resource "aws_security_group" "sg-0847aeb872b66ac21" { description = "Public instance security group" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.22.0/24", "10.12.252.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "10.11.0.0/16", ] description = "SME EU Networks" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "SME VPN" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.113.44/32", ] description = "grpsd2-application02" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.12.0.0/16", ] description = "SME US Networks" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.252.0/24", ] description = "VPC" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.120.0.0/16", ] description = "Orchard Peering" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "162.49.0.0/16", ] description = "SME VPN Networks" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.29.0.0/22", ] description = "SMEJ" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.29.16.0/21", ] description = "MCON-P" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.22.0/24", ] description = "VPC CIDR-2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [] description = "Fargate Tasks" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0693d39d3602378ae", ] self = false to_port = 9094 }, { cidr_blocks = ["10.11.105.0/24","10.250.47.0/27","10.250.47.192/27","10.249.8.112/28","10.11.182.96/27","10.250.35.0/25","10.251.12.0/22"] description = "delp vpc" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ ] self = false to_port = 9098 }, { cidr_blocks = [ "10.250.6.0/24", ] description = "GRPS EKS USE1 PROD" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, ] name = "sme-kafka-prod" tags = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Name" = "sme-kafka-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Name" = "sme-kafka-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-092018fe5bf1273d2" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "default" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "default" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-00a63fb795fb5dcb8" { description = "prod-dra-status-feeder-sg" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.192/26", "10.11.106.128/25", ] description = "aomap-kafka" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.19.128/28", "172.34.29.0/25", ] description = "EOM-FF" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "MAX-FF-P" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "MAX-FF-P" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.29.0/25", "10.250.19.128/28", ] description = "EOM-FF" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.11.189.0/25", "10.11.187.128/25", ] description = "msk" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "ECS OH SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-07e57d4fecad11e28", ] self = false to_port = 8080 }, ] name = "prod-dra-status-feeder-sg" tags = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "prod-dra-status-feeder-sg" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "prod-dra-status-feeder-sg" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-04bb1b1ac522f83a5" { description = "SWBD-PROD-MEMCACHE-SG" egress = [ { cidr_blocks = [ "10.12.252.0/24", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "172.34.22.0/24", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, ] ingress = [ { cidr_blocks = [ "10.12.252.0/24", ] description = "VPC-CIDR-1" from_port = 11211 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11211 }, { cidr_blocks = [ "172.34.22.0/24", ] description = "VPC-CIDR-2" from_port = 11211 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11211 }, { cidr_blocks = [ "10.0.0.0/8", ] description = "Temporary access for troubleshooting" from_port = 11211 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 11211 }, ] name = "SWBD-PROD-MEMCACHE-SG" tags = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "SWBD-PROD-MEMCACHE-SG" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "SWBD-PROD-MEMCACHE-SG" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-0c40e91ea04cf726a" { description = "Private instance security group" egress = [ { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0693d39d3602378ae", ] self = false to_port = 8080 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "switchboard-loadbalancer-security-group-prod" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-loadbalancer-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-loadbalancer-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-043385aa974056045" { description = "order-history-dax" egress = [ { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "172.34.22.0/24", "10.12.252.0/24", ] description = "VPC Traffic" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, ] name = "order-history-dax" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "order-history-dax" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "order-history-dax" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-07e57d4fecad11e28" { description = "Allow Access to 443" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.114.192/26", "10.11.106.128/25", ] description = "aomap-kafka" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "MAX-FF-P" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "172.34.24.128/27", "172.34.24.160/27", "172.34.24.192/27" ] description = "MAX-FF-P" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "ECS OH SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 8080 }, { cidr_blocks = [ "172.34.24.128/27", "172.34.24.160/27", "172.34.24.192/27" ] description = "MAX-FF-P" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, ] name = "prod-order-history-api-elb-sg" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "prod-order-history-api-elb-sg" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "prod-order-history-api-elb-sg" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-0d6fdb8d831ef4c04" { description = "Private instance security group" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [] description = "TO THE WORLD" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [ "sg-008a6b365ae135722", ] self = false to_port = 0 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", "10.11.176.192/26" ] description = "SSH from clshrd-bastion01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [] description = "" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-01326f37b63de9c2f", "sg-0693d39d3602378ae", ] self = false to_port = 3306 }, ] name = "switchboard-rds-security-group-prod" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-rds-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-rds-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-0003c8af597f5bbb6" { description = "ELB Access to ECS smej-endpoint services" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "ALB access" from_port = 4000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00d3cc66533c7f6af", ] self = false to_port = 4000 }, ] name = "smej-endpoint-service-ecs-sg" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "smej-endpoint-service-ecs-sg" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "smej-endpoint-service-ecs-sg" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-05bb1b1140e2f9e44" { description = "Public instance security group" egress = [ { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [] description = "" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0693d39d3602378ae", ] self = false to_port = 8080 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "switchboard-loadbalancer-internal-security-group-prod" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-loadbalancer-internal-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-loadbalancer-internal-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-0693d39d3602378ae" { description = "Public instance security group" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "psmegrps.arvato-systems.de" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "172.34.22.0/24", "10.12.252.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [] description = "" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0d6fdb8d831ef4c04", ] self = false to_port = 3306 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-05bb1b1140e2f9e44", "sg-0c40e91ea04cf726a", ] self = false to_port = 8080 }, ] name = "switchboard-task-security-group-prod" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-task-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "switchboard-task-security-group-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-01326f37b63de9c2f" { description = "sme-swithcboard-utility-sg" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "For access to Github" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.106.128/25", ] description = "Aoma-core-MSK GT-10-25-2022" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.114.192/26", ] description = "Aoma-core-prod MSK - GT-10-25-2022" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.180.128/25", ] description = "GDS-P1" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = ["0.0.0.0/0"] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.250.19.128/28", "172.34.29.0/25", ] description = "EOM-FF-P" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.251.8/32", ] description = "https://psmegrps.arvato-systems.de" from_port = 8000 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8000 }, { cidr_blocks = [ "172.34.24.128/25", "172.34.32.64/28", ] description = "MAX-FF-P" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "172.34.24.128/25", "172.34.32.64/28", ] description = "MAX-FF-P" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.29.0/25", "10.250.19.128/28", ] description = "EOM-FF-P" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", ] description = "clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "AnsibleTower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "sme-swithcboard-utility-sg" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "sme-swithcboard-utility-sg" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "sme-swithcboard-utility-sg" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-008a6b365ae135722" { description = "Public instance security group" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, { cidr_blocks = [ "172.34.22.0/24", "10.12.252.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "-1" security_groups = [] self = false to_port = 0 }, ] ingress = [ { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.252.0/24", ] description = "VPC-CIDR1" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "10.12.252.0/24", ] description = "VPC-CIDR1" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "172.34.22.0/24", ] description = "VPC-CIDR2" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = [ "172.34.22.0/24", ] description = "VPC-CIDR2" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, ] name = "sme-gsirt-sg-prod" tags = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "sme-gsirt-sg-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Business-unit" = "Digital Supply Chain" "Environment" = "Prod" "Name" = "sme-gsirt-sg-prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" } resource "aws_security_group" "sg-00d3cc66533c7f6af" { description = "Allow Access to 443 for smej-endpoint" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "162.49.203.44/32", ] description = "" from_port = 53 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 53 }, { cidr_blocks = [ "172.34.22.0/24", "10.12.252.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "172.34.22.0/24", "10.12.252.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "Internal ALB" from_port = 443 ipv6_cidr_blocks = [ "::/0", ] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "smej-endpoint-loadbalancer-sg" tags = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "smej-endpoint-loadbalancer-sg" "CLOPS_FW" = "NO" } tags_all = { "Business-Unit" = "Digital-Supply-Chain" "Environment" = "Prod" "Owner" = "Sang Han" "Project-Code" = "Switchboard" "Project-Name" = "Switchboard" "Name" = "smej-endpoint-loadbalancer-sg" "CLOPS_FW" = "NO" } vpc_id = "vpc-064428099e05f9a71" }