Updates HEC to Moose in GC

Also:
* Enables private HEC
* Updates the legacy hec module to latest version, just in case

prod/aws-us-gov/mdr-prod-c2/165-splunk-legacy-hec/terragrunt.hcl

@@ -13,7 +13,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/legacy_hec?ref=v1.10.2"
+  source = "git@github.mdr.defpoint.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/legacy_hec?ref=v1.10.17"
 }
 
 generate "provider" {

prod/aws-us-gov/mdr-prod-c2/account.hcl

@@ -6,6 +6,7 @@ locals {
   aws_account_id = "721817724804"
   instance_termination_protection = true # set to true for production!
   splunk_prefix = "moose"
+  splunk_private_hec = true # True if the customer needs a private HTTP Event Collector such as for ALSI
   
   # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
   standard_vpc_cidr = "10.40.0.0/22"

prod/env.hcl

@@ -13,9 +13,9 @@ locals {
   proxy_ip = "10.80.101.166"
   salt_master = "salt-master.pvt.xdr.accenturefederalcyber.com"
   salt_master_ip = "10.80.101.170"
-  hec = "moose-hec.mdr.defpoint.com"
-  hec_pub = "moose-hec.mdr.defpoint.com"
-  hec_pub_ack = "moose-hec-ack.mdr.defpoint.com"
+  hec = "moose-hec.xdr.accenturefederalcyber.com"
+  hec_pub = "moose-hec.xdr.accenturefederalcyber.com"
+  hec_pub_ack = "moose-hec-ack.xdr.accenturefederalcyber.com"
 
   # When there are multiples, put govcloud first, then commercial, and alternate if there are more than 2.
   # Put any standalone IPs at the end.