  }

  tags_all = {
    Name = "MCSEC-D1-DEFAULT-NACL"
  }

  vpc_id = "vpc-09cf5ebc923ef0639"
}