resource "aws_security_group" "sg-0bc3dd6d9cda516b0" { description = "MCON-D2-WIP-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "mcond-logstash" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "mcond-logstash" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion" from_port = 3389 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3389 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "mcond-logstash" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "mcond-logstash" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] name = "MCON-D2-WIP-SG" tags = { "Environment" = "Dev", "Name" = "MCON-D2-WIP-SG", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } # __generated__ by Terraform from "sg-0601dbb2827783e64" resource "aws_security_group" "sg-0601dbb2827783e64" { # checkov:skip=CKV_AWS_24: SSH ingress required for this legacy security group description = "Amazon ECS-Optimized Amazon Linux 2 (AL2) x86_64 AMI-2.0.20240312-AutogenByAWSMP--1 created 2024-03-21T18:21:32.957Z" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }] ingress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }] name = "Amazon ECS-Optimized Amazon Linux 2 (AL2) x86_64 AMI-2.0.20240312-AutogenByAWSMP--1" tags = { "App" = "Media-conversion", "Business-Unit" = "AOMA-Conversion", "Environment" = "Dev", "Name" = "sg-0601dbb2827783e64", "CLOPS_FW" = "NO", "Owner" = "Ralph Capasso", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } # __generated__ by Terraform from "sg-0d7200fd436211c50" resource "aws_security_group" "sg-0d7200fd436211c50" { description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }] ingress = [{ cidr_blocks = ["10.0.0.0/8", "162.49.0.0/16", "172.29.9.0/24", "172.34.19.0/24", "192.168.0.0/16", "172.29.4.0/22"] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.0.0.0/8", "162.49.0.0/16", "172.29.9.0/24", "172.34.19.0/24", "192.168.0.0/16", "172.29.4.0/22"] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }] name = "k8s-mcdeluat-smemcin-36057fd124" name_prefix = null revoke_rules_on_delete = null tags = { "Environment" = "Dev", "Name" = "sme-mc-in-alb", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "eiso-exception" = "aws.08.30", "elbv2.k8s.aws/cluster" = "mcond-del-uat-01", "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup", "ingress.k8s.aws/stack" = "mc-del-uat/sme-mc-in" } vpc_id = "vpc-0c427373e13498233" } # __generated__ by Terraform from "sg-0da4b0f7e51dcb36c" resource "aws_security_group" "sg-0da4b0f7e51dcb36c" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }] ingress = [] name = "k8s-traffic-mconddeluat01-71469930b6" name_prefix = null revoke_rules_on_delete = null tags = { "Environment" = "Dev", "Name" = "k8s-traffic-mconddeluat01-71469930b6", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "elbv2.k8s.aws/cluster" = "mcond-del-uat-01", "elbv2.k8s.aws/resource" = "backend-sg" } vpc_id = "vpc-0c427373e13498233" } #resource "aws_security_group" "sg-09263b74213cfc15d" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65534 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65534 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.6.0/24", # "172.29.9.0/24", # "172.34.19.0/24", # "172.34.32.0/26", # "192.168.0.0/16", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.6.0/24", # "172.29.9.0/24", # "172.34.19.0/24", # "172.34.32.0/26", # "192.168.0.0/16", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcdelsta-smemcin-7a01aec3a9" # tags = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-stage/sme-mc-in" # } # tags_all = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-stage/sme-mc-in" # } # vpc_id = "vpc-0c427373e13498233" # #} #resource "aws_security_group" "sg-0b9085e321f7e9173" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65534 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65534 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.0.0.0/8", # "10.11.35.0/24", # "10.11.51.9/32", # "10.12.246.75/32", # "162.49.0.0/16", # "172.29.6.0/24", # "172.29.7.0/24", # "172.29.9.0/24", # "172.34.32.0/26", # "192.168.0.0/16", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.0.0.0/8", # "10.11.35.0/24", # "10.11.51.9/32", # "10.12.246.75/32", # "162.49.0.0/16", # "172.29.6.0/24", # "172.29.7.0/24", # "172.29.9.0/24", # "172.34.32.0/26", # "192.168.0.0/16", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcstage-smemcin-d6e08d988d" # tags = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-stage/sme-mc-in" # } # tags_all = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-stage/sme-mc-in" # } # vpc_id = "vpc-0c427373e13498233" # #} resource "aws_security_group" "sg-0bee4d62165a58f37" { description = "MCON-D2-GSIRT-SG" egress = [ { cidr_blocks = [ "10.249.6.144/28", "10.11.182.128/25", "10.250.6.0/24", "10.250.54.0/24", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.249.6.144/28", "10.250.6.0/24", "10.11.182.128/25", "10.250.54.0/24", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, ] ingress = [ { cidr_blocks = [ "10.249.6.144/28", "10.11.182.128/25", "10.250.6.0/24", "10.250.54.0/24", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.249.6.144/28", "10.250.6.0/24", "10.11.182.128/25", "10.250.54.0/24", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, ] name = "MCON-D2-GSIRT-SG" tags = { "Environment" = "Dev", "Name" = "MCON-D2-GSIRT-SG", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sg-08e509596bf3d6336" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [] name = "k8s-traffic-mconddeldev2-bf7e8f8a3e" tags = { "Environment" = "Dev", "Name" = "k8s-traffic-mconddeldev2-bf7e8f8a3e", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "elbv2.k8s.aws/cluster" = "mcond-del-dev2", "elbv2.k8s.aws/resource" = "backend-sg" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sg-0ace0dd7c49794b2a" { description = "Security Group for mcond-del-dev2" egress = [ { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.37.0/24", ] description = "TEST" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0bf44d5b5e5a92388", ] self = false to_port = 443 }, ] name = "mcond-del-dev2-ControlPlane-SG" tags = { "App" = "Media-conversion", "Business-Unit" = "AOMA-Conversion", "Environment" = "Dev", "Name" = "mcond-del-dev2-ControlPlane-SG", "CLOPS_FW" = "NO", "Owner" = "Ralph Capasso", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sg-0bf44d5b5e5a92388" { description = "SG rule for mcond-del-dev2 worker node" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "10.11.35.63/32", ] description = "arvato stage vantage" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8676 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.11.116.192/26", ] description = "MC-SEC-S" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.117.0/26", "172.29.6.0/26", "10.0.0.0/8", ] description = "MC-SEC-D" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.203/32", "10.11.108.0/25", "10.11.177.241/32", "10.11.177.207/32", "10.11.180.0/24", ] description = "HA Proxy" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.203/32", "10.11.108.0/25", "10.11.177.241/32", "10.11.177.207/32", "10.11.180.0/24", ] description = "HA Proxy" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", "10.11.104.32/27", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", "10.11.104.32/27", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "MCON-DEV-VPC" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "Vantage server" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8676 }, { cidr_blocks = [ "172.29.7.0/24", ] description = "Media Conversion STAGE" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "172.29.7.0/24", ] description = "Media Conversion STAGE" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.230.0/23", "10.250.228.0/23", ] description = "" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 } ] ingress = [ { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "Arvato" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "Arvato" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", "10.11.176.219/32", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0ace0dd7c49794b2a", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0ace0dd7c49794b2a", ] self = false to_port = 65535 }, #{ # cidr_blocks = [] # description = "elbv2.k8s.aws/targetGroupBinding=shared" # from_port = 8080 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [ # "sg-08e509596bf3d6336", # ] # self = false # to_port = 8080 #}, { cidr_blocks = ["10.250.228.0/22"] description = "MCONS-UAT" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, #{ # cidr_blocks = [] # security_groups = [ # "sg-0bf44d5b5e5a92388", # "sg-0ace0dd7c49794b2a" # ] # description = "VPC CIDR" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65535 #}, ] name = "mcond-del-dev2-Worker-node-SG" tags = { "karpenter.sh/discovery" = "mcond-del-dev2" "App" = "Media-conversion", "Business-Unit" = "AOMA-Conversion", "Environment" = "Dev", "Name" = "mcond-del-dev2-Worker-node-SG", "CLOPS_FW" = "NO", "Owner" = "Ralph Capasso", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } tags_all = { "karpenter.sh/discovery" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } #resource "aws_security_group" "sg-0f79fd73b91e69e5c" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65534 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65534 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "192.168.0.0/16", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "192.168.0.0/16", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcdev-smemcin-45bd7329ac" # tags = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-dev/sme-mc-in" # } # tags_all = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-dev/sme-mc-in" # } # vpc_id = "vpc-0c427373e13498233" # #} resource "aws_security_group" "sg-022f10e6aac600c11" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "App" = "default", "Business-Unit" = "default", "Environment" = "Dev", "Name" = "default", "CLOPS_FW" = "NO", "Owner" = "default", "Project-Code" = "default", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sg-06a6c5f21ec67adcd" { description = "ARVATO_AOMA_OS_SG" egress = [ { cidr_blocks = [ "10.11.114.128/27", "10.11.114.160/27", ] description = "AOMA-D2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] ingress = [] name = "ARVATO_AOMA_OS_SG" tags = { "App" = "Media-conversion", "Business-Unit" = "AOMA-Conversion", "Environment" = "Dev", "Name" = "ARVATO_AOMA_OS_SG", "CLOPS_FW" = "NO", "Owner" = "Ralph Capasso", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sg-07ae06905b0f6dd1f" { description = "MCON-D2-BATCH-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.114.20/32", "10.11.114.54/32", "10.11.114.72/32" ] description = "Allow NFS to EFS mount target" from_port = 2049 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2049 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.0/24", "10.11.108.0/24", "10.11.180.0/24" ] description = "batch to reach msk" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.177.0/24", "10.11.108.0/24", "10.11.180.0/24" ] description = "batch to reach msk" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "mcond-logstash" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "mcond-logstash" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.115.153/32", ] description = "deld-bastion01" from_port = 3389 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3389 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "awxd-bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] name = "MCON-D2-BATCH-SG" tags = { "App" = "Media-conversion", "Business-Unit" = "AOMA-Conversion", "Environment" = "Dev", "Name" = "MCON-D2-BATCH-SG", "CLOPS_FW" = "NO", "Owner" = "Ralph Capasso", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sg-01f2ea3ed091c47d0" { description = "MCON-D2-GITRUNNER-SG" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "For GitHub.com" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.237.160/27", "10.12.246.64/26", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MCON-D2-GITRUNNER-SG" tags = { "Environment" = "Dev", "Name" = "MCON-D2-GITRUNNER-SG", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Patch Group" = "General" } vpc_id = "vpc-0c427373e13498233" } #resource "aws_security_group" "sg-06b1682aa846a8dff" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65534 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65534 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "192.168.0.0/16", # "172.29.6.0/24", # "172.29.7.0/24", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "192.168.0.0/16", # "172.29.6.0/24", # "172.29.7.0/24", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcstage-smemcari-944a4b8d8e" # tags = { # "Name" = "sme-mc-ar-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-stage/sme-mc-ar-ingress" # } # tags_all = { # "Name" = "sme-mc-ar-alb" # "elbv2.k8s.aws/cluster" = "mcond-del-dev2" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-stage/sme-mc-ar-ingress" # } # vpc_id = "vpc-0c427373e13498233" # #} resource "aws_security_group" "sg-0ea857d3177242cce" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allows EFA traffic, which is not matched by CIDR rules." from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, ] ingress = [ { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allows EFA traffic, which is not matched by CIDR rules." from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, ] name = "eks-cluster-sg-mcond-del-dev2-1658650173" tags = { "Environment" = "Dev", "Name" = "eks-cluster-sg-mcond-del-dev2-1658650173", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "kubernetes.io/cluster/mcond-del-dev2" = "owned", "eiso-exception" = "aws.08.30" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "mcond-del-uat-01-Worker-node-SG" { description = "SG rule for mcond-del-uat-01 worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.11.116.192/26", ] description = "MC-SEC-S" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.117.0/26", ] description = "MC-SEC-D" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.11.176.203/32", ] description = "HA Proxy" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.203/32", ] description = "HA Proxy" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", "10.11.104.32/27", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", "10.11.104.32/27", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "MCON-DEV-VPC" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "172.29.6.0/24", ] description = "Vantage server" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8676 }, { cidr_blocks = [ "172.29.7.0/24", ] description = "Media Conversion STAGE" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, ] ingress = [ { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/27", "10.11.182.160/27", ] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 8081 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8081 }, { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "Arvato" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "Arvato" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.54.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.67.0/24", ] description = "MCDEL-S2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65534 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0ace0dd7c49794b2a", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0ace0dd7c49794b2a", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "elbv2.k8s.aws/targetGroupBinding=shared" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-08e509596bf3d6336", ] self = false to_port = 8081 }, ] name = "mcond-del-uat-01-Worker-node-SG" tags = { "App" = "Media-conversion", "Business-Unit" = "AOMA-Conversion", "Environment" = "Dev", "Name" = "mcond-del-uat-01-Worker-node-SG", "CLOPS_FW" = "NO", "Owner" = "Ralph Capasso", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "mcond-del-uat-01-control-plane" { description = "Security Group for mcond-del-uat-01" egress = [ { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.182.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0bf44d5b5e5a92388", ] self = false to_port = 443 }, ] name = "mcond-del-uat-01-ControlPlane-SG" tags = { "App" = "Media-conversion", "Business-Unit" = "AOMA-Conversion", "Environment" = "Dev", "Name" = "mcond-del-uat-01-ControlPlane-SG", "CLOPS_FW" = "NO", "Owner" = "Ralph Capasso", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-in-eu-central-1-dev" { description = "sme-mc-in-eu-central-1-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-in-eu-central-1-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-in-eu-central-1-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-ar-eu-central-1-dev" { description = "sme-mc-ar-eu-central-1-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "172.34.32.0/26", "172.29.9.0/24", "172.34.12.160/28", "10.11.117.0/26", "10.12.199.0/25", "10.250.51.0/24", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "172.34.32.0/26", "172.29.9.0/24", "172.34.12.160/28", "10.11.117.0/26", "10.12.199.0/25", "10.250.51.0/24", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.250.3.64/26" ] description = "AOMA DEL-D-XAPP SUBNETS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "sme-mc-ar-eu-central-1-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-ar-eu-central-1-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-ar-eu-central-1-arvato-dev" { description = "sme-mc-ar-eu-central-1-arvato-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "172.34.32.0/26", "172.29.9.0/24", "172.34.12.160/28", "10.11.117.0/26", "10.12.199.0/25", "10.250.51.0/24", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "172.34.32.0/26", "172.29.9.0/24", "172.34.12.160/28", "10.11.117.0/26", "10.12.199.0/25", "10.250.51.0/24", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-ar-eu-central-1-arvato-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-ar-eu-central-1-arvato-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-ar-eu-central-1-arvato-stage" { description = "sme-mc-ar-eu-central-1-arvato-stage" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", "10.11.182.128/25", "10.250.228.0/22", "172.29.9.0/24", "10.250.232.0/21", "10.11.117.0/26", "10.250.6.0/24", "10.250.67.0/24", "172.29.27.128/25", "10.12.199.128/25", "10.250.52.0/24", "10.11.34.0/24", "10.11.35.0/24", "10.12.199.0/25", "10.250.51.0/24", "10.11.51.0/24", "10.11.104.32/27", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", "10.250.67.0/24", "10.11.182.128/25", "10.250.228.0/22", "172.29.9.0/24", "10.250.232.0/21", "10.11.117.0/26", "172.29.27.128/25", "10.12.199.128/25", "10.250.52.0/24", "10.11.34.0/24", "10.250.6.0/24", "10.11.35.0/24", "10.11.51.0/24", "10.12.199.0/25", "10.250.51.0/24", "10.11.104.32/27", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.250.3.64/26", ] description = "AOMA DEL-D-XAPP SUBNETS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "sme-mc-ar-eu-central-1-arvato-stage" tags = { "Environment" = "Dev", "Name" = "sme-mc-ar-eu-central-1-arvato-stage", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-in-eu-central-1-arvato-dev" { description = "sme-mc-in-eu-central-1-arvato-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-in-eu-central-1-arvato-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-in-eu-central-1-arvato-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-in-eu-central-1-arvato-stage" { description = "sme-mc-in-eu-central-1-arvato-stage" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-in-eu-central-1-arvato-stage" tags = { "Environment" = "Dev", "Name" = "sme-mc-in-eu-central-1-arvato-stage", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-in-eu-central-1-stage" { description = "sme-mc-in-eu-central-1-stage" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-in-eu-central-1-stage" tags = { "Environment" = "Dev", "Name" = "sme-mc-in-eu-central-1-stage", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-vw-eu-central-1-stage" { description = "sme-mc-vw-eu-central-1-stage" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-vw-eu-central-1-stage" tags = { "Environment" = "Dev", "Name" = "sme-mc-vw-eu-central-1-stage", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-vw-eu-central-1-dev" { description = "sme-mc-vw-eu-central-1-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-vw-eu-central-1-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-vw-eu-central-1-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-vw-eu-central-1-arvato-dev" { description = "sme-mc-vw-eu-central-1-arvato-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-vw-eu-central-1-arvato-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-vw-eu-central-1-arvato-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-vw-eu-central-1-arvato-stage" { description = "sme-mc-vw-eu-central-1-arvato-stage" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.6.0/24", "172.29.7.0/24", ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-vw-eu-central-1-arvato-stage" tags = { "Environment" = "Dev", "Name" = "sme-mc-vw-eu-central-1-arvato-stage", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-qms-eu-central-1-dev" { description = "sme-mc-qms-eu-central-1-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.250.54.0/24" ] description = "IP Blocks for VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.54.0/24" ] description = "IP Blocks for VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-qms-eu-central-1-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-qms-eu-central-1-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-qms-eu-central-1-arvato-dev" { description = "sme-mc-qms-eu-central-1-arvato-dev" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "IP Blocks for VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "IP Blocks for VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-qms-eu-central-1-arvato-dev" tags = { "Environment" = "Dev", "Name" = "sme-mc-qms-eu-central-1-arvato-dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-qms-eu-central-1-uat" { description = "sme-mc-qms-eu-central-1-uat" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.250.228.0/23", "10.250.230.0/23", "10.250.232.0/22", "10.250.236.0/22", ] description = "IP Blocks for VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.228.0/23", "10.250.230.0/23", "10.250.232.0/22", "10.250.236.0/22", ] description = "IP Blocks for VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-qms-eu-central-1-uat" tags = { "Environment" = "Dev", "Name" = "sme-mc-qms-eu-central-1-uat", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcon-del-uat-01" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-qms-eu-central-1-arvato-stage" { description = "sme-mc-qms-eu-central-1-arvato-stage" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "IP Blocks for Arvato WIPs CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.55.128/27", "10.11.34.0/24", "10.11.35.0/24", "10.11.51.9/32", ] description = "IP Blocks for Arvato WIPs CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-qms-eu-central-1-arvato-stage" tags = { "Environment" = "Dev", "Name" = "sme-mc-qms-eu-central-1-arvato-stage", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "sme-mc-qms-eu-central-1-stage" { description = "sme-mc-qms-eu-central-1-stage" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.250.67.0/24", ] description = "IP Blocks for Batch CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.67.0/24", ] description = "IP Blocks for Batch CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-qms-eu-central-1-stage" tags = { "Environment" = "Dev", "Name" = "sme-mc-qms-eu-central-1-stage", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Cluster" = "mcond-del-dev2" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "MCON-D2-RDS-SG" { description = "MCON-D2-RDS-SG" egress = [ { cidr_blocks = [ "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "10.250.8.0/24", ] description = "MCON-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "10.250.8.0/24", ] description = "MCON-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "10.250.8.0/24", ] description = "MCON-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "10.250.8.0/24", ] description = "MCON-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.75/32", "10.250.2.64/27", "10.11.176.219/32", "10.0.0.0/8", ] description = "5432 from Bastions" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] name = "MCON-D2-RDS-SG" tags = { "Business-Unit" = "MCON-D2" "Environment" = "Dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Name" = "MCON-D2-RDS-SG" } vpc_id = "vpc-0c427373e13498233" } resource "aws_security_group" "MCON-D2-INT-ALB-SG" { description = "MCON-D2-INT-ALB-SG" egress = [ { cidr_blocks = [ "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "10.250.8.0/24", ] description = "MCON-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.182.128/25", "10.250.54.0/24", "10.250.6.0/24", "10.250.8.0/24", ] description = "MCON-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", ] description = "SME-VPN" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "MCON-D2-INT-ALB-SG" tags = { "Business-Unit" = "MCON-D2" "Environment" = "Dev", "CLOPS_FW" = "NO", "Owner" = "Mandar Padsalgikar", "Project-Code" = "SME-2000-0306C", "Project-Name" = "Media-Conversion", "Name" = "MCON-D2-INT-ALB-SG" } vpc_id = "vpc-0c427373e13498233" }