resource "aws_security_group" "sg-0f783c2b5ee5c8969" { description = "MAX-FF-P-ND-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "for S3 access" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.107.128/25", ] description = "EOM-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.107.128/25", ] description = "EOM-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.221.0/25", ] description = "MAX-P-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.221.0/25", ] description = "MAX-P-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.0/25", ] description = "US_VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.0/25", ] description = "US_VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "DIGSYS-P3 VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.251.11.0/24", "10.11.189.0/25", "10.249.6.208/28", "10.251.12.0/22", "10.11.187.176/28", "10.251.26.0/23"] description = "DIGSYS-P3 VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.251.11.0/24", "10.11.189.0/25", "10.249.6.208/28", "10.251.12.0/22", "10.11.187.176/28", "10.251.26.0/23"] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 } ] ingress = [ { cidr_blocks = [ "10.11.116.0/25", "172.34.20.0/25", "10.250.4.16/28", "10.11.113.192/26", "10.11.107.0/26", "10.11.107.128/26", "10.251.10.0/25", "10.11.108.32/28", "10.250.6.0/24" ] description = "MAX-OH-S" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.93.0/24", "10.251.12.0/22", "10.11.107.64/26", "10.0.0.0/8", ] description = "MAX-P3" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.11.176.192/27", "10.11.176.0/24", "10.11.179.192/26", ] description = "From CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", "10.11.176.0/24", "10.11.179.192/26", ] description = "From CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.11.221.0/25", "10.12.209.128/25", ] description = "MAX-P-VA" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.221.0/25", ] description = "US_VPC_CIDR" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = ["172.32.6.0/24"] description = "MAX-FF-P-VPC-CIDR-5" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "172.34.20.22/32", ] description = "maxd-boapp02" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", "172.34.12.0/25"] description = "VPC CIDR" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [] description = "" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00ee99fe774fb9778", ] self = false to_port = 3306 }, { cidr_blocks = [] description = "MAX-FF-P-ND-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "MAX-FF-P-ND-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = ["10.11.107.96/27", "10.11.107.64/27"] description = "MAX-P3 API Gateway Access" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = ["10.250.93.128/26"] description = "DB connectivity from MAX-P3" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, ] name = "MAX-FF-P-ND-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-ND-SG" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-ND-SG" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-00d38e10a94080540" { description = "MAX-FF-P-REPLAY-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SHARED-VA-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SHARED-VA-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.12.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.12.0/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "VPC-CIDR-3" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.32.64/28", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.32.64/28", ] description = "VPC-CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.113.251/32", ] description = "maxohs-gitrun02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.24/32", ] description = "ssh from bastion IP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", "10.12.236.128/26", ] description = "SSH from Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MAX-FF-P-REPLAY-SG" tags = { "Business-Unit" = "EOM" "Environment" = "PROD" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME - 2000-0590E" "Project-Name" = "Max Prod" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-REPLAY-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "PROD" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME - 2000-0590E" "Project-Name" = "Max Prod" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-REPLAY-SG" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-0d519631363ed0e10" { description = "MAX-FF-P-WINCLIENT-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.29/32", ] description = "maxp-boapp02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.20.22/32", "10.12.213.61/32", ] description = "" from_port = 6400 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 6440 }, { cidr_blocks = [ "172.34.24.135/32", ] description = "maxffp-boapp02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.32.64/28", "172.34.24.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.32.64/28", "172.34.24.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.24/32", ] description = "From maxp-bastion01 " from_port = 3389 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3389 }, { cidr_blocks = [ "10.12.246.64/27", "10.12.246.0/25", ] description = "SSH from clshrd-bastion01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", "10.12.246.0/25", ] description = "SSH from clshrd-bastion01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "clshrd-bastion01" from_port = 3389 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3389 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "MAX-FF-P-WINCLIENT-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-WINCLIENT-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-WINCLIENT-SG" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-04db850026a40dda2" { description = "MAX-FF-P-BOAPP-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "For smtp.sendgrid.net" from_port = 25 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 25 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "For smtp.sendgrid.net" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "LDAPS" from_port = 636 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 636 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "for smtp.sendgrid.net" from_port = 465 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 465 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.20.80/28", ] description = "VPC-CIDR" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.213.42/32", ] description = "maxd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.221.24/32", ] description = "maxp-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.221.24/32", ] description = "maxp-bastion01" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", ] description = "clshrd" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "EXT_ALB_SG" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "172.34.24.155/32", ] description = "maxffp-winclient02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.24.155/32", ] description = "maxffp-winclient02" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.24.173/32", ] description = "maxffp-etlapp01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "EXT_ALB_SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00992919e95b56f55", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "EXT_ALB_SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-00992919e95b56f55", ] self = false to_port = 65535 }, { cidr_blocks = [] description = "SELF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "SELF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, ] name = "MAX-FF-P-BOAPP-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-BOAPP-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-BOAPP-SG" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-024e79c6f4db12888" { description = "default VPC security group" egress = [] ingress = [] name = "default" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-DEFAULT-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-DEFAULT-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-09415e85d36bdfb5b" { description = "MAX-FF-P-PROCESSOR-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SHARED-VA-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "SHARED-VA-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", ] description = "VPC-1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = ["172.34.24.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.32.64/28", ] description = "VPC-2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = ["172.34.24.128/27", "172.34.24.160/27", "172.34.24.192/27", ] description = "maxffp-msk01" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "10.11.113.251/32", ] description = "maxohs-gitrun02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "SHARED-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.24/32", ] description = "ssh from bastion IP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.236.128/26", "10.250.2.0/24", ] description = "SSH from Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "SHARED-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.32.6.0/24", "172.34.24.128/25", ] description = "MAX-FF-P-CIDR-1" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, ] name = "MAX-FF-P-PROCESSOR-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-PROCESSOR-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-PROCESSOR-SG" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-0c9cec9d8bd87f9f1" { description = "MAX-FF-P-MSK-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.32.64/28", "172.34.24.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.32.64/28", "172.34.24.128/25", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.24.128/27", "172.34.24.173/32", ] description = "MAX-FF-P-APP-1A" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.22.16/28", "172.34.22.0/28", ] description = "order history" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, ] ingress = [ { cidr_blocks = [ "10.11.105.0/24", ] description = "DEL-P2" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.11.105.0/24", "10.250.35.0/25" ] description = "DEL-P2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.105.96/27", ] description = "From DEL-P2-APP-1B" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.107.0/24", ] description = "EOM-FF-P1" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = ["10.251.11.0/24", "10.11.189.0/25", "10.251.12.0/22", "10.11.187.176/28", "10.250.93.0/24"] description = "DIGSYS-P3-VPC-CIDR" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.107.128/25", ] description = "EOM-FF-P1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "ORCH-SWBRD-P" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.12.252.0/24", "172.34.22.0/24", ] description = "ORCH-SWBRD-P" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.11.176/28", "172.34.12.0/25", ] description = "EAI_TGW_TESTING" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.250.11.176/28", "172.34.12.0/25", ] description = "EAI_TGW_TESTING" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "Schema registry" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "172.34.18.96/27", ] description = "EOM-FF-P2" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "172.34.18.96/27", ] description = "EOM-FF-P2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "VPC-1" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "VPC-1" from_port = 9092 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9092 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "VPC-CIDR-1" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.24.235/32", ] description = "" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "172.34.24.235/32", ] description = "" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "172.34.32.64/28", ] description = "VPC-CIDR-2" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0518a0d0d43c04307", ] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-0518a0d0d43c04307", ] self = true to_port = 65535 }, { cidr_blocks = [ "172.34.24.128/27", "172.34.24.173/32", ] description = "MAX-FF-P-APP-1A" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "10.11.105.0/24", "10.250.47.0/27", "10.250.47.192/27", "10.249.8.112/28", "10.11.182.96/27", "10.250.35.0/25", "10.251.12.0/22", ] description = "Delp vpc " from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, { cidr_blocks = [ "172.34.22.16/28", "172.34.22.0/28", ] description = "order history" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, ] name = "MAX-FF-P-MSK-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-MSK-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-MSK-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-0cc9377f3129cfd3e" { description = "Slave group for Elastic MapReduce created on 2021-06-07T12:43:12.372Z" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.12.246.75/32", "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "CIS-DB" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "" from_port = -1 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [ "sg-032b0957ddb8ad353", ] self = true to_port = -1 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-032b0957ddb8ad353", ] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-032b0957ddb8ad353", ] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 8443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-04969dadbef74c810", ] self = false to_port = 8443 }, ] name = "ElasticMapReduce-Slave-Private" tags = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" "for-use-with-amazon-emr-managed-policies" = "true" Name = "ElasticMapReduce-Slave-Private" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "CLOPS_FW" = "YES" "Terraform" = "TRUE" "for-use-with-amazon-emr-managed-policies" = "true" "Project-Name" = "Max" Name = "ElasticMapReduce-Slave-Private" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-0df9459bb1a4ff2e3" { description = "MAX-FF-P-GSIRT-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "max-ff-p-vpc" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "max-ff-p-vpc" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", "172.34.12.32/28", ] description = "" from_port = 8089 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8089 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", "172.34.12.32/28", ] description = "" from_port = 9998 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9998 }, { cidr_blocks = [ "172.34.24.128/25", ] description = "" from_port = 514 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 514 }, ] name = "MAX-FF-P-GSIRT-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-GSIRT-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-GSIRT-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-0518a0d0d43c04307" { description = "MAX-FF-P-MSKUTIL-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.12.252.64/26", ] description = "SWITCH BOARD PROD MSK" from_port = 2181 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 2181 }, { cidr_blocks = [ "10.12.252.64/26", ] description = "SWITCH BOARD PROD MSK" from_port = 9094 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9094 }, { cidr_blocks = [ "10.250.11.176/28", ] description = "EAI_TGW_TESTING" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.11.176/28", ] description = "EAI_TGW_TESTING" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.12.0/25", ] description = "EIA_TGW_TESTING" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "172.34.12.0/25", ] description = "EIA_TGW_TESTING" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.24/32", ] description = "MAXP-BASTION" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", ] description = "clshrd" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, ] name = "MAX-FF-P-MSKUTIL-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-MSKUTIL-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Name" = "MAX-FF-P-MSKUTIL-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-04969dadbef74c810" { description = "Service access group for Elastic MapReduce created on 2021-06-07T12:43:12.372Z" egress = [ { cidr_blocks = [] description = "" from_port = 8443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-032b0957ddb8ad353", "sg-0cc9377f3129cfd3e", ] self = false to_port = 8443 }, ] ingress = [ { cidr_blocks = [] description = "" from_port = 9443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-032b0957ddb8ad353", ] self = false to_port = 9443 }, ] name = "ElasticMapReduce-ServiceAccess" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" "for-use-with-amazon-emr-managed-policies" = "true" Name = "ElasticMapReduce-ServiceAccess" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" "for-use-with-amazon-emr-managed-policies" = "true" Name = "ElasticMapReduce-ServiceAccess" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-032b0957ddb8ad353" { description = "Master group for Elastic MapReduce created on 2021-06-07T12:43:12.372Z" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.113.251/32", ] description = "maxohs-gitrun02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.176.219/32", ] description = "cloudopsff-bastion02" from_port = 8889 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8889 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.246.75/32", ] description = "" from_port = 8889 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8889 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "CIS-DB" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [] description = "" from_port = -1 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "icmp" security_groups = [ "sg-0cc9377f3129cfd3e", ] self = true to_port = -1 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-0cc9377f3129cfd3e", ] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [ "sg-0cc9377f3129cfd3e", ] self = true to_port = 65535 }, { cidr_blocks = [] description = "" from_port = 8443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-04969dadbef74c810", ] self = false to_port = 8443 }, ] name = "ElasticMapReduce-Master-Private" tags = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "CLOPS_FW" = "YES" "Terraform" = "TRUE" "for-use-with-amazon-emr-managed-policies" = "true" Name = "ElasticMapReduce-Master-Private" Project-Name = "Max" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "CLOPS_FW" = "YES" "Terraform" = "TRUE" "for-use-with-amazon-emr-managed-policies" = "true" Name = "ElasticMapReduce-Master-Private" Project-Name = "Max" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-00992919e95b56f55" { #checkov:skip=CKV_AWS_260: Ensure no security groups allow ingress from 0.0.0.0/0 to port 80. Migrated existing security group as-is. description = "MAX-FF-P-BOALB-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "LDAPS" from_port = 636 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 636 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "For MAX-BO" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "For MAX-BO" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65534 }, ] name = "MAX-FF-P-BOALB-SG" tags = { "Business-Unit" = "EOM" "Environment" = "PROD" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-BOALB-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-BOALB-SG" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-0b3ab4897be47325d" { description = "MAX-FF-P-ETLAPP-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 123 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 123 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "NTP-UDP" from_port = 323 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 323 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "digital-music-ftp.amazonmp3.com - CLOUDOPS-10720" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.11.107.0/24", ] description = "EOM-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.107.0/24", ] description = "EOM-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", ] description = "VPC-CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "CLOUDOPS-15479" from_port = 8080 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 8080 }, { cidr_blocks = [ "172.34.24.128/27", "172.34.24.160/27", "172.34.24.192/27", ] description = "msk" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.24/32", ] description = "ssh from bastion IP" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.12.236.128/26", ] description = "SSH from Tower" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", "10.12.246.64/27", ] description = "clshrd" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["172.34.24.128/27", "172.34.24.160/27", "172.34.24.192/27", ] description = "msk" from_port = 9098 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 9098 }, ] name = "MAX-FF-P-ETLAPP-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-ETLAPP-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-ETLAPP-SG" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-05792502feb2d2f47" { description = "MAX-FF-P-LAMBDA-SG" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTPS" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "From CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 22 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 22 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] name = "MAX-FF-P-LAMBDA-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Dev" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-LAMBDA-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Dev" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max-Dev" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-LAMBDA-SG" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "sg-00ee99fe774fb9778" { description = "allow testing for lambda-fed-query" egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [] name = "lambda-fed-query-sg" tags = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "lambda-fed-query-sg" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "lambda-fed-query-sg" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "MAX-FF-P-EMR-Workspace-SG" { description = "MAX-FF-P-EMR-Workspace-SG" egress = [ { cidr_blocks = [ "172.34.24.128/25", "172.34.32.64/28", "172.34.12.0/25", "172.34.12.192/28", "172.32.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "172.34.24.128/25", "172.34.32.64/28", "172.34.12.0/25", "172.34.12.192/28", "172.32.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, ] name = "MAX-FF-P-EMR-Workspace-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" Project-Name = "Max" Name = "MAX-FF-P-EMR-Workspace-SG" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" Project-Name = "Max" Name = "MAX-FF-P-EMR-Workspace-SG" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } vpc_id = "vpc-048e1c7481899cd24" } resource "aws_security_group" "MAX-FF-P-EMR-Engine-SG" { description = "MAX-FF-P-EMR-Engine-SG" egress = [ { cidr_blocks = [ "172.34.24.128/25", "172.34.32.64/28", "172.34.12.0/25", "172.34.12.192/28", "172.32.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, ] ingress = [ { cidr_blocks = [ "172.34.24.128/25", "172.34.32.64/28", "172.34.12.0/25", "172.34.12.192/28", "172.32.6.0/24", ] description = "VPC-CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65534 }, ] name = "MAX-FF-P-EMR-Engine-SG" tags = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" Project-Name = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-EMR-Engine-SG" } tags_all = { "Business-Unit" = "EOM" "Environment" = "Prod" "Owner" = "Joe Rinaldi" "Patch Group" = "General" "Project-Code" = "SME-2000-0590E" Project-Name = "Max" "CLOPS_FW" = "YES" "Terraform" = "TRUE" Name = "MAX-FF-P-EMR-Engine-SG" } vpc_id = "vpc-048e1c7481899cd24" } #resource "aws_security_group" "ElasticMapReduce-master" { # description = "Master group for Elastic MapReduce created on 2023-07-24T21:31:39.021Z" # egress = [{ # cidr_blocks = ["0.0.0.0/0"] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65535 # }, { # cidr_blocks = ["0.0.0.0/0"] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65535 # }] # ingress = [{ # cidr_blocks = [] # description = "" # from_port = -1 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "icmp" # security_groups = ["sg-08039fcb8d993a686"] # self = true # to_port = -1 # }, { # cidr_blocks = [] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = ["sg-08039fcb8d993a686"] # self = true # to_port = 65535 # }, { # cidr_blocks = [] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = ["sg-08039fcb8d993a686"] # self = true # to_port = 65535 # }, { # cidr_blocks = [] # description = "" # from_port = 8443 # ipv6_cidr_blocks = [] # prefix_list_ids = ["pl-62a7420b"] # protocol = "tcp" # security_groups = [] # self = false # to_port = 8443 # }] # name = "ElasticMapReduce-master" # name_prefix = null # revoke_rules_on_delete = null # tags = { # for-use-with-amazon-emr-managed-policies = "true" # } # tags_all = { # for-use-with-amazon-emr-managed-policies = "true" # } # vpc_id = "vpc-001a6634da4d4173f" #} #resource "aws_security_group" "ElasticMapReduce-slave" { # description = "Slave group for Elastic MapReduce created on 2023-07-24T21:31:39.021Z" # egress = [{ # cidr_blocks = ["0.0.0.0/0"] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = [] # self = false # to_port = 65535 # }, { # cidr_blocks = ["0.0.0.0/0"] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = [] # self = false # to_port = 65535 # }] # ingress = [{ # cidr_blocks = [] # description = "" # from_port = -1 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "icmp" # security_groups = ["sg-03b5662dd87896549"] # self = true # to_port = -1 # }, { # cidr_blocks = [] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "tcp" # security_groups = ["sg-03b5662dd87896549"] # self = true # to_port = 65535 # }, { # cidr_blocks = [] # description = "" # from_port = 0 # ipv6_cidr_blocks = [] # prefix_list_ids = [] # protocol = "udp" # security_groups = ["sg-03b5662dd87896549"] # self = true # to_port = 65535 # }] # name = "ElasticMapReduce-slave" # name_prefix = null # revoke_rules_on_delete = null # tags = { # for-use-with-amazon-emr-managed-policies = "true" # } # tags_all = { # for-use-with-amazon-emr-managed-policies = "true" # } # vpc_id = "vpc-001a6634da4d4173f" #} resource "aws_security_group" "FF-SHARED-INT-ALB-SG" { description = "FF-SHARED-INT-ALB-SG" egress = [{ cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["0.0.0.0/0"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }] ingress = [{ cidr_blocks = ["10.0.0.0/8"] description = "" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["10.0.0.0/8"] description = "SME-VPN-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["162.49.0.0/16"] description = "SME-VPN-2" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = ["192.168.0.0/16"] description = "SME-VPN-3" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }] name = "FF-SHARED-INT-ALB-SG" name_prefix = null revoke_rules_on_delete = null tags = { "Business-Unit" = "EOM" "CLOPS_FW" = "NO" "Name" = "FF-SHARED-INT-ALB-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" } tags_all = { "Business-Unit" = "EOM" "CLOPS_FW" = "NO" "Name" = "FF-SHARED-INT-ALB-SG" "Owner" = "Joe Rinaldi" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max" } vpc_id = "vpc-0952e13c792d68c54" } resource "aws_security_group" "MAX-FF-P-BATCH-SG" { egress = [ { cidr_blocks = [ "0.0.0.0/0", ] description = "HTTP" from_port = 80 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 80 }, { cidr_blocks = [ "0.0.0.0/0", ] description = "for S3 access" from_port = 443 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 443 }, { cidr_blocks = [ "10.11.107.128/25", ] description = "EOM-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.107.128/25", ] description = "EOM-P" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", ] description = "To CCSHARE-FF-APP-1A" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.221.0/25", ] description = "MAX-P-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.221.0/25", ] description = "MAX-P-VA" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.0/25", ] description = "US_VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.221.0/25", ] description = "US_VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.0/25", ] description = "To CLSHRD-P CIDR-1" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.12.246.64/26", "10.12.237.160/27", ] description = "CLOPS-SMTP-EP" from_port = 587 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 587 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.250.2.0/24", ] description = "To CLSHRD-P CIDR-2" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = ["172.34.24.128/25", "172.34.32.64/28", ] description = "VPC CIDR" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, ] ingress = [ { cidr_blocks = [ "10.11.116.0/25", "172.34.20.0/25", "10.250.4.16/28", "10.11.113.192/26", ] description = "MAX-OH-S" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.11.176.192/27", "10.11.176.0/24", "10.11.179.192/26", ] description = "From CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.192/27", "10.11.176.0/24", "10.11.179.192/26", ] description = "From CCSHARE-FF" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = false to_port = 65535 }, { cidr_blocks = [ "10.11.176.200/32", ] description = "From cloudopsff-dbmonitor01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.11.221.0/25", "10.12.209.128/25", ] description = "MAX-P-VA" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.221.0/25", ] description = "US_VPC_CIDR" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.12.246.64/27", ] description = "SSH from clshrd-bastion01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "10.250.2.64/27", ] description = "SSH from clshrd-tower01" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "172.32.6.0/24", ] description = "MAX-FF-P-VPC-CIDR-5" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "172.34.20.22/32", ] description = "maxd-boapp02" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [ "172.34.24.128/25", "172.34.32.64/28", "172.34.12.0/25", ] description = "VPC CIDR" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = false to_port = 3306 }, { cidr_blocks = [] description = "" from_port = 3306 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [ "sg-00ee99fe774fb9778", ] self = false to_port = 3306 }, { cidr_blocks = [] description = "MAX-FF-P-BATCH-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "tcp" security_groups = [] self = true to_port = 65535 }, { cidr_blocks = [] description = "MAX-FF-P-BATCH-SG" from_port = 0 ipv6_cidr_blocks = [] prefix_list_ids = [] protocol = "udp" security_groups = [] self = true to_port = 65535 }, ] name = "MAX-FF-P-BATCH-SG" tags = { "Business-Unit" = "EOM" "Environment" = "PROD" "Name" = "MAX-FF-P-BATCH-SG" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max Prod" "eiso-exception" = "aws.08.30" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } tags_all = { "Business-Unit" = "EOM" "Environment" = "PROD" "Name" = "MAX-FF-P-BATCH-SG" "Project-Code" = "SME-2000-0590E" "Project-Name" = "Max Prod" "eiso-exception" = "aws.08.30" "CLOPS_FW" = "YES" "Terraform" = "TRUE" } vpc_id = "vpc-048e1c7481899cd24" }