resource "aws_default_security_group" "ROUGH-CUTS-D-DEFAULT-SG" {
  vpc_id = aws_vpc.ROUGH-CUTS-D.id
  tags   = merge(var.tags, { 
    Name = "ROUGH-CUTS-D-DEFAULT-SG"
    CLOPS_FW = "NO" })
}

resource "aws_security_group" "ROUGH-CUTS-D-GSIRT-SG" {
  name        = "ROUGH-CUTS-D-GSIRT-SG"
  description = "ROUGH-CUTS-D-GSIRT-SG"
  egress = [
    {
      cidr_blocks      = ["10.250.202.96/27", "10.250.225.128/25", "10.249.9.224/28"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65534
    },
    {
      cidr_blocks      = ["10.250.202.96/27", "10.250.225.128/25", "10.249.9.224/28"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65534
    }
  ]
  ingress = [
    {
      cidr_blocks      = ["10.250.202.96/27", "10.250.225.128/25", "10.249.9.224/28"]
      description      = "GSIRT-TCP-8089"
      from_port        = 8089
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 8089
    },
    {
      cidr_blocks      = ["10.250.202.96/27", "10.250.225.128/25", "10.249.9.224/28"]
      description      = "GSIRT-TCP-9998"
      from_port        = 9998
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 9998
    },
  ]
  tags   = merge(var.tags, { 
    Name = "ROUGH-CUTS-D-GSIRT-SG"
    CLOPS_FW = "NO" 
    })
  vpc_id = aws_vpc.ROUGH-CUTS-D.id
}

resource "aws_security_group" "ROUGH-CUTS-D-EXT-ALB-SG" {
  name        = "ROUGH-CUTS-D-EXT-ALB-SG"
  description = "ROUGH-CUTS-D-EXT-ALB-SG"
  egress = [
    {
      cidr_blocks      = ["10.250.202.96/27", "10.250.225.128/25", "10.249.9.224/28"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 65534
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "Clops-OutBound"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "Clops-OutBound"
      from_port        = 80
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 80
    },
    {
      cidr_blocks      = ["10.250.202.96/27", "10.250.225.128/25", "10.249.9.224/28"]
      description      = "VPC-CIDR"
      from_port        = 0
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "udp"
      security_groups  = []
      self             = false
      to_port          = 65534
    }
  ]
  ingress = [
    {
      cidr_blocks = [
        "0.0.0.0/0",
      ]
      description      = "CloudOps-InBound"
      from_port        = 443
      ipv6_cidr_blocks = []
      prefix_list_ids  = []
      protocol         = "tcp"
      security_groups  = []
      self             = false
      to_port          = 443
    },
  ]
  vpc_id = aws_vpc.ROUGH-CUTS-D.id
  tags = {
    "Business-Unit" = "Switch Board"
    "Business-unit" = "Switch Board"
    "Environment"   = "UAT"
    "Name"          = "ROUGH-CUTS-D-EXT-ALB-SG"
    "Owner"         = "Robert Dewilder"
    "Project-Code"  = "SME-2000-0306A"
    "Project-Name"  = "Rough Cuts"
    "Project-code"  = "SME-2000-XXXX"
    "Project-name"  = "Rough Cuts"
    "CLOPS_FW"      = "NO"
  }
  tags_all = {
    "Business-Unit" = "Switch Board"
    "Business-unit" = "Switch Board"
    "Environment"   = "UAT"
    "Name"          = "ROUGH-CUTS-D-EXT-ALB-SG"
    "Owner"         = "Robert Dewilder"
    "Project-Code"  = "SME-2000-XXXX"
    "Project-Name"  = "Rough Cuts"
    "Project-code"  = "SME-2000-XXXX"
    "Project-name"  = "Rough Cuts"
    "CLOPS_FW"      = "NO"
  }
}