resource "aws_network_acl" "acl-059e3d12212e7295f" {
  # checkov:skip=CKV_AWS_231: Public NACL ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "4"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.182.128/25"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }
  ingress {
    action     = "allow"
    cidr_block = "10.12.199.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "15"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.34.0/24"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "8"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.35.0/24"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "10"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.51.9/32"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "11"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.55.128/27"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "7"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.54.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.67.0/24"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "9"
    to_port    = "80"
  }

  subnet_ids = ["subnet-0297577aec41646f8", "subnet-02b80fe80e5aea8c0", "subnet-0394d8045f684526d", "subnet-08ad3b65e3f9191b6", "subnet-0aa7f414906367a8b", "subnet-0e47c79b06106961e"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "DEV2"
    Name          = "MCON-D2-PUB-NACL"
    Owner         = "Mandar Padsalgikar"
    Project-code  = "MCON"
    Project-name  = "MCON-Delivery"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "DEV2"
    Name          = "MCON-D2-PUB-NACL"
    Owner         = "Mandar Padsalgikar"
    Project-code  = "MCON"
    Project-name  = "MCON-Delivery"
  }

  vpc_id = "vpc-0c427373e13498233"
}

resource "aws_network_acl" "acl-072c4aaa573127895" {
  # checkov:skip=CKV_AWS_229: Public NACL FTP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_230: Public NACL FTP-data ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_232: Public NACL SSH ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  tags = {
    Name = "MCON-D2-DEFAULT-NACL"
  }

  tags_all = {
    Name = "MCON-D2-DEFAULT-NACL"
  }

  vpc_id = "vpc-0c427373e13498233"
}

resource "aws_network_acl" "acl-08f609a3bcd281bc8" {
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }
  ingress {
    action     = "allow"
    cidr_block = "10.250.228.0/22"
    from_port  = 0
    icmp_code  = 0
    icmp_type  = 0
    protocol   = "-1"
    rule_no    = 21
    to_port    = 0
  }
  ingress {
    action     = "allow"
    cidr_block = "10.250.37.0/24"
    from_port  = 443
    icmp_code  = 0
    icmp_type  = 0
    protocol   = "6"
    rule_no    = 20
    to_port    = 443
  }
  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "6"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.54.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "10"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "5"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.182.128/25"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.34.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "14"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.35.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "17"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.51.9/32"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "18"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.55.128/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "13"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.0/25"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "9"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.75/32"
    from_port  = "3389"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "12"
    to_port    = "3389"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.2.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.6.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "15"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.67.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "16"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.6.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "11"
    to_port    = "0"
  }

  subnet_ids = ["subnet-0012d38534877fa16", "subnet-0860b9bbb34ac548a", "subnet-0a238019630ccbc09", "subnet-0a463e5c633f163e5", "subnet-0bdf396fe9a7dbe1b", "subnet-0e24bc3dc9e85b255"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "DEV2"
    Name          = "MCON-D2-APP-NACL"
    Owner         = "Mandar Padsalgikar"
    Project-code  = "MCON"
    Project-name  = "MCON-Delivery"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "DEV2"
    Name          = "MCON-D2-APP-NACL"
    Owner         = "Mandar Padsalgikar"
    Project-code  = "MCON"
    Project-name  = "MCON-Delivery"
  }

  vpc_id = "vpc-0c427373e13498233"
}

resource "aws_network_acl" "acl-0e38d8ed8ff3ce197" {
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  subnet_ids = ["subnet-02035b873a40ac276", "subnet-03fcb29d8544c2732"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "DEV2"
    Name          = "MCON-D2-RDS-NACL"
    Owner         = "Mandar Padsalgikar"
    Project-code  = "MCON"
    Project-name  = "MCON-Delivery"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "DEV2"
    Name          = "MCON-D2-RDS-NACL"
    Owner         = "Mandar Padsalgikar"
    Project-code  = "MCON"
    Project-name  = "MCON-Delivery"
  }

  vpc_id = "vpc-0c427373e13498233"
}