Fred Damstra c1a0a83e57 Initial draft of bastion host(s) 4 anos atrás
..
README.md ff6bf1edc0 Renames required_security_group to 'typical-host' to match legacy 5 anos atrás
main.tf c1a0a83e57 Initial draft of bastion host(s) 4 anos atrás
outputs.tf ff6bf1edc0 Renames required_security_group to 'typical-host' to match legacy 5 anos atrás
vars.tf ff6bf1edc0 Renames required_security_group to 'typical-host' to match legacy 5 anos atrás

README.md

Required Security Group for all instances

Inbound:

  • Full access from the scanner networks
  • SSH access from the VPN and Bastion networks
  • ICMP types 0-8 from the 10 network

Outbound:

  • ICMP types 0-8 anywhere
  • DNS Access
  • Access to Proxy
  • Access to Salt
  • Access to Sensu