resource "aws_security_group" "sg-06ba94f5170c07510" { description = "MSRV-D2-MSRV-EJB-APP-1A-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "TOWER-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "VPC-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "SSH" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cf582d7ae689a702", ] self = false to_port = 22 }, { cidr_blocks = ["10.12.239.0/26", "10.12.228.128/26"] description = "WEB" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cf582d7ae689a702", ] self = false to_port = 8080 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "From MSRV-D2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "From MSRV-D2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "MSRV-D2-MSRV-EJB-APP-1A-WF11-SG" tags = { "Name" = "MSRV-D2-MSRV-EJB-APP-1A-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-D2-MSRV-EJB-APP-1A-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-0b65dd5311d05c6e5" { description = "MSRV-D2-MSRV-REDIS-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "MSRV-D2-MSRV-REDIS-SG" tags = { "Name" = "MSRV-D2-MSRV-REDIS-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Name" = "MSRV-D2-MSRV-REDIS-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-0da1e296f838d68e7" { description = "MPUB-D-RDSPROXY-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.0/24", ] description = "Shared-FF" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.48.0/25", "10.250.6.0/24", ] description = "msrvd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.64/27", ] description = "awxd-dbutils01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.3.205/32", ] description = "VPC-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "msrvd2-mpubapp1b01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cf582d7ae689a702", ] self = false to_port = 5432 }, ] name = "MPUB-D-RDSPROXY-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Owner" = "Mandar Padsalgikar" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Owner" = "Mandar Padsalgikar" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-0476a51fd86832c29" { description = "MSRV-D2-MSRVD2-SG" egress = [ { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.48.0/25", ] description = "All" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.48.0/25", ] description = "All" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.236.190/32", ] description = "awxd-dbutils01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.48.0/25", ] description = "Entire VPC Range" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, ] name = "MSRV-D2-MSRVD2-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-04b064a99e83de36a" { description = "SG rule for msrvd-dev worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "Dev EKS Cluster" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "Dev EKS Cluster" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.228.128/25", ] description = "CLSHRD-VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.228.128/25", ] description = "CLSHRD-VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.239.0/24", ] description = "CLSHRD-VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.239.0/24", ] description = "CLSHRD-VPC-CIDR-4" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.239.0/26", "10.12.228.128/26", ] description = "SHARED SUBNETS" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.250.11.144/28", ] description = "CLSHRD-VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.11.144/28", ] description = "CLSHRD-VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.23.128/25", ] description = "CLSHRD-VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.23.128/25", ] description = "CLSHRD-VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", ] description = "VPC-CIDR-DEV" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", ] description = "VPC-CIDR-DEV" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", "10.249.5.64/28", ] description = "VPC-CIDR-STAGE" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", "10.249.5.64/28", ] description = "VPC-CIDR-STAGE" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09e6b25c18194a6c9", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow DNS TCP from Self" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 53 }, { cidr_blocks = [] description = "Allow DNS TCP from Self" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 53 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-09e6b25c18194a6c9", ] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.228.128/26", "10.12.239.0/26", ] description = "Allow ALB sg in worker node sg inbound" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.228.128/26", "10.12.239.0/26", ] description = "Allow ALB sg in worker node sg inbound" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "msrvd-dev-Worker-node-SG" tags = { "Name" = "msrvd-dev-Worker-node-SG" "elbv2.k8s.aws/cluster" = "msrvd-dev" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Name" = "msrvd-dev-Worker-node-SG" "elbv2.k8s.aws/cluster" = "msrvd-dev" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-0b8ed6193ad22ff84" { description = "MSRV-D2-MPUBD2-SG" egress = [ { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "ALL" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "ALL" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "Entire VPC Range" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "MPUB-D-RDSPROXY-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0da1e296f838d68e7", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "MSRV-D-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "MSRV-D-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "MSRV-D2-MPUBD2-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-036ddc87b20bfacb6" { description = "MSRV-D2-GSIRT-SG" egress = [ { cidr_blocks = ["10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.250.16.0/27"] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = ["10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.250.16.0/27"] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = ["10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.250.16.0/27"] description = "From CCSHARE-FF-APP-1A" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.250.16.0/27"] description = "From CCSHARE-FF-APP-1A" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "MSRV-D2-GSIRT-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-0cf582d7ae689a702" { description = "MSRV-D2-MPUB-APP-1B-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.122/32", ] description = "msrvd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.228.128/26", ] description = "CCSHARE-VA-IDMZ-1A" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.239.0/26", ] description = "CCSHARE-VA-IDMZ-1B" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 9990 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9990 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.3.205/32", ] description = "VPC-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRV-D2-MPUB-APP-1B-WF11-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-09e6b25c18194a6c9" { description = "Security Group for msrvd-dev" egress = [ { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.198.0/25", ] description = "Jenkins" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "VPN" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-04b064a99e83de36a", ] self = false to_port = 443 }, ] name = "msrvd-dev-ControlPlane-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-0d85f93a16aa2f54c" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Name" = "default" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Name" = "default" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-02f95b703aad8e124" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allows EFA traffic, which is not matched by CIDR rules." from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, { cidr_blocks = [ "10.250.7.192/28", ] description = "Allows access to stage RDS" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, ] ingress = [ { cidr_blocks = [] description = "ALL" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [ "10.12.239.0/26", "10.12.228.128/26", ] description = "MRSVTAG-VARNISH-ALB" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "ALL" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allows EFA traffic, which is not matched by CIDR rules." from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, ] name = "eks-cluster-sg-msrvd-dev-683921154" tags = { "Name" = "eks-cluster-sg-msrvd-dev-683921154" "kubernetes.io/cluster/msrvd-dev" = "owned" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" } tags_all = { "Name" = "eks-cluster-sg-msrvd-dev-683921154" "kubernetes.io/cluster/msrvd-dev" = "owned" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-06603fdeb51d20abd" { description = "MSRV-D2-REPORT-1B-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.122/32", ] description = "msrvd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.3.205/32", ] description = "VPC-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRV-D2-REPORT-1B-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "sg-0c87e94ffd63cf25a" { description = "MSRV-D2-MSRV-ADMIN-APP-1A-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.228.128/26", ] description = "CCSHARE-VA-IDMZ-1A" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.239.0/26", ] description = "CCSHARE-VA-IDMZ-1B" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "TOWER-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "VPC-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.48.0/25", ] description = "EKS pod" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.48.0/25", ] description = "EKS pod" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "SSH" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cf582d7ae689a702", ] self = false to_port = 22 }, { cidr_blocks = [] description = "WEB" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cf582d7ae689a702", ] self = false to_port = 8080 }, ] name = "MSRV-D2-MSRV-ADMIN-APP-1A-WF11-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "MSRV-D2-INT-ALB-SG" { description = "MSRV-D2-INT-ALB-SG" egress = [ { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "MSRV-D2-VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "MSRV-D2-VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME-EU" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME-US" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "162.49.0.0/16", "192.168.0.0/16", ] description = "SME-VPN-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "172.34.29.0/25", ] description = "DRD-Prod" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.10.0/23", ] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.12.0/24", ] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.155.0/24", ] description = "SME-VPN-4" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "192.168.227.0/24", ] description = "SME-VPN-5" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "MSRV-D2-INT-ALB-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Name" = "MSRV-D2-INT-ALB-SG" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "AOMA-Core" "Project-code" = "SME-2000-0306G" "Project-name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Name" = "MSRV-D2-INT-ALB-SG" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "AOMA-Core" "Project-code" = "SME-2000-0306G" "Project-name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" } resource "aws_security_group" "MSRV-D2-GITRUN01-SG" { description = "MSRV-D2-GITRUN01-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "MSRV-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "MSRV-D2-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, ] ingress = [ { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible_Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRV-D2-GITRUN01-SG" tags = { "Business-Unit" = "Media-Services" "Name" = "MSRV-D2-GITRUN01-SG" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Media-Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0c5e47df523da268c" }