resource "aws_security_group" "sg-092c1f73a3e02fb40" { description = "MCDEL-P3-GSIRT-SG" egress = [ { cidr_blocks = [ "10.250.80.0/23", "10.250.46.128/25", "10.11.184.64/26", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.80.0/23", "10.250.46.128/25", "10.11.184.64/26", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = [ "10.11.184.64/26", ] description = "WorkerNode" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, { cidr_blocks = [ "10.250.80.0/23", "10.250.46.128/25", "10.11.184.64/26", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.80.0/23", "10.250.46.128/25", "10.11.184.64/26", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "MCDEL-P3-GSIRT-SG" tags = { "Business-Unit" = "Media Conversion", "Environment" = "Prod", "Name" = "MCDEL-P3-GSIRT-SG", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } # __generated__ by Terraform from "sg-029c022e16fd1941f" resource "aws_security_group" "sg_029c022e16fd1941f" { description = "sme-mc-qms-lp-eu-central-1-prod" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }] ingress = [{ cidr_blocks = ["10.250.132.0/22", "10.250.128.0/22"] description = "IP Blocks for Batch CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.250.132.0/22", "10.250.128.0/22"] description = "IP Blocks for Batch CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }] name = "sme-mc-qms-lp-eu-central-1-prod" name_prefix = null revoke_rules_on_delete = null tags = { "Environment" = "Prod", "Name" = "sme-mc-qms-lp-eu-central-1-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } # __generated__ by Terraform from "sg-042ab9d0d8769c2a8" resource "aws_security_group" "sg_042ab9d0d8769c2a8" { description = "sme-mc-qms-eu-central-1-prod" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }] ingress = [{ cidr_blocks = ["10.250.136.0/22"] description = "IP Blocks for Batch CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.250.136.0/22"] description = "IP Blocks for Batch CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }] name = "sme-mc-qms-eu-central-1-prod" name_prefix = null revoke_rules_on_delete = null tags = { "Environment" = "Prod", "Name" = "sme-mc-qms-eu-central-1-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } # __generated__ by Terraform from "sg-0662ccc790f453208" resource "aws_security_group" "sg_0662ccc790f453208" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }] ingress = [{ cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }] name = "eks-cluster-sg-mconp-del-prod-02-1844914492" name_prefix = null revoke_rules_on_delete = null tags = { "Environment" = "Prod", "Name" = "eks-cluster-sg-mconp-del-prod-02-1844914492", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han", "kubernetes.io/cluster/mconp-del-prod-02" = "owned" } vpc_id = "vpc-0b7edbd3d846b543d" } # __generated__ by Terraform from "sg-0b899e541884d91f4" resource "aws_security_group" "sg_0b899e541884d91f4" { description = "sme-mc-qms-eu-central-1-arvato-prod" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }] ingress = [{ cidr_blocks = ["10.11.38.9/32", "10.11.38.6/32", "10.11.40.0/23"] description = "IP Blocks for Arvato WIPs" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["10.11.40.0/23", "10.11.38.6/32", "10.11.38.9/32"] description = "IP Blocks for Arvato WIPs" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }] name = "sme-mc-qms-eu-central-1-arvato-prod" name_prefix = null revoke_rules_on_delete = null tags = { "Environment" = "Prod", "Name" = "sme-mc-qms-eu-central-1-arvato-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sg-03a49ff52a92fd6f8" { description = "mconp-del-prod-02-worker-node-sg" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-01" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-02" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.11.117.64/26", ] description = "MC SEC Mid Tier" from_port = 8676 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8676 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "HA Proxy" from_port = 5006 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5006 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.46.128/25", "10.250.69.128/27", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.46.128/25", "10.250.69.128/27", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.29.20.128/26", "10.250.69.128/25", "10.11.117.64/26", ] description = "pGbouncer AOMA" from_port = 6432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6432 }, ] ingress = [ { cidr_blocks = [ "10.11.176.219/32", "10.250.2.64/27", "10.12.246.75/32", ] description = "SSH from Bastions" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.136.0/22", "10.250.128.0/21", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.136.0/22", "10.250.128.0/21", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.40.0/23", "10.11.38.9/32", "10.11.38.6/32", ] description = "SSH access from Bastion" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "mconp-del-prod-02-worker-node-sg" tags = { "Business-Unit" = "Media Conversion", "Environment" = "Prod", "Name" = "mconp-del-prod-02-worker-node-sg", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sg-0d6c8045f77d50ab3" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [] name = "k8s-traffic-mconpdelprod02-0d9f32b125" tags = { "Environment" = "Prod", "Name" = "k8s-traffic-mconpdelprod02-0d9f32b125", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han", "elbv2.k8s.aws/cluster" = "mconp-del-prod-02", "elbv2.k8s.aws/resource" = "backend-sg" } vpc_id = "vpc-0b7edbd3d846b543d" } # resource "aws_security_group" "sg-031d3fa065fff1e1b" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65535 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65535 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.16.0/21", # "172.34.22.128/25", # "192.168.0.0/16", # "172.34.27.0/24", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.16.0/21", # "172.34.22.128/25", # "192.168.0.0/16", # "172.34.27.0/24", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcdelpro-smemcin-ea9fd98aab" # tags = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-prod/sme-mc-in" # } # tags_all = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-prod/sme-mc-in" # } # vpc_id = "vpc-0b7edbd3d846b543d" # } resource "aws_security_group" "sg-0a99e2a6e23db1e3c" { description = "mconp-del-prod-02-control-plane-sg" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-01" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-02" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.182.128/25", ] description = "Git runner deployment" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.37.0/26", ] description = "ArgoCD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.184.64/26", "10.250.6.0/24", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/24", "10.250.2.0/24", ] description = "API access from EKS Manager and Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "mconp-del-prod-02-control-plane-sg" tags = { "Business-Unit" = "Media Conversion", "Environment" = "Prod", "Name" = "mconp-del-prod-02-control-plane-sg", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sg-0f03bc66c1e9c7975" { description = "MCON-DEL-P3-WIP-SG" egress = [ { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-01" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-02" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.11.184.64/26", "172.29.20.128/26", "10.250.69.128/27", "10.250.6.0/24", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.184.64/26", "172.29.20.128/26", "10.250.69.128/27", "10.250.6.0/24", "10.250.46.128/25", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.184.64/26", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.184.64/26", ] description = "MCDEL-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "RDP access from Bastion" from_port = 3389 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3389 }, ] name = "MCON-DEL-P3-WIP-SG" tags = { "Business-Unit" = "Media Conversion", "Environment" = "Prod", "Name" = "MCON-DEL-P3-WIP-SG", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sg-028b98b10298f0a47" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Environment" = "Prod", "Name" = "default", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } # resource "aws_security_group" "sg-0ede2dc8e46b1acb3" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65535 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65535 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.16.0/21", # "172.34.22.128/25", # "172.34.27.0/24", # "192.168.0.0/16", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.16.0/21", # "172.34.22.128/25", # "172.34.27.0/24", # "192.168.0.0/16", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcprod-smemcin-2aaeda0f4b" # tags = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-prod/sme-mc-in" # } # tags_all = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-prod/sme-mc-in" # } # vpc_id = "vpc-0b7edbd3d846b543d" # } # resource "aws_security_group" "sg-04d1c667dfc2155f9" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65535 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65535 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.11.117.64/26", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.11.117.64/26", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcdelpro-smemcvan-fd37e42862" # tags = { # "Name" = "sme-mc-vantage-ingress-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-prod/sme-mc-vantage-ingress" # } # tags_all = { # "Name" = "sme-mc-vantage-ingress-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-prod/sme-mc-vantage-ingress" # } # vpc_id = "vpc-0b7edbd3d846b543d" # # } # resource "aws_security_group" "sg-08135c662b6e52050" { # description = "[k8s] Managed SecurityGroup for LoadBalancer" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65535 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65535 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.16.0/21", # "172.34.22.128/25", # "172.34.27.0/24", # "192.168.0.0/16", # ] # description = "" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.0.0.0/8", # "162.49.0.0/16", # "172.29.16.0/21", # "172.34.22.128/25", # "172.34.27.0/24", # "192.168.0.0/16", # ] # description = "" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "k8s-mcdelpro-smemcin-7c6d2de00b" # tags = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-prod-lp/sme-mc-in" # } # tags_all = { # "Name" = "sme-mc-in-alb" # "elbv2.k8s.aws/cluster" = "mconp-del-prod-02" # "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" # "ingress.k8s.aws/stack" = "mc-del-prod-lp/sme-mc-in" # } # vpc_id = "vpc-0b7edbd3d846b543d" # } resource "aws_security_group" "sme-mc-ar-eu-central-1-arvato-prod" { description = "sme-mc-ar-eu-central-1-arvato-prod" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.250.44.0/23", "10.250.128.0/21", "10.11.105.0/24", "10.250.47.192/27", "10.11.40.101/32", "192.168.0.0/16", "10.11.182.96/27", "10.250.80.0/21", "10.11.38.6/32", "10.250.47.0/27", "172.34.27.0/24", "10.250.43.0/24", "10.11.40.0/23", "10.11.38.9/32", "10.250.46.128/25", "10.250.136.0/22", "10.11.184.64/26", "10.11.35.0/24", "172.29.16.0/21", "10.12.201.0/25", "172.34.22.128/25", "10.11.184.0/26", "10.250.69.128/25", "162.49.0.0/16", "10.11.40.100/32", "10.11.117.0/25", "10.250.35.0/25", "10.250.6.0/24", ] description = "IP Blocks for MC Apps" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.43.0/24", "10.12.201.0/25", "172.34.27.0/24", "10.250.47.0/27", "10.11.184.0/26", "10.11.184.64/26", "10.250.47.192/27", "10.250.80.0/21", "192.168.0.0/16", "10.250.128.0/21", "172.29.16.0/21", "10.250.35.0/25", "10.11.40.0/23", "10.11.117.0/25", "10.250.6.0/24", "162.49.0.0/16", "10.250.46.128/25", "10.11.182.96/27", "10.11.40.101/32", "10.250.136.0/22", "10.250.44.0/23", "10.11.40.100/32", "10.250.69.128/25", "10.11.105.0/24", "10.11.35.0/24", "172.34.22.128/25", "10.11.38.6/32", "10.11.38.9/32" ] description = "IP Blocks for MC Apps" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-ar-eu-central-1-arvato-prod" tags = { "Cluster" = "mconp-del-prod-02", "Environment" = "Prod", "Name" = "sme-mc-ar-eu-central-1-arvato-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sme-mc-in-eu-central-1-arvato-prod" { description = "sme-mc-in-eu-central-1-arvato-prod" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.128/25", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.128/25", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-in-eu-central-1-arvato-prod" tags = { "Cluster" = "mconp-del-prod-02", "Environment" = "Prod", "Name" = "sme-mc-in-eu-central-1-arvato-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sme-mc-in-eu-central-1-prod" { description = "sme-mc-in-eu-central-1-prod" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.0/24", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.0/24", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-in-eu-central-1-prod" tags = { "Cluster" = "mconp-del-prod-02", "Environment" = "Prod", "Name" = "sme-mc-in-eu-central-1-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sme-mc-in-lp-eu-central-1-prod" { description = "sme-mc-in-lp-eu-central-1-prod" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.128/25", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.128/25", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-in-lp-eu-central-1-prod" tags = { "Cluster" = "mconp-del-prod-02", "Environment" = "Prod", "Name" = "sme-mc-in-lp-eu-central-1-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } resource "aws_security_group" "sme-mc-vw-eu-central-1-prod" { description = "sme-mc-vw-eu-central-1-prod" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.128/25", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", "162.49.0.0/16", "192.168.0.0/16", "172.29.16.0/21", "172.34.22.128/25", "172.34.27.0/24" ] description = "IP Blocks for SME VPN and VPC CIDR" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "sme-mc-vw-eu-central-1-prod" tags = { "Cluster" = "mconp-del-prod-02", "Environment" = "Prod", "Name" = "sme-mc-vw-eu-central-1-prod", "CLOPS_FW" = "NO", "Project-Name" = "MCON-DEL", "Project-Code" = "SME-2000-0306C", "Owner" = "Sang Han" } vpc_id = "vpc-0b7edbd3d846b543d" } # resource "aws_security_group" "sme-mc-qms-eu-central-1-prod" { # description = "sme-mc-qms-eu-central-1-prod" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65534 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65534 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.250.136.0/22", # ] # description = "IP Blocks for Batch CIDR" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.250.136.0/22", # ] # description = "IP Blocks for Batch CIDR" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "sme-mc-qms-eu-central-1-stage" # tags = { # "Name" = "sme-mc-qms-eu-central-1-prod" # "Cluster" = "mconp-del-prod-02" # "Environment" = "prod" # } # tags_all = { # "Name" = "sme-mc-qms-eu-central-1-prod" # "Cluster" = "mconp-del-prod-02" # "Environment" = "prod" # } # vpc_id = "vpc-0b7edbd3d846b543d" # } # resource "aws_security_group" "sme-mc-qms-lp-eu-central-1-prod" { # description = "sme-mc-qms-lp-eu-central-1-prod" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65534 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65534 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.250.132.0/22", # "10.250.128.0/22", # ] # description = "IP Blocks for Batch CIDR" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.250.132.0/22", # "10.250.128.0/22", # ] # description = "IP Blocks for Batch CIDR" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "sme-mc-qms-lp-eu-central-1-prod" # tags = { # "Name" = "sme-mc-qms-lp-eu-central-1-prod" # "Cluster" = "mconp-del-prod-02" # "Environment" = "prod" # } # tags_all = { # "Name" = "sme-mc-qms-lp-eu-central-1-prod" # "Cluster" = "mconp-del-prod-02" # "Environment" = "prod" # } # vpc_id = "vpc-0b7edbd3d846b543d" # # } # resource "aws_security_group" "sme-mc-qms-eu-central-1-arvato-prod" { # description = "sme-mc-qms-eu-central-1-arvato-prod" # egress = [ # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65534 # }, # { # cidr_blocks = [ # "0.0.0.0/0", # ] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65534 # }, # ] # ingress = [ # { # cidr_blocks = [ # "10.11.38.6/32", # "10.11.40.0/23", # "10.11.38.9/32", # ] # description = "IP Blocks for Arvato WIPs" # from_port = 443 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 443 # }, # { # cidr_blocks = [ # "10.11.38.6/32", # "10.11.40.0/23", # "10.11.38.9/32", # ] # description = "IP Blocks for Arvato WIPs" # from_port = 80 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 80 # }, # ] # name = "sme-mc-qms-eu-central-1-arvato-prod" # tags = { # "Name" = "sme-mc-qms-eu-central-1-arvato-prod" # "Cluster" = "mconp-del-prod-02" # "Environment" = "prod" # } # tags_all = { # "Name" = "sme-mc-qms-eu-central-1-arvato-prod" # "Cluster" = "mconp-del-prod-02" # "Environment" = "prod" # } # vpc_id = "vpc-0b7edbd3d846b543d" # }