account.hcl 4.8 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495
  1. # Set account-wide variables. These are automatically pulled in to configure the remote state bucket in the root
  2. # terragrunt.hcl configuration.
  3. locals {
  4. account_name = "legacy-mdr-prod"
  5. account_alias = "" # No alias for legacy accounts
  6. aws_account_id = "477548533976"
  7. instance_termination_protection = true
  8. account_tags = { }
  9. c2_account_standards_path = "../../mdr-prod-c2/005-account-standards-c2"
  10. # For CIDR assignment, see https://github.mdr.defpoint.com/mdr-engineering/msoc-infrastructure/wiki/IP-Address-Allocation
  11. vpc_info = { } # TODO
  12. # For testing
  13. create_test_instance = false
  14. test_instance_key_name = "TODO" # They with which to provision the test instance
  15. aws_waf_logs_hec_token = "FA38B8DD-1398-46D0-BD79-BA046C6064B0"
  16. # Legacy accounts have some extra key users
  17. is_legacy = true
  18. extra_ebs_key_admins = [
  19. "arn:aws:iam::477548533976:root",
  20. "arn:aws:iam::477548533976:role/mdr_iam_admins",
  21. "arn:aws:iam::477548533976:role/mdr_powerusers"
  22. ]
  23. extra_ebs_key_users = [
  24. "arn:aws:iam::477548533976:role/mdr_powerusers",
  25. "arn:aws:iam::477548533976:role/msoc-default-instance-role",
  26. "arn:aws:iam::477548533976:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling",
  27. "arn:aws:iam::477548533976:role/portal-instance-role",
  28. "arn:aws:iam::477548533976:role/mdr_iam_admins"
  29. ]
  30. extra_ebs_key_attachers = [
  31. "arn:aws:iam::477548533976:role/mdr_powerusers",
  32. "arn:aws:iam::477548533976:role/msoc-default-instance-role",
  33. "arn:aws:iam::477548533976:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling",
  34. "arn:aws:iam::477548533976:role/portal-instance-role",
  35. ]
  36. # Legacy information
  37. # legacy_vpc information is required to connect the VPCs to the transit gateway.
  38. legacy_vpcs = {
  39. afs = {
  40. id = "vpc-03f17331ab2b493f5",
  41. private_subnets = [ "subnet-0007c218c485f3d0f", "subnet-0346f2ee70d39a142", "subnet-0c0368b6e268834c3" ]
  42. public_subnets = [ "subnet-076eb05d9bc9a8a20", "subnet-07f7725107205e7dd", "subnet-09a74633747a9ef6c" ]
  43. private_route_tables = [ "rtb-0352c8ce520de1d61", "rtb-0b339f3969ce017ba", "rtb-0d31e13b39ef8e2a2" ]
  44. public_route_tables = [ "rtb-0b89de1eb2618f940" ]
  45. }
  46. customer-portal = {
  47. id = "vpc-0f45bf3132d4e25f3",
  48. private_subnets = [ "subnet-0de23b03ea0a6bf1d", "subnet-0c173d841b5b59a24", "subnet-0adca60b13a5f5c56" ]
  49. public_subnets = [ "subnet-023a7c273a6ec1eba", "subnet-0928304e16b212356", "subnet-0dd15211a7c34bd43" ]
  50. private_route_tables = [ "rtb-0b74df8eeb34c9d2b", "rtb-0779d8a3e10b1f030", "rtb-01f7b786b1e5bad9a" ]
  51. public_route_tables = [ "rtb-01a25eb54e5fc5009" ]
  52. }
  53. dc-c19 = {
  54. id = "vpc-09319e71920e6eceb",
  55. private_subnets = [ "subnet-02f67ef6891e1cf03", "subnet-05dca9dc7daec7f55", "subnet-09e153213a1574574" ]
  56. public_subnets = [ "subnet-0f0081c667e8f7692", "subnet-0730266c5fde7e4d1", "subnet-0ec26dace38052008" ]
  57. private_route_tables = [ "rtb-01c736a552f8bceca", "rtb-01c50d290882d7c3a", "rtb-0b73afea1f62061d2" ]
  58. public_route_tables = [ "rtb-00741cf8fb5e29ae4" ]
  59. }
  60. la-c19 = {
  61. id = "vpc-09cd6c187c2edc2f6",
  62. private_subnets = [ "subnet-0987546fd6690acd0", "subnet-0da0bf814d20f28de", "subnet-045cbc297915ecc1a" ]
  63. public_subnets = [ "subnet-0b08ebaf3dde344c8", "subnet-0126b9793b9518a4f", "subnet-0f34803c0a61b98fd" ]
  64. private_route_tables = [ "rtb-0b20adc9d4996e25f", "rtb-0744d3253991f357b", "rtb-088fb78039b870da0" ]
  65. public_route_tables = [ "rtb-076a0ecf5dd7a71f2" ]
  66. }
  67. ma-c19 = {
  68. id = "vpc-01edd85069b6b3715",
  69. private_subnets = [ "subnet-054507f8e3a49aac4", "subnet-0e926f86ff242b1e3", "subnet-013cf369199d22c25" ]
  70. public_subnets = [ "subnet-0383d7430aa9898cc", "subnet-0a01bd202760aac9c", "subnet-03c8394da2648fc3f" ]
  71. private_route_tables = [ "rtb-029cd593f6b397ac3", "rtb-0484bd5b7b0c1bb2a", "rtb-07214c4a8693b813a" ]
  72. public_route_tables = [ "rtb-0ff55720f7142c022" ]
  73. }
  74. main_infrastructure = {
  75. id = "vpc-0b676c4efd7fad548",
  76. private_subnets = [ "subnet-04234672a4720a7ab", "subnet-0ff1d78804cbcbf3c", "subnet-0294e3b191e651e48" ]
  77. public_subnets = [ "subnet-0be578dbe9818a0f3", "subnet-0faeebd324c47a670", "subnet-0cc124793a04f3382" ]
  78. private_route_tables = [ "rtb-0a45aa54a80e89c48", "rtb-08ff0d423f57fbf0c", "rtb-0481035a575c11af7" ]
  79. public_route_tables = [ "rtb-09c2e1f7572807386" ]
  80. }
  81. nga = {
  82. id = "vpc-05e0cf38982e048db",
  83. private_subnets = [ "subnet-0065a8d0e2e3e3fe2", "subnet-04e8ba3db254147b2", "subnet-077dd32d6e0f86218" ]
  84. public_subnets = [ "subnet-0f022b1ebf155d1f9", "subnet-07ca3ac05830b104d", "subnet-0a2384bce743cf303" ]
  85. private_route_tables = [ "rtb-01a71e67e123fcfd3", "rtb-0898516d5a7e7a091", "rtb-09922a5baece66a32" ]
  86. public_route_tables = [ "rtb-084bab4d4acc400fc" ]
  87. }
  88. }
  89. }