|
@@ -20,12 +20,11 @@ resource "aws_security_group" "nessus_manager" {
|
|
|
resource "aws_security_group_rule" "nessus_manager_inbound_nessus" {
|
|
|
security_group_id = aws_security_group.nessus_manager.id
|
|
|
type = "ingress"
|
|
|
- #cidr_blocks = concat(var.cidr_map["vpc-private-services"], var.cidr_map["vpc-access"]) # Nessus Security Center, VPN
|
|
|
- cidr_blocks = "10.0.0.0/8"
|
|
|
- from_port = 8834
|
|
|
- to_port = 8834 # no 8835 according to https://docs.tenable.com/nessusagent/Content/RequirementsDataflow.htm
|
|
|
- protocol = "tcp"
|
|
|
- description = "Inbound Nessus"
|
|
|
+ cidr_blocks = "10.0.0.0/8"
|
|
|
+ from_port = 8834
|
|
|
+ to_port = 8834 # no 8835 according to https://docs.tenable.com/nessusagent/Content/RequirementsDataflow.htm
|
|
|
+ protocol = "tcp"
|
|
|
+ description = "Inbound Nessus"
|
|
|
}
|
|
|
|
|
|
resource "aws_security_group_rule" "http-in-external-c2-users" {
|