resource "aws_security_group" "sg-0e91f6c4ae63ec8fa" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-0f2db3d8d44d4f930" { description = "AWS created security group for d-99670f76b1 directory controllers" egress = [{ cidr_blocks = ["10.11.117.0/24"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = ["10.11.117.0/24"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }] ingress = [{ cidr_blocks = ["10.11.117.0/24"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = ["10.11.117.0/24"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }] name = "d-99670f76b1_controllers" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-0dc9b8795b6ddeedb" { description = "SG rule for mc-rds-prod RDS" egress = [ { cidr_blocks = [ "10.11.117.64/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "MCSEC pgbouncer" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-030982104830f4d7b", ] self = false to_port = 5432 }, ] name = "mc-rds-prod-RDS-SG" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-0c37276ca90b9b3ed" { description = "Amazon WorkSpaces Security Group" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 1024 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 123 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 445 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 445 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "SME Network" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "SME Network" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", "162.49.0.0/16", "10.12.224.0/24", "10.11.34.0/24", "10.11.37.9/32", "10.11.37.10/32", "160.33.84.0/22", "160.33.88.0/22", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", "162.49.0.0/16", "10.12.224.0/24", "10.11.34.0/24", "10.11.37.9/32", "10.11.37.10/32", "160.33.84.0/22", "160.33.88.0/22", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 53 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [] description = "" from_port = 587 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, ] ingress = [ { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC" from_port = 3389 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3389 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.224.0/24", "162.49.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.224.0/24", "162.49.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.245.141/32", ] description = "DesktopCentralServerIP_DEV" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.245.141/32", ] description = "DesktopCentralServerIP_DEV" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "DesktopCentralServerIP" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "DesktopCentralServerIP" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "d-9967233883_workspacesMembers" tags = { "Created by Amazon WorkSpaces" = "Amazon WorkSpaces" "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Created by Amazon WorkSpaces" = "Amazon WorkSpaces" "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-086d38a3c89851d23" { description = "AWS created security group for d-996723597e directory controllers" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 1024 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 123 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.117.64/26", "10.12.224.0/24", "162.49.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", "10.12.224.0/24", "162.49.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 53 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [] description = "" from_port = 587 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, ] ingress = [ { cidr_blocks = [ "10.11.117.64/26", "10.12.224.0/24", "162.49.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", "10.12.224.0/24", "162.49.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "d-996723597e_controllers" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-030982104830f4d7b" { description = "MCSEC-P1-PGBOUNCER-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC-CIDR MCSEC-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC-CIDR MCSEC-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 } ] ingress = [ { cidr_blocks = [ "10.11.117.96/27", "10.11.36.15/32", ] description = "degtluv0334.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.184.64/26", ] description = "mcond-del-prod-02" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.33.0/25", ] description = "Arvato Prod : AOMA Prod Subnet" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.36.11/32", ] description = "degtlun5198.server.arvato-systems.de" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.38.0/25", ] description = "Arvato Prod : Conversion App Subnet" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.40.0/23", ] description = "Arvato Prod : Conversion WIP Subnet" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "Shared" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.64/27", ] description = "Tower" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "172.29.16.0/21", ] description = "MC_PROD" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [] description = "RDS-SG" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0dc9b8795b6ddeedb", ] self = false to_port = 6432 }, ] name = "MCSEC-P1-PGBOUNCER-SG" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-06e0be5a149470879" { #checkov:skip=CKV_AWS_277: Ensure no security groups allow ingress from 0.0.0.0:0 to port -1 description = "middle tier" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = -1 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [] self = false to_port = -1 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "http" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "https" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.117.64/26", "162.49.0.0/16", "10.12.0.0/16", "172.29.20.0/24", "10.12.224.0/24", "160.33.84.0/22", "160.33.88.0/22", "10.100.0.0/16", "172.29.0.0/16", "172.34.32.0/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.117.64/26", "162.49.0.0/16", "10.12.0.0/16", "172.29.20.0/24", "10.12.224.0/24", "160.33.84.0/22", "160.33.88.0/22", "10.100.0.0/16", "172.29.0.0/16", "172.34.32.0/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.0/24", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8676 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = -1 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [] self = false to_port = -1 }, { cidr_blocks = [ "10.11.117.96/28", "10.11.117.112/28", "10.0.0.0/8", "162.49.0.0/16", "10.12.224.0/24", "10.12.246.0/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.117.96/28", "10.11.117.112/28", "10.0.0.0/8", "162.49.0.0/16", "10.12.224.0/24", "10.12.246.0/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.0/24", "10.11.117.118/32", ] description = "cloudopsff-bastion02" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8676 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "VA-Bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "162.49.194.66/32", ] description = "" from_port = 50003 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 50003 }, { cidr_blocks = [ "162.49.203.15/32", ] description = "" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "162.49.203.15/32", ] description = "" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9999 }, { cidr_blocks = [ "162.49.36.47/32", "10.12.0.0/16", ] description = "" from_port = 3389 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3389 }, { cidr_blocks = [ "162.49.84.247/32", "162.49.84.245/32", "10.12.224.89/32", "10.12.224.73/32", ] description = "" from_port = 445 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 445 }, { cidr_blocks = [ "162.49.84.247/32", "162.49.84.245/32", "162.49.192.147/32", ] description = "" from_port = 10123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 10123 }, { cidr_blocks = [ "162.49.84.247/32", "162.49.84.245/32", "162.49.192.147/32", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.84.247/32", "162.49.84.245/32", "162.49.192.147/32", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.84.247/32", "162.49.84.245/32", "162.49.192.147/32", ] description = "" from_port = 8531 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8531 }, { cidr_blocks = [ "172.29.16.0/21", ] description = "MCON-P-02-DELIVERY" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8676 }, { cidr_blocks = [ "172.29.20.128/26", ] description = "" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "638682502729/sg-0d1c14d47ab5ca552", ] self = false to_port = 8676 }, { cidr_blocks = [ "172.29.20.244/32", ] description = "mconp-pgbouncer01" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "54.221.196.0/24", ] description = "trend" from_port = 4118 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 4118 }, ] name = "MCSEC-P1-middle-tier-sg" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-0a1787b8f6ec7bd59" { description = "Created by RDS management console" egress = [ { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC-CIDR_MCSEC-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC-CIDR_MCSEC-P1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.117.64/26", ] description = "" from_port = 3343 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3343 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "" from_port = 3343 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 3343 }, { cidr_blocks = [ "10.11.117.96/28", "10.11.117.112/28", "10.11.40.101/32", ] description = "" from_port = 1433 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-06e0be5a149470879", ] self = false to_port = 1433 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 1433 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1433 }, { cidr_blocks = [ "10.11.40.100/32", "10.11.117.112/28", "10.11.117.96/28", ] description = "" from_port = 49150 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-06e0be5a149470879", ] self = false to_port = 49300 }, { cidr_blocks = [ "10.11.40.100/32", "10.11.117.96/28", "10.11.117.112/28", "10.11.40.101/32", ] description = "" from_port = 1433 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-06e0be5a149470879", ] self = false to_port = 1434 }, { cidr_blocks = [ "10.11.40.100/32", ] description = "arvato ip" from_port = 1433 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 1433 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 } ] name = "MCSEC-P1-RDS-SG" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-0993d469e2298b7b7" { description = "MCSEC-P1-GSIRT-SG" egress = [ { cidr_blocks = [ "10.11.117.64/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.117.64/26", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MCSEC-P1-GSIRT-SG" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-0e4e78368ecf69852" { description = "MCSEC-P-mcsec-monthly-usage-stats-LAMBDA-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, ] ingress = [ { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 } ] name = "MCSEC-P-mcsec-monthly-usage-stats-LAMBDA-SG" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" } resource "aws_security_group" "sg-0f8ef6b2862797804" { description = "AWS created security group for d-9967233883 directory controllers" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 123 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.117.64/26", "10.0.0.0/8", "162.49.0.0/16", "10.12.224.0/24", "160.33.84.0/22", "160.33.88.0/22", "192.168.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.117.64/26", "10.0.0.0/8", "162.49.0.0/16", "10.12.224.0/24", "160.33.84.0/22", "160.33.88.0/22", "192.168.0.0/16", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "" from_port = 587 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "10.11.117.64/26", "0.0.0.0/0", "10.11.96.68/32", "162.49.169.200/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "10.11.117.64/26", "0.0.0.0/0", "10.11.96.68/32", "162.49.169.200/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.224.0/24", ] description = "sandeep vant test" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.224.0/24", ] description = "sandeep vant test" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.245.153/32", ] description = "NPS Server" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.245.153/32", ] description = "NPS Server" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "d-9967233883_controllers" tags = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "AOMA-Conversion-Sec" "Environment" = "Prod" "Owner" = "Ted Gulesserian, Sharada Doniputi" "Project-code" = "SME - 2000-0306C" "Project-name" = "AOMA Conversion" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c3d88ad57c642489" }