resource "aws_security_group" "sg-00f7b795e488809da" { description = "MSRV-P-MSRV-EJB-APP-1B-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28" ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.208/28", "10.12.204.192/28" ] description = "mpub-rds-subnets-cidrs" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", ] description = "" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.204.192/26", ] description = "MSRV-P-APP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.224/27", ] description = "MSRV-P-APP-SUBNETS" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3700 }, { cidr_blocks = [ "10.12.204.224/27", ] description = "MSRV-P-APP-SUBNETS" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-443" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0567a2f1caded7a53", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-80" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-003c00e5ff45de0c1", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRVP-ADMIN-ELB-SG" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-7d87e706", ] self = false to_port = 3700 }, { cidr_blocks = [] description = "MSRVP-ADMIN-ELB-SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-7d87e706", ] self = false to_port = 8080 }, ] name = "MSRV-P-MSRV-EJB-APP-1B-WF11-SG" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0227a97faf7597a2c" { description = "Security Group for msrvp-prod" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", "10.250.37.0/26", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", "10.250.37.0/26", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.198.0/25", "10.250.37.0/26", ] description = "Jenkins & ArgoCD" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC CIDR 01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/24", ] description = "API Server access from eks mngr" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR 02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow pods to communicate with the cluster API Server" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-082e402b2fff4e4df", ] self = false to_port = 443 }, ] name = "msrvp-prod-ControlPlane-SG" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-7603370d" { description = "MSRVP-PRSRV-EC-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "MSRV-P-PREREL-1A-SG" from_port = 6379 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-04975ab0032f3d19f", ] self = false to_port = 6379 }, ] name = "MSRVP-PRSRV-EC-SG" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-PRSRV-EC-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-PRSRV-EC-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0469ea5fb28439bc8" { description = "MSRV-P-MSRV-READONLY-APP-1B-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.192/26", ] description = "MSRV-P-APP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.224/27", ] description = "MSRV-P-APP-SUBNETS" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3700 }, { cidr_blocks = [ "10.12.204.224/27", ] description = "MSRV-P-APP-SUBNETS" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC CIDR EKS" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-443" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0567a2f1caded7a53", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-80" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-003c00e5ff45de0c1", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRVP-ADMIN-ELB-SG" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-7d87e706", ] self = false to_port = 3700 }, { cidr_blocks = [] description = "MSRVP-ADMIN-ELB-SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-7d87e706", ] self = false to_port = 8080 }, ] name = "MSRV-P-MSRV-READONLY-APP-1B-WF11-SG" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-082e402b2fff4e4df" { description = "SG rule for msrvp-prod worker node" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.236/32", ] description = "MSRV-P-GSIRT" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.246.0/25", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", "10.250.2.0/24", ] description = "CLSHRD-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "VPC_CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow node to communicate with each other" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "Allow pods running extension API servers on port 443 to receive communication from cluster control plane" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0227a97faf7597a2c", ] self = false to_port = 443 }, { cidr_blocks = [] description = "Allow worker Kubelets and pods to receive communication from the cluster control plane" from_port = 1025 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0227a97faf7597a2c", ] self = false to_port = 65535 }, ] name = "msrvp-prod-Worker-node-SG" tags = {} tags_all = {} vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-86bfdffd" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MPUB-NAT-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MPUB-NAT-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0b6b3cc46ee81bb93" { description = "MSRVP-REDSHIFT-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.202.1/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.202.1/32", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "MSRVP EKS Pod Connection" from_port = 5439 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5439 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5439 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5439 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5439 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5439 }, { cidr_blocks = [ "162.49.202.1/32", "10.11.36.15/32", ] description = "degtluv0334" from_port = 5439 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5439 }, { cidr_blocks = [] description = "MSRV-P-MPUB-APP-1A-WF11-SG" from_port = 5439 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0020b0e3078cb4d3e", ] self = false to_port = 5439 }, ] name = "MSRVP-REDSHIFT-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-REDSHIFT-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-REDSHIFT-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-033f982a06cded83e" { description = "EKS created security group applied to ENI that is attached to EKS Control Plane master nodes, as well as any managed workloads." egress = [ { cidr_blocks = [] description = "Allows EFA traffic, which is not matched by CIDR rules." from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [] description = "Allows EFA traffic, which is not matched by CIDR rules." from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = true to_port = 0 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, ] name = "eks-cluster-sg-msrvp-prod-70638974" tags = { "Name" = "eks-cluster-sg-msrvp-prod-70638974" "kubernetes.io/cluster/msrvp-prod" = "owned" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-669efe1d" { #checkov:skip=CKV_AWS_260: Ensure no security groups allow ingress from 0.0.0.0:0 to port 80 description = "MSRVP-MSRV-ELB-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRVP-MSRV-ELB-SG" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MSRV-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MSRV-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-579fff2c" { #checkov:skip=CKV_AWS_260: Ensure no security groups allow ingress from 0.0.0.0:0 to port 80 description = "MSRVP-PRSRV-ELB-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRVP-PRSRV-ELB-SG" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-PRSRV-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-PRSRV-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-003c00e5ff45de0c1" { description = "MSRV-P-INFOSEC-SG-80" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.10.40.132/32", ] description = "Qualys Internal Scanner (vm_or_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.111.191/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.192/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.193/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_3)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.111.194/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_4)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.112.97/32", ] description = "Acunetix Internal Scanner 2" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.2.50/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.2.51/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.222.36/32", ] description = "Whitehat Satellite VM" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.40.0.49/32", ] description = "Qualys Internal Scanner (vm_or_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.129.13/32", ] description = "Qualys Australia VM (vm_au_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.129.2/32", ] description = "Qualys Australia VM (vm_au_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.150.34/32", ] description = "Qualys Internal Scanner (vm_hk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.225.48/32", ] description = "Qualys Internal Scanner (vm_uk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.225.55/32", ] description = "Qualys UK VM (vm_uk_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.69.17/32", ] description = "Qualys Internal Scanner (vm_pmg_scanner_new)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.83.8/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_1)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "162.49.83.9/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_2)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "3.212.1.134/32", ] description = "AWS Scanner - WhiteHat" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "3.91.255.69/32", "52.44.144.28/32", "52.86.59.184/32", "54.205.42.52/32", ] description = "AWS Scanner" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "4.15.150.132/32", ] description = "Acunetix and other Internal Scanners (25 Madison)" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "50.207.94.58/32", "64.244.165.6/32", "162.244.5.6/32", "63.128.163.0/27", "162.244.5.5/32", "162.244.4.5/32", "162.244.4.6/32", "38.122.74.18/32", "162.244.5.3/32", "162.223.124.0/27", "162.244.5.2/32", "162.244.4.3/32", "148.253.176.50/32", "50.207.94.59/32", "52.204.38.40/32", "162.244.4.2/32", "194.46.129.108/32", ] description = "Whitehat" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "64.39.96.0/20", ] description = "Qualys" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "MSRV-P-INFOSEC-SG-80" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-04975ab0032f3d19f" { description = "MSRV-P-PREREL-1A-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "gtunxlvu07015.server.arvato-systems.de" from_port = 11583 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11583 }, ] ingress = [ { cidr_blocks = [ "10.11.105.0/25", ] description = "DEL-P2-VPC-CIDR-1" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9000 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.192/26", ] description = "MSRV-P-APP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-443" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0567a2f1caded7a53", ] self = false to_port = 9000 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-80" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-003c00e5ff45de0c1", ] self = false to_port = 9000 }, { cidr_blocks = [] description = "MSRV-P-MSRV-ADMIN-APP-1B-WF11-SG" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-037a263b243b68e0b", ] self = false to_port = 9000 }, { cidr_blocks = [] description = "MSRV-P-MSRV-EJB-APP-1B-WF11-SG" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00f7b795e488809da", ] self = false to_port = 9000 }, { cidr_blocks = [] description = "MSRV-P-MSRV-READONLY-APP-1B-WF11-SG" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0469ea5fb28439bc8", ] self = false to_port = 9000 }, { cidr_blocks = [] description = "MSRVP-PRSRV-ELB-SG" from_port = 9000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-579fff2c", ] self = false to_port = 9000 }, ] name = "MSRV-P-PREREL-1A-SG" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0020b0e3078cb4d3e" { description = "MSRV-P-MPUB-APP-1A-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.192/26", ] description = "MSRV-P-APP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 9990 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9990 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 9990 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9990 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-443" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0567a2f1caded7a53", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-80" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-003c00e5ff45de0c1", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRV-P-MSRV-ADMIN-APP-1B-WF11-SG" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-037a263b243b68e0b", ] self = false to_port = 3700 }, { cidr_blocks = [] description = "MSRV-P-MSRV-EJB-APP-1B-WF11-SG" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00f7b795e488809da", ] self = false to_port = 3700 }, { cidr_blocks = [] description = "MSRV-P-MSRV-READONLY-APP-1B-WF11-SG" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0469ea5fb28439bc8", ] self = false to_port = 3700 }, { cidr_blocks = [] description = "MSRVP-MPUB-ELB-SG" from_port = 4848 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-9f9cfce4", ] self = false to_port = 4848 }, { cidr_blocks = [] description = "MSRVP-MPUB-ELB-SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-9f9cfce4", ] self = false to_port = 8080 }, ] name = "MSRV-P-MPUB-APP-1A-WF11-SG" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-7d87e706" { description = "MSRVP-ADMIN-ELB-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.6.0/24" ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.105.128/27", ] description = "From DEL-P2 app subnet-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.105.64/27", ] description = "From DEL-P2 app subnet-1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.184.0/25" ] description = "mconp" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.35.0/24" ] description = "delivery" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.250.46.128/25", "10.250.47.128/25" ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "109.235.141.224/32", "145.228.205.186/32", "162.49.169.119/32", "170.171.252.210/32", "192.136.232.212/32", "54.88.36.26/32", "63.138.196.2/32", "84.17.163.36/32", "52.55.216.77/32", "91.105.240.134/32", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "109.235.141.224/32", "145.228.205.186/32", "162.49.169.119/32", "170.171.252.210/32", "192.136.232.212/32", "54.88.36.26/32", "63.138.196.2/32", "84.17.163.36/32", "91.105.240.134/32", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "172.34.27.128/26", ] description = "AOMA-P1-XAPP-1B" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "172.34.27.64/26", ] description = "AOMA-P1-XAPP-1A" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "18.195.179.117/32", ] description = "delp2-dspcache03" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "3.122.90.129/32", ] description = "AOMA-P1" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "34.194.233.31/32", ] description = "PROMO-P2-NAT" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "34.203.125.76/32", ] description = "PROMO-P-NAT" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "52.29.227.44/32", "52.28.231.47/32", "52.29.142.172/32", ] description = "delp2-dspcache03" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "52.73.167.251/32", ] description = "DDEX consumer 01/10/2018" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "52.73.167.251/32", ] description = "DDEX consumer 01/10/2018" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "84.17.180.232/32", ] description = "gtunxlvo08985.server.arvato-systems.de" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "84.17.180.232/32", ] description = "gtunxlvo08985.server.arvato-systems.de" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] name = "MSRVP-ADMIN-ELB-SG" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-ADMIN-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-ADMIN-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-02380215feb7c6240" { description = "MSRVP-MPUB-RDS-SG-PROD" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.204.184/32", ] description = "SME-Rutherford-NJ" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [] description = "MSRV-P-MPUB-APP-1A-WF11-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0020b0e3078cb4d3e", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "MSRV-P-VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "MSRV-P-VPC-CIDRS" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [] description = "MSRVP-MPUB-RDSPROXY-SG" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-03202afbaef014a58", ] self = false to_port = 5432 }, ] name = "MSRVP-MPUB-RDS-SG-PROD" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" } tags_all = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0376d9ae6640e8ed3" { description = "[k8s] Shared Backend SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [] name = "k8s-traffic-yourclustername-0fa8d0c98f" tags = { "elbv2.k8s.aws/cluster" = "your-cluster-name" "elbv2.k8s.aws/resource" = "backend-sg" } tags_all = { "elbv2.k8s.aws/cluster" = "your-cluster-name" "elbv2.k8s.aws/resource" = "backend-sg" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-c898f8b3" { description = "MSRVP-MSRV-RDS-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "162.49.202.1/32", ] description = "From degtluv0334.server.arvato-systems.de" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.204.184/32", ] description = "SME-Rutherford-NJ" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.204.192/27", ] description = "RDS Subnets" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.204.224/27", ] description = "MSRV-P-APP-SUBNETS" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, ] name = "MSRVP-MSRV-RDS-SG" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MSRV-RDS-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MSRV-RDS-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0c655e3eb013968ba" { #checkov:skip=CKV_AWS_260: Ensure no security groups allow ingress from 0.0.0.0:0 to port 80 description = "[k8s] Managed SecurityGroup for LoadBalancer" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, ] tags = { "elbv2.k8s.aws/cluster" = "your-cluster-name" "ingress.k8s.aws/resource" = "ManagedLBSecurityGroup" "Name" = "elbv2.k8s.aws/cluster" "kubernetes.io/cluster/msrvp-prod" = "owned" "Business-Unit" = "Delivery-Media-Services" "Environment" = "Dev" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0fd9a3f67ed5b3e11" { description = "MSRV-P-GSIRT-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "" from_port = 514 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 514 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRV-P-GSIRT-SG" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRV-P-GSIRT-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRV-P-GSIRT-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-037a263b243b68e0b" { description = "MSRV-P-MSRV-ADMIN-APP-1B-WF11-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-TCP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "DNS-UDP" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "SMTPS" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.192/26", ] description = "MSRV-P-APP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.204.224/27", ] description = "MSRV-P-APP-SUBNETS" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3700 }, { cidr_blocks = [ "10.12.204.224/27", ] description = "MSRV-P-APP-SUBNETS" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "Ansible Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.6.0/24", "10.12.204.128/25", ] description = "VPC CIDR EKS" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-443" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0567a2f1caded7a53", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRV-P-INFOSEC-SG-80" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-003c00e5ff45de0c1", ] self = false to_port = 8080 }, { cidr_blocks = [] description = "MSRVP-ADMIN-ELB-SG" from_port = 3700 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-7d87e706", ] self = false to_port = 3700 }, { cidr_blocks = [] description = "MSRVP-ADMIN-ELB-SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-7d87e706", ] self = false to_port = 8080 }, ] name = "MSRV-P-MSRV-ADMIN-APP-1B-WF11-SG" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Owner" = "Mandar Padsalgikar" "Patch Group" = "General" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "CLOPS_FW" = "NO" "Name" = "MSRV-P-MSRV-ADMIN-APP-1B-WF11-SG" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-9f9cfce4" { #checkov:skip=CKV_AWS_260: Ensure no security groups allow ingress from 0.0.0.0:0 to port 80 description = "MSRVP-MPUB-ELB-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MSRVP-MPUB-ELB-SG" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MPUB-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-MPUB-ELB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-0567a2f1caded7a53" { description = "MSRV-P-INFOSEC-SG-443" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.10.40.132/32", ] description = "Qualys Internal Scanner (vm_or_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.111.191/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.192/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.193/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_3)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.111.194/32", ] description = "Qualys Internal Scanner (vm_ny2_scanner_4)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.112.97/32", ] description = "Acunetix Internal Scanner 2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.2.50/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.2.51/32", ] description = "Qualys Internal Scanner (ap_ny_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.222.36/32", ] description = "Whitehat Satellite VM" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.40.0.49/32", ] description = "Qualys Internal Scanner (vm_or_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "148.253.176.50/32", "162.244.5.6/32", "50.207.94.58/32", "162.244.4.3/32", "194.46.129.108/32", "162.244.4.2/32", "162.244.5.3/32", "52.204.38.40/32", "162.244.4.5/32", "162.223.124.0/27", "162.244.5.2/32", "38.122.74.18/32", "162.244.4.6/32", "64.244.165.6/32", "50.207.94.59/32", "162.244.5.5/32", "63.128.163.0/27", ] description = "Whitehat" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.129.13/32", ] description = "Qualys Australia VM (vm_au_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.129.2/32", ] description = "Qualys Australia VM (vm_au_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.150.34/32", ] description = "Qualys Internal Scanner (vm_hk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.225.48/32", ] description = "Qualys Internal Scanner (vm_uk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.225.55/32", ] description = "Qualys UK VM (vm_uk_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.69.17/32", ] description = "Qualys Internal Scanner (vm_pmg_scanner_new)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.83.8/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_1)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "162.49.83.9/32", ] description = "Qualys Culpeper Scanner (ap_cp_scanner_2)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "3.212.1.134/32", ] description = "AWS Scanner - WhiteHat" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "3.91.255.69/32", "54.205.42.52/32", "52.86.59.184/32", "52.44.144.28/32", ] description = "AWS Scanner" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "4.15.150.132/32", ] description = "Acunetix and other Internal Scanners (25 Madison)" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "64.39.96.0/20", ] description = "Qualys" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "MSRV-P-INFOSEC-SG-443" tags = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" "Name" = "MSRV-P-INFOSEC-SG-443" } tags_all = { "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" "Name" = "MSRV-P-INFOSEC-SG-443" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-03202afbaef014a58" { description = "MSRVP-MPUB-RDSPROXY-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.105.0/25", "10.11.36.15/32", "162.49.202.1/32", ] description = "" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0020b0e3078cb4d3e", "sg-669efe1d", ] self = false to_port = 5432 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", "10.12.246.0/24", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.224/28" ] description = "MSRV-P-APP-1A" from_port = 5432 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 5432 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "MSRV-P-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "MSRV-P-VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "MSRVP-MPUB-RDSPROXY-SG" tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" "Name" = "MSRVP-MPUB-RDSPROXY-SG" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "MSRVP-EXT-ALB-SG" { description = "MSRVP-EXT-ALB-SG" egress = [ { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.204.128/25", "10.250.6.0/24", "10.249.6.192/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, ] name = "MSRVP-EXT-ALB-SG" tags = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-EXT-ALB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } tags_all = { "App" = "Media-service" "Business-Unit" = "Delivery-Media-Services" "Business-unit" = "DeliveryMedia-Services" "Environment" = "Prod" "Name" = "MSRVP-EXT-ALB-SG" "Owner" = "Robert Dewilder" "Project-Code" = "SME-2000-0306G" "Project-Name" = "Delivery-Media-Services" "Project-code" = "SME - 2000-0306G" "Project-name" = "Media Service" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" } resource "aws_security_group" "sg-07de7c1cf6e391d41" { #checkov:skip=CKV_AWS_260: Ensure no security groups allow ingress from 0.0.0.0:0 to port 80 description = "MSRVP-VARNISH-ELB-SG" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }] ingress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }] name = "MSRVP-VARNISH-ELB-SG" name_prefix = null revoke_rules_on_delete = null tags = { "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" "Name" = "MSRVP-VARNISH-ELB-SG" } tags_all = { "Name" = "MSRVP-VARNISH-ELB-SG" "Business-unit" = "Delivery-Media-Services" "Environment" = "PROD" "Project-code" = "SME - 2000-0306G" "Project-name" = "Delivery_Media_Services" "Owner" = "Mandar Padsalgikar" "CLOPS_FW" = "NO" } vpc_id = "vpc-40fb5427" }