locals { # Customer External IPs # To increase flexibility and to provide better documentation, # break up the IPs based on on-prem and not on-prem. # # All of the "external" things that need access to publically # available C2 services, like Salt Masters, Repo Servers # # Structure is a list of maps, and the "description" value in the # map must be unique across the whole list or it will cause an error. # c2_services_external_ips = [ { description = "Test LCPs" cidr_blocks = [ "18.252.65.137/32", # Test LCP in Govcloud (EIP in common-services-gov) "54.224.56.231/32", # Test LCP in Commercial (EIP in common-services) ] }, { description = "NGA" cidr_blocks = [ "199.16.64.3/32", # NGA ] }, { description = "AFS OnPrem" cidr_blocks = [ "170.248.172.0/23", # AFS Onprem ] }, { description = "AFS Azure" cidr_blocks = [ "20.190.250.137/32", # EastUS2_External_Access "52.232.227.197/32", # Azure US-East Palo "52.185.64.173/32", # CentralUS_External_Access "52.242.225.98/32", # Azure US-Central Palo 20200721 "52.177.84.83/32", # Lab_External_Access ] }, { description = "BAS-Commerce CMPS" cidr_blocks = [ "52.61.137.158/32", # 2021-04-06 From Daniel Dicke "52.61.70.43/32", # 2021-04-15 yanked from VPC flow logs ] }, { description = "FRTIB VDI" cidr_blocks = [ "52.61.113.202/32", # 2021-04-15 From Brian Nguyen brian.a.nguyen@accenturefederal.com ] }, { description = "FRTIB CMPS" cidr_blocks = [ "15.200.226.57/32", # 2021-07-12 From Brian Nguyen brian.a.nguyen@accenturefederal.com ] }, { description = "FRTIB ALIGHT" cidr_blocks = [ "54.205.60.17/32", # 2021-05-04 From John Conrad john.conrad.2@alight.com "52.206.203.98/32", "34.233.188.131/32", ] }, { description = "FRTIB ALIGHT 2" cidr_blocks = [ "34.214.247.125/32", # 2022-01-20 From John Conrad john.conrad.2@alight.com "44.235.174.214/32", "52.89.203.9/32", ] }, { description = "CA-C19" cidr_blocks = [ "44.226.172.7/32", # ca-c19-splunk-ds-1 2022-06-22 From Ben Troglia WEST MSOCI-2214 "52.24.211.95/32", # ca-c19-splunk-syslog-1 "52.35.39.247/32", # ca-c19-splunk-syslog-2 "3.226.9.146/32", # ca-c19-splunk-ds-2 2022-06-22 From Ben Troglia EAST MSOCI-2214 "44.207.196.144/32", # ca-c19-splunk-syslog-3 "44.207.241.26/32", # ca-c19-splunk-syslog-4 ] }, { description = "DGI" cidr_blocks = [ "3.32.175.159/32", # 2021-06-24 From Angelita Crawley MSOCI-1776 "15.200.13.143/32", ] }, { description = "FRTIB Chaos test us-east-1" cidr_blocks = [ "3.221.245.113/32", "34.237.100.242/32", "35.172.75.107/32", "54.164.205.89/32", "54.209.105.32/32", "54.224.69.136/32", ] }, { description = "FRTIB Chaos prod us-east-1" cidr_blocks = [ "34.237.183.65/32", "34.227.214.27/32", "3.232.76.136/32", ] }, ] }