resource "aws_network_acl" "acl-20e5174a" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_232: Public NACL SSH ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "30"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "49"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "31"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "87"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.119.128/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "56"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "89"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.240.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "46"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.7.64/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "55"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.7.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "32"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.21.0/25"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "47"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "18.194.27.52/32"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "33"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "48"
    to_port    = "0"
  }

  subnet_ids = ["subnet-e1cde088"]

  tags = {
    Name = "MCON-S-PUB-NACL"
  }

  tags_all = {
    Name = "MCON-S-PUB-NACL"
  }

  vpc_id = "vpc-24256e4d"
}

resource "aws_network_acl" "acl-23e11349" {
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "3"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "4"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.7.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  subnet_ids = ["subnet-365a1a4d", "subnet-fbcde092"]

  tags = {
    Name = "MCON-S-RDS-NACL"
  }

  tags_all = {
    Name = "MCON-S-RDS-NACL"
  }

  vpc_id = "vpc-24256e4d"
}

resource "aws_network_acl" "acl-58b0e831" {
  # checkov:skip=CKV_AWS_229: Public NACL FTP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_230: Public NACL FTP-data ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_232: Public NACL SSH ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.192/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "89"
    to_port    = "0"
  }

  subnet_ids = []

  tags = {
    App           = "Media-conversion"
    Business-unit = "AOMA-Conversion"
    Environment   = "stage"
    Name          = "MCON-S-DEFAULT"
    Owner         = "Ralph Capasso"
    Project-code  = "SME - 2000-0306C"
  }

  tags_all = {
    App           = "Media-conversion"
    Business-unit = "AOMA-Conversion"
    Environment   = "stage"
    Name          = "MCON-S-DEFAULT"
    Owner         = "Ralph Capasso"
    Project-code  = "SME - 2000-0306C"
  }

  vpc_id = "vpc-24256e4d"
}

resource "aws_network_acl" "acl-bbe311d1" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "43"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "44"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "123"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "47"
    to_port    = "123"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "61"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.106.0/25"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "54"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.119.128/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "66"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.192/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "89"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.240.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "55"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.0/25"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "64"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.2.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "60"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.67.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "90"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.7.64/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "65"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.19.0.0/23"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "88"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.6.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "52"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.7.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "45"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.7.0/24"
    from_port  = "514"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "51"
    to_port    = "514"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.7.0/24"
    from_port  = "6432"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "62"
    to_port    = "6432"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.9.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "58"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.21.0/25"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "56"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "57"
    to_port    = "0"
  }

  subnet_ids = ["subnet-095a1a72", "subnet-2c5a1a57", "subnet-d0cde0b9", "subnet-0bfecb4b5ae1c5475", "subnet-0f0f3752cbb3264b8"]

  tags = {
    Name = "MCON-S-APP-NACL"
  }

  tags_all = {
    Name = "MCON-S-APP-NACL"
  }

  vpc_id = "vpc-24256e4d"
}
