resource "aws_security_group" "sg-00daec5c2aa6e3c9d" { description = "MSRV-S2-MSRV-RDS-STAGE2-01-SG" egress = [ { cidr_blocks = [ "10.250.7.128/25", "10.250.48.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", "10.250.48.0/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "cloudopsff-bastion02" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.7.128/25", "10.250.48.0/25", ] description = "VPC CIDR" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, ] name = "MSRV-S2-MSRV-RDS-STAGE2-01-SG" tags = { "Name" = "MSRV-S2-MSRV-RDS-STAGE2-01-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Name" = "MSRV-S2-MSRV-RDS-STAGE2-01-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-043fe11cf84c1b6e4" { description = "MSRV-S2-PREREL-1B-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", "10.250.2.0/24", ] description = "CLSHRD" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cc91af90c6e9ac5d", ] self = false to_port = 9000 }, ] name = "MSRV-S2-PREREL-1B-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Name" = "MSRV-S2-PREREL-1B-SG" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Name" = "MSRV-S2-PREREL-1B-SG" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-04b4b3b776835aade" { description = "MSRV-S2-MSRV-EJB-APP-1A-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.239.0/26", "10.12.228.128/26", ] description = "From LB" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.0/24", "10.11.176.219/32", ] description = "CLSHRD" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "shared bastion" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.3.128/25", "10.250.48.0/25", ] description = "Dev EKS Cluster" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [] description = "For HC in restart script" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "The Cache Servers" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0bc2b81ac35033ad8", ] self = false to_port = 8080 }, ] name = "MSRV-S2-MSRV-EJB-APP-1A-WF11-SG" tags = { "Name" = "MSRV-S2-MSRV-EJB-APP-1A-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-S2-MSRV-EJB-APP-1A-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0bf721910fb03db06" { description = "MSRV-S2-GSIRT-SG" egress = [ { cidr_blocks = [ "10.250.7.128/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] ingress = [ { cidr_blocks = [ "10.250.7.128/25", ] description = "GSIRT TCP-8089" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "GSIRT TCP-9998" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "MSRV-S2-GSIRT-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0f23809476d85ba81" { description = "MSRV-S2-MPUB-RDS-STG2-DB-01-SG" egress = [ { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "cloudopsff-bastion02" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC CIDR" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "MSRV-S2-MPUB-RDSPROXY-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-06a91ddadd539811b", ] self = false to_port = 5432 }, ] name = "MSRV-S2-MPUB-RDS-STG2-DB-01-SG" tags = { "Name" = "MSRV-S2-MPUB-RDS-STG2-DB-01-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Name" = "MSRV-S2-MPUB-RDS-STG2-DB-01-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0182eaf26ec55b9aa" { description = "MSRV-S2-MSRV-READONLY-APP-1B-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.239.0/26", "10.12.228.128/26", ] description = "From LB" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.0/24", "10.11.176.219/32", ] description = "CLSHRD" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 22 }, { cidr_blocks = [ "10.250.3.128/25", ] description = "VPC CIDR 3" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.250.48.0/25", ] description = "VPC CIDR 2" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR 1" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [] description = "For HC in restart script" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "The Cache servers" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0bc2b81ac35033ad8", ] self = false to_port = 8080 }, ] name = "MSRV-S2-MSRV-READONLY-APP-1B-WF11-SG" tags = { "Name" = "MSRV-S2-MSRV-READONLY-APP-1B-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-S2-MSRV-READONLY-APP-1B-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0a26ef39441c10d5b" { description = "MSRV-S2-REPORT-1B-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", "10.250.2.0/24", ] description = "CLSHRD" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRV-S2-REPORT-1B-SG" tags = { "Name" = "MSRV-S2-REPORT-1B-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-S2-REPORT-1B-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0fd7acbad01c305f9" { description = "MSRV-S2-MPUB-APP-1B-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.239.0/26", "10.12.228.128/26", ] description = "From LB" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.64/27", ] description = "CLSHRD" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "TOWER-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRV-S2-MPUB-APP-1B-WF11-SG" tags = { "Name" = "MSRV-S2-MPUB-APP-1B-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-S2-MPUB-APP-1B-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-050b1068a5bcdb103" { description = "MSRV-S2-MSRV-ADMIN-APP-1A-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.48.0/25", "10.250.6.0/24", "10.250.3.128/25", ] description = "Stage-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.239.0/26", "10.12.228.128/26", ] description = "From LB" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", "10.250.2.0/24", "10.11.176.219/32", ] description = "CLSHRD" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 22 }, { cidr_blocks = [ "10.250.48.0/25", "10.250.6.0/24", "10.250.3.128/25", ] description = "Stage-VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.48.0/25", "10.250.3.128/25", ] description = "Dev EKS Cluster" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [] description = "For HC in restart script" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "The Cache servers" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0bc2b81ac35033ad8", ] self = false to_port = 8080 }, ] name = "MSRV-S2-MSRV-ADMIN-APP-1A-WF11-SG" tags = { "Name" = "MSRV-S2-MSRV-ADMIN-APP-1A-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-S2-MSRV-ADMIN-APP-1A-WF11-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0b036b1d6595da9ae" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0cc91af90c6e9ac5d" { #checkov:skip=CKV_AWS_260: Ensure no security groups allow ingress from 0.0.0.0:0 to port 80 description = "MSRV-S2-EXT_LB-SG" egress = [ { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS_TO_WORLD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP_TO_WORLD" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "MSRV-S2-EXT_LB-SG" tags = { "Name" = "MSRV-S2-EXT_LB-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-S2-EXT_LB-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-06a91ddadd539811b" { description = "MSRV-S2-MPUB-RDSPROXY-SG" egress = [ { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", "10.12.246.64/27", ] description = "BASTION SUBNETS" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "msrvs2-mpubapp1b01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 5432 }, { cidr_blocks = [] description = "msrvs2-ejbapp1a01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-04b4b3b776835aade", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.7.128/25", "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "Dev EKS Cluster" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", "10.250.3.128/25", "10.250.6.0/24", "10.250.48.0/25", "10.249.3.80/28", ] description = "Dev EKS Cluster" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "MSRV-S2-MPUB-RDSPROXY-SG" tags = { "Name" = "MSRV-S2-MPUB-RDSPROXY-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } tags_all = { "Name" = "MSRV-S2-MPUB-RDSPROXY-SG" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Stage" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" "Owner" = "Mandar Padsalgikar" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0bc2b81ac35033ad8" { description = "MSRV-S2-MSRV-CACHE-1B-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.7.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 22 }, { cidr_blocks = [] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0fd7acbad01c305f9", ] self = false to_port = 80 }, { cidr_blocks = [] description = "External LB" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cc91af90c6e9ac5d", ] self = false to_port = 80 }, ] name = "MSRV-S2-MSRV-CACHE-1B-SG" tags = { "Name" = "MSRV-S2-MSRV-CACHE-1B-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "MSRV-S2-MSRV-CACHE-1B-SG" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-0908d36b53ddf49ab" } resource "aws_security_group" "sg-0238ce14f5a8a6c63" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }] ingress = [] name = "k8s-traffic-msrvddev-091dd97041" name_prefix = null revoke_rules_on_delete = null tags = { "elbv2.k8s.aws/cluster" = "msrvd-dev" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Name" = "k8s-traffic-msrvddev-091dd97041" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Name" = "k8s-traffic-msrvddev-091dd97041" "elbv2.k8s.aws/cluster" = "msrvd-dev" "elbv2.k8s.aws/resource" = "backend-sg" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Stage" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-032d0ba12276c3cf9" }