xdr-terraform-live/test/env.hcl

# Set common variables for the environment. This is automatically pulled in in the root terragrunt.hcl configuration to
# feed forward to the child modules.
locals {
  environment = "test"
  transit_gateway_account_name = "mdr-test-c2" # Which account has the transit gateway

  environment_tags = {
    "Schedule" = "MSOC",
    Environment = local.environment
  }

  proxy = "proxy.pvt.xdrtest.accenturefederalcyber.com"
  proxy_ip = "10.20.2.22"
  salt_master = "salt-master.pvt.xdrtest.accenturefederalcyber.com"
  salt_master_ip = "10.20.2.32"
  hec = "moose-hec.xdrtest.accenturefederalcyber.com"
  hec_pub = "moose-hec.xdrtest.accenturefederalcyber.com"
  hec_pub_ack = "moose-hec-ack.xdrtest.accenturefederalcyber.com"
  aws_waf_logs_hec_token = "FA38B8DD-1398-46D0-BD79-BA046C6064B0" # HEC token for posting WAF logs to the moose HEC

  # Supernet(s) for the environment, see IP Address Allocation in wiki
  supernets = [
    "10.1.0.0/16",  # Common Services (gov and commercial) supernet
    "10.16.0.0/12", # Test (gov and commercial) supernet
  ]

  # When there are multiples, put govcloud first, then commercial, and alternate if there are more than 2.
  # Put any standalone IPs at the end.
  cidr_map = {
    # See infrastructure_notes/Architecture_Notes.md and https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation for more information
    "vpc-splunk"           = [ "10.20.16.0/22",  # Splunk -- **MOOSE**
                             ],
    "vpc-access"           = [ "10.20.20.0/22",    # VPN, bastions (if any), etc.
                             ],
    "vpc-public"           = [ "10.20.24.0/22",    # Public sites (github, ghe-backup, jira, ...) 
                             ],
    "vpc-scanners"         = [ "10.20.12.0/22" ],  # Qualys, etc.
    "vpc-system-services"  = [ "10.16.0.0/22",     # Internal services such as dns, mailrelay, etc.
                               "10.20.0.0/22",
                             ],
    "vpc-private-services" = [ "10.20.28.0/22",    # Private Services - fm-shared-search, qcompliance, phantom, etc. 
                             ],

    # "old" mappings before architecture planning... we should eliminate these.
    "bastions" = [ "10.20.20.0/22" ], # vpc-access in mdr-test-c2-gov
    "vpns"     = [ "10.20.20.0/22" ], # vpc-access in mdr-test-c2-gov
    "scanners" = [ "10.20.12.0/22" ], # vpc-qualys
    "dns"      = [ "10.20.0.0/22", "10.16.0.0/22" ], # vpc-system-services in commercial nad gov
    "monitoring" = [ "10.20.0.0/22" ], # legacy sensu, and vpc-system-services in gov
    "salt"     = [ "10.20.0.0/22" ], # legacy salt-master, and vpc-system-services in gov
    "web"      = [ "10.20.0.0/22" ], # legacy proxy/repo, and vpc-system-services in gov
    "moose"    = [ "10.20.16.0/22" ], # legacy vpc and vpc-splunk in gov
  }

  legacy_account = "527700175026"
  c2_accounts = {
    "aws-us-gov" = "738800754746" # mdr-test-c2-gov
    "aws"        = "816914342178" # mdr-test-c2
  }

  dns_servers = [
    "10.20.2.64",
    "10.20.2.185",
  ]
  inbound_resolver_endpoints = [
    "10.20.0.119",
    "10.20.0.211",
  ]
  dns_info = {
    "private" = {
      zone = "pvt.xdrtest.accenturefederalcyber.com",
      zone_id = "Z08514662ZGG8BM81TKD5"
    }
    "reverse" = {
      zone = "10.in-addr.arpa"
      zone_id = "Z08479312XJFUS20YJUJO"
    }
    "public" = {
      zone = "xdrtest.accenturefederalcyber.com"
      zone_id = "Z01677392W0QM639KU2KC"
    },
    "legacy_private" = {
      zone = "msoc.defpoint.local"
      zone_id = "Z39OIGEKXXGJZ2"
    },
    "legacy_public" = {
      zone = "mdr-test.defpoint.com"
      zone_id = "Z3E22S3CIP0UCO"
    },
    "legacy_public_internal" = {
      # Weird name, but this is the 'private' copy of the public domain
      zone = "mdr-test.defpoint.com"
      zone_id = "Z13C1OOJMG0BJ7"
    },
  }

  aws_flowlogs_hec_token = "4a2cacb2-fea1-4328-8f25-9bef26333e91"

  # Legacy DNS
  dns_private = {
    "id" = "Z39OIGEKXXGJZ2"
    "name" = "msoc.defpoint.local"
  }
  dns_private2 = {
    "id" = "Z13C1OOJMG0BJ7", #zone 2
    "name" = "mdr-test.defpoint.com"
  }
  dns_public = {
    "id" = "Z3E22S3CIP0UCO",
    "name" = "mdr-test.defpoint.com"
  }
}