xdr-terraform-live/prod/aws-us-gov/mdr-prod-c2/account.hcl

# Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
# terragrunt.hcl configuration.
locals {
  account_name                    = "afs-mdr-prod-c2-gov"
  account_alias                   = "afs-mdr-prod-c2-gov"
  aws_account_id                  = "721817724804"
  instance_termination_protection = true # set to true for production!
  splunk_prefix                   = "moose"

  # For CIDR assignment, see https://github.xdr.accenturefederalcyber.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  standard_vpc_cidr = "10.40.0.0/22"

  c2_account_standards_path = "../../mdr-prod-c2/005-account-standards-c2"

  vpc_info = {
    "vpc-splunk" = {
      "name"         = "vpc-splunk"
      "purpose"      = "Splunk Systems (MOOSE)"
      "cidr"         = "10.40.16.0/22",
      "tgw_attached" = true,
    },
    "vpc-system-services" = {
      "name"         = "vpc-system-services",
      "purpose"      = "Internal Services for Systems",
      "cidr"         = "10.40.0.0/22",
      "tgw_attached" = false, # Attached via tgw creation
    },
    "vpc-scanners" = {
      "name"         = "vpc-scanners",
      "purpose"      = "Security Scanning",
      "cidr"         = "10.40.12.0/22",
      "tgw_attached" = true,
    },
    "vpc-interconnects" = {
      "name"         = "vpc-interconnects",
      "purpose"      = "Interconnections between AWS partitions",
      "cidr"         = "10.179.0.0/22",
      "tgw_attached" = true,
    },
    "vpc-access" = {
      "name"         = "vpc-access"
      "purpose"      = "Systems providing restricted access, such as bastions and vpn concentrators"
      "cidr"         = "10.40.20.0/22",
      "tgw_attached" = true,
    },
    "vpc-portal" = {
      "name"         = "vpc-portal"
      "purpose"      = "The Customer Portal"
      "cidr"         = "10.40.32.0/24",
      "tgw_attached" = true,
    },
    "vpc-public" = {
      "name"         = "vpc-public"
      "purpose"      = "Publicly Accessible Infrastructure Services, such as GHE and Jira"
      "cidr"         = "10.40.24.0/22",
      "tgw_attached" = true,
    },
    "vpc-private-services" = {
      "name"         = "vpc-private-services"
      "purpose"      = "Private XDR Services for XDR users"
      "cidr"         = "10.40.28.0/22",
      "tgw_attached" = true,
    },
  }

  # AS Number used for the transit gateway; only in the C2 accounts
  asn = 64810
}