Adds public dns zones and skeleton for delegating caasp subdomain

common/aws/mdr-common-services/010-public-dns/terragrunt.hcl

@@ -0,0 +1,23 @@
+locals {
+  environment_vars = read_terragrunt_config(find_in_parent_folders("env.hcl"))
+  partition_vars = read_terragrunt_config(find_in_parent_folders("partition.hcl"))
+  region_vars = read_terragrunt_config(find_in_parent_folders("region.hcl"))
+  account_vars = read_terragrunt_config(find_in_parent_folders("account.hcl"))
+  global_vars = read_terragrunt_config(find_in_parent_folders("globals.hcl"))
+}
+
+terraform {
+  # Double slash is intentional and required to show root of modules
+  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/dns/public_dns?ref=v0.5.4"
+}
+
+include {
+  path = find_in_parent_folders()
+}
+
+inputs = {
+  tags = {
+    Purpose = "Sharing the AMI amongst accounts"
+    Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
+  }
+}

common/aws/mdr-common-services/account.hcl

@@ -11,6 +11,24 @@ locals {
 
   # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
   standard_vpc_cidr = "10.1.1.0/22"
+
+  #####################################
+  # DNS Zones
+  hosted_public_dns_zones = [
+    "accenturefederalcyber.com",
+    "accenturefederalcyber.net",
+    "xdr.accenturefederalcyber.com",
+    "xdrtest.accenturefederalcyber.com",
+  ]
+  # Delegated zones are created in different accounts
+  delegated_public_dns_zones = {
+    "caasp.xdr.accenturefederalcyber.com" = [
+      "tbd1.awsdns-15.com.",
+      "tbd2.awsdns-15.com.",
+      "tbd3.awsdns-15.com.",
+      "tbd4.awsdns-15.com."
+    ]
+  }
   
   # For testing
   create_test_instance = false

globals.hcl

@@ -27,6 +27,12 @@ locals {
     "97.117.78.121/32",    # Colby Williams
   ]
   portal_test_whitelist = local.trusted_ips # for now, an alias
+  dns_zone_map = {
+    "accenturefederalcyber.com" = "Z03575081VGXN3FUZ8ERU"
+    "accenturefederalcyber.net" = "Z07771312N8X39HKP141M"
+    "xdr.accenturefederalcyber.com" = "Z0083657A94URZM2TM87"
+    "xdrtest.accenturefederalcyber.com" = "Z01677392W0QM639KU2KC"
+  }
 
   key_pairs = {
     # Should be your username -> key pair