Increases AFS Indexer Size and Adds Public IPs

prod/aws-us-gov/mdr-prod-afs/account.hcl

@@ -10,9 +10,14 @@ locals {
   splunk_private_hec = false # True if the customer needs a private HTTP Event Collector such as for ALSI
 
   splunk_data_sources = [
-    "x.x.x.x/32", # TODO: Add customer's public IP addresses
+    "170.248.172.0/23", # Corporate Network
+    "20.190.250.137/32",     # Azure: EastUS2_External_Access
+    "52.232.227.197/32",     # Azure: Azure US-East Palo
+    "52.185.64.173/32",      # Azure: CentralUS_External_Access
+    "52.242.225.98/32",      # Azure: Azure US-Central Palo 20200721
+    "52.177.84.83/32",       # Azure: Lab_External_Access
   ]
-  splunk_legacy_cidr = [ ] # Should not be needed for new customers
+  splunk_legacy_cidr = [ "10.3.0.0/22" ] # Should not be needed for new customers
   splunk_asg_sizes   = [ 1, 1, 1 ] # How many indexers in each site
   
   
@@ -42,7 +47,7 @@ locals {
     "alsi-master"    = "t3a.small",
     "alsi-worker"    = "t3a.small",
     "splunk-cm"      = "m5a.xlarge",  # legacy: t2.small
-    "splunk-indexer" = "i3en.3xlarge", # legacy: t2.small, but whats the point if we don't have instance storage.
+    "splunk-indexer" = "i3en.6xlarge", # legacy: t2.small, but whats the point if we don't have instance storage.
     "splunk-hf"      = "m5a.xlarge", # legacy: t2.medium
     "splunk-sh"      = "m5a.4xlarge", # legacy: ? not sure
   }