resource "aws_network_acl" "acl-000ad7ddd36e8fc42" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "4"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  subnet_ids = ["subnet-017a7da348b60fca2", "subnet-0910367e3713c41f9"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-PUB-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-PUB-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-019ffcaa6af25d922" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "4"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-PUB-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-PUB-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-01c3d723e8af38798" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "2"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "7"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "4"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.16.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "9"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.32.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  subnet_ids = ["subnet-011267639fccf7cae", "subnet-014ab173dc8da32a7", "subnet-0287867d63d0138af", "subnet-0567462d2ecbf60d8", "subnet-08ad2ee072e51ed80", "subnet-09830fca046b778ea", "subnet-0b3f009331d2380e9", "subnet-0c37b481e90bfcfd1", "subnet-0c46bcf15c20e56d8", "subnet-0e8b6df63842bd868"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-APP-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-APP-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-027c0774a895fc0cb" {
  # checkov:skip=CKV_AWS_229: Public NACL FTP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_230: Public NACL FTP-data ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_232: Public NACL SSH ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  vpc_id = "vpc-005357d65b5823894"
}

resource "aws_network_acl" "acl-032a294676b6d15fd" {
  # checkov:skip=CKV_AWS_229: Public NACL FTP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_230: Public NACL FTP-data ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_232: Public NACL SSH ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-DEFAULT-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-DEFAULT-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-0390748c58016085c" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "2"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "9"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "8"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "3"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "4"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.16.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.32.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-APP-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-APP-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-052616e10ed8f8252" {
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-RDS-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-RDS-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-06d091e71c5e79067" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "4"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "5"
    to_port    = "0"
  }

  subnet_ids = ["subnet-0cc2fab9aeb18f3b3", "subnet-0d0e24cc265c5b859"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P2-PUB-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P2-PUB-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-005357d65b5823894"
}

resource "aws_network_acl" "acl-07f2443412daefe80" {
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  subnet_ids = ["subnet-01f7a048bebbe75ae", "subnet-0a1952c1303a33d9e"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-RDS-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-RDS-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-08128332ec32207d4" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "5"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "4"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.16.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  subnet_ids = ["subnet-4c37c836", "subnet-5431983c", "subnet-d03e97b8", "subnet-d637c8ac", "subnet-ffaa4fb2"]

  tags = {
    Name = "MCON-P-02-APP-NACL"
  }

  tags_all = {
    Name = "MCON-P-02-APP-NACL"
  }

  vpc_id = "vpc-f216e39a"
}

resource "aws_network_acl" "acl-0829c70c56a3b14b1" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "6"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "5"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "2"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.184.0/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "9"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.0/25"
    from_port  = "3389"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "11"
    to_port    = "3389"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.80.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "10"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "162.49.0.0/16"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "3"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.16.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "192.168.0.0/16"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "4"
    to_port    = "22"
  }

  subnet_ids = ["subnet-05c29c63afff8d7c3", "subnet-06c2dd8a67cf6bec4", "subnet-08dd0d45659ad7d2f", "subnet-08e1ec91926400dea", "subnet-0b085539049c5d493", "subnet-0b757382e8c6c9c5e"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P2-APP-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P2-APP-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-005357d65b5823894"
}

resource "aws_network_acl" "acl-08cdd82a0a9264b96" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_232: Public NACL SSH ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "17"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "17"
    rule_no    = "18"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "9"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "16"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.105.0/24"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "23"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.117.64/26"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "26"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.0/24"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "89"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.198.0/25"
    from_port  = "443"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "22"
    to_port    = "443"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "88"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.252.0/24"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "20"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.254.254.0/28"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "24"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.16.0/21"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.34.22.0/24"
    from_port  = "80"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "21"
    to_port    = "80"
  }

  ingress {
    action     = "allow"
    cidr_block = "4.15.150.137/32"
    from_port  = "22"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "19"
    to_port    = "22"
  }

  ingress {
    action     = "allow"
    cidr_block = "52.29.167.95/32"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  subnet_ids = ["subnet-6f319807", "subnet-7631981e"]

  tags = {
    Name = "MCON-P-02-PUB-NACL"
  }

  tags_all = {
    Name = "MCON-P-02-PUB-NACL"
  }

  vpc_id = "vpc-f216e39a"
}

resource "aws_network_acl" "acl-0c8443e3c3bf1020a" {
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "2"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "7"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.105.77/32"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "8"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.192/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "89"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.12.246.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "6"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.250.2.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "9"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.16.0/21"
    from_port  = "5444"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "93"
    to_port    = "5444"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.20.136/32"
    from_port  = "5444"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "92"
    to_port    = "5444"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.20.244/32"
    from_port  = "1024"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "6"
    rule_no    = "5"
    to_port    = "65535"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.20.64/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "90"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "172.29.20.96/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "91"
    to_port    = "0"
  }

  subnet_ids = ["subnet-4331982b", "subnet-e337c899"]

  tags = {
    Name = "MCON-P-02-RDS-NACL"
  }

  tags_all = {
    Name = "MCON-P-02-RDS-NACL"
  }

  vpc_id = "vpc-f216e39a"
}

resource "aws_network_acl" "acl-0d2dd8cea1914c440" {
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-DEFAULT-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P3-DEFAULT-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-0b7edbd3d846b543d"
}

resource "aws_network_acl" "acl-0daad9b360d71642f" {
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "1"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.0.0.0/8"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "7"
    to_port    = "0"
  }

  subnet_ids = ["subnet-05a5ef0726aff87bb", "subnet-0f9e121852de9b412"]

  tags = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P2-RDS-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  tags_all = {
    Business-unit = "Media Conversion"
    Environment   = "PROD"
    Name          = "MCDEL-P2-RDS-NACL"
    Owner         = "Sang Han"
    Project-code  = "MCON"
    Project-name  = "MCON-DEL"
  }

  vpc_id = "vpc-005357d65b5823894"
}

resource "aws_network_acl" "acl-3218d65a" {
  # checkov:skip=CKV_AWS_229: Public NACL FTP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_230: Public NACL FTP-data ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_231: Public NACL RDP ingress rules required for this legacy VPC
  # checkov:skip=CKV_AWS_232: Public NACL SSH ingress rules required for this legacy VPC
  # checkov:skip=CKV2_AWS_1: NACL subnet association managed separately for this legacy VPC
  egress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "0.0.0.0/0"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "100"
    to_port    = "0"
  }

  ingress {
    action     = "allow"
    cidr_block = "10.11.176.192/27"
    from_port  = "0"
    icmp_code  = "0"
    icmp_type  = "0"
    protocol   = "-1"
    rule_no    = "89"
    to_port    = "0"
  }

  subnet_ids = ["subnet-03765a5be4df57411", "subnet-05497d22e50c59313", "subnet-0c0f13d21b129d956", "subnet-0f64617797bf5fcc7"]

  tags = {
    App           = "MCON-DEL"
    Business-unit = "AOMA-Conversion"
    Environment   = "prod"
    Name          = "MCON-P-02-DEFAULT-NACL"
    Owner         = "Ralph Capasso"
    Project-code  = "SME - 2000-0306C"
    Project-name  = "Delivery Conversion Prod"
  }

  tags_all = {
    App           = "MCON-DEL"
    Business-unit = "AOMA-Conversion"
    Environment   = "prod"
    Name          = "MCON-P-02-DEFAULT-NACL"
    Owner         = "Ralph Capasso"
    Project-code  = "SME - 2000-0306C"
    Project-name  = "Delivery Conversion Prod"
  }

  vpc_id = "vpc-f216e39a"
}
