Fred Damstra [afs macbook] e77da55456 Applies Best Practices from tfsec for all modules used by modelclient 3 éve
..
README.md ff6bf1edc0 Renames required_security_group to 'typical-host' to match legacy 5 éve
main.tf e77da55456 Applies Best Practices from tfsec for all modules used by modelclient 3 éve
outputs.tf ff6bf1edc0 Renames required_security_group to 'typical-host' to match legacy 5 éve
vars.tf baa1f43824 Applied `terraform fmt` to all modules 3 éve

README.md

Required Security Group for all instances

Inbound:

  • Full access from the scanner networks
  • SSH access from the VPN and Bastion networks
  • ICMP types 0-8 from the 10 network

Outbound:

  • ICMP types 0-8 anywhere
  • DNS Access
  • Access to Proxy
  • Access to Salt
  • Access to Sensu