# Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
# terragrunt.hcl configuration.
locals {
  account_name   = "legacy-mdr-test"
  account_alias  = "" # No alias for legacy
  aws_account_id = "527700175026"
  instance_termination_protection = true # set to true for production!
  
  account_tags = { } 
  c2_account_standards_path = "../../mdr-test-c2/005-account-standards-c2"

  # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  standard_vpc_cidr = "TODO"

  # For testing
  create_test_instance = false
  test_instance_key_name = "TODO" # They with which to provision the test instance

  aws_waf_logs_hec_token = "B1945FC4-CA44-4B8C-BFFA-60A9BF841E4D"

  # Legacy accounts have some extra key users
  is_legacy = true
  extra_ebs_key_admins = [ 
    "arn:aws:iam::527700175026:root",
    "arn:aws:iam::527700175026:role/mdr_iam_admins",
    "arn:aws:iam::527700175026:role/mdr_powerusers"
  ]
  extra_ebs_key_users  = [ 
    "arn:aws:iam::527700175026:role/mdr_powerusers",
    "arn:aws:iam::527700175026:role/msoc-default-instance-role",
    "arn:aws:iam::527700175026:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling",
    "arn:aws:iam::527700175026:role/portal-instance-role",
    "arn:aws:iam::527700175026:role/mdr_iam_admins"
  ]
  extra_ebs_key_attachers = [
    "arn:aws:iam::527700175026:role/mdr_powerusers",
    "arn:aws:iam::527700175026:role/msoc-default-instance-role",
    "arn:aws:iam::527700175026:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling",
    "arn:aws:iam::527700175026:role/portal-instance-role",
  ] 

  # Legacy information
  # legacy_vpc information is required to connect the VPCs to the transit gateway.
  legacy_vpcs = {
    main_infrastructure = {
      id = "vpc-0b455a7f22a13412b",
      private_subnets = [ "subnet-053c6f1b9a48d4285", "subnet-047cba9290bc502fd", "subnet-01d13857b6f3899cb" ]
      public_subnets  = [ "subnet-0b1e9d82bcd8c0a2c", "subnet-0d65c22aa4f76b634", "subnet-07312c554fb87e4b5" ]
      private_route_tables = [ "rtb-0effbd34d78eabe6f", "rtb-02e8aaa2e4b82a665", "rtb-00928b94222c589a4" ]
      public_route_tables  = [ "rtb-022461b2a3c523e73" ]
    }
    ma-c19 = {
      id = "vpc-03522ef9cbaef2378",
      private_subnets = [ "subnet-0045fcb58b3ec017c", "subnet-05150379ec0cc4181", "subnet-0b4a35031fd20dcfb" ]
      public_subnets  = [ "subnet-0dee7a137d1598c4b", "subnet-0cc302d548e97188d", "subnet-0947439d65a8b54e2" ]
      private_route_tables = [ "rtb-01ad15c283474922a", "rtb-09be121675ff21a20", "rtb-08969d2fb85c343bb" ]
      public_route_tables  = [ "rtb-0d94202396743c4a5" ]
    }
    customer-portal = {
      id = "vpc-075e58bd7619dc5b0",
      private_subnets = [ "subnet-0f8eec82a17cef7a6", "subnet-02575f16e22431ad6", "subnet-0662ad00a4fbf3034" ]
      public_subnets  = [ "subnet-0bbb38f6b222607cf", "subnet-03074b876845ebae4", "subnet-0177f1e226cb5bc55" ]
      private_route_tables = [ "rtb-033ada297a85c58fe", "rtb-08e28c3117db6b282", "rtb-04700e9a72f266287" ]
      public_route_tables  = [ "rtb-0e26a4fa3833eaa96" ]
    }
    afs = {
      id = "vpc-0bb514965e384f13a",
      private_subnets = [ "subnet-0db1488cd94ad0b38", "subnet-0275d50060a77e726", "subnet-07a0c3f2ee215d5f1" ]
      public_subnets  = [ "subnet-05153a99ddb83712c", "subnet-044cf67369cee4967", "subnet-0bb9ec330ead3bab3" ]
      private_route_tables = [ "rtb-0f1ba98c1ce4a1306", "rtb-0861949990769ea9c", "rtb-00c008cd8a03f9a0d" ]
      public_route_tables  = [ "rtb-09261ab694d10ed4e" ]
    }
    la-c19 = {
      id = "vpc-0ce10fb98f1e9a078",
      private_subnets = [ "subnet-02ab0934a1161cd38", "subnet-07197e8b1661a3006", "subnet-00135f6f54e0ee4fc" ]
      public_subnets  = [ "subnet-0d0ef745c05339043", "subnet-01ab62a37d5c40eb3", "subnet-081ded06d577fd57d" ]
      private_route_tables = [ "rtb-098d239c29c96fb03", "rtb-0cd81b36f75e817e7", "rtb-06b060305a96cfab4" ]
      public_route_tables  = [ "rtb-0ca9389c1f764ced5" ]
    }
    dc-c19 = {
      id = "vpc-0f64ba0a5c72b7402",
      private_subnets = [ "subnet-01973d25e80bc4341", "subnet-0e2d94b352495b3c1", "subnet-0f68328639ccb8754" ]
      public_subnets  = [ "subnet-04188a43516592efa", "subnet-0a9b6fa8860a05751", "subnet-0281a55f386cf58f2" ]
      private_route_tables = [ "rtb-0f4babc621c88a81c", "rtb-093ce14bd550edfd2", "rtb-06e4a2609b3c63320" ]
      public_route_tables  = [ "rtb-0caf65533eea2f16c" ]
    }
  }
  # Qualys Connector
  qualys_connector_externalid = "1601947413043" # Needs to come from the qualys console
}