initial setup

ois-scanner/main.tf

@@ -0,0 +1,77 @@
+/**
+ * Usage:
+* 
+* module "ois-scanner" {
+*   source = "aws-common-security-groups/ois-scanner"
+* 
+*   vpc_id = "${var.vpc_id}"
+*   tags = { }
+*   # Name, CostAllocation, and Environment are pre-set
+* }
+*/
+
+locals {
+  name = "ois-scanner"
+}
+
+module "ois-scanner" {
+  source = "terraform-aws-modules/security-group/aws"
+
+  name = "${local.name}"
+  description = "common: allows OIS scanners and OIS subnets full access for compliance scanning"
+  vpc_id = "${var.vpc_id}"
+
+  ingress_cidr_blocks = [
+    "148.129.121.0/24",
+    "148.129.21.0/24",
+    "172.18.33.207",
+    "172.18.33.208",
+    "172.18.33.210",
+    "172.18.33.211",
+    "172.18.33.213",
+  ]
+  ingress_rules = [ "all-all" ]
+
+  tags = "${merge(
+    map("CostAllocation", "csvd:infrastructure"),
+    map("Environment", "csvd-infrastructure"),
+    map("Name", "sg-${local.name}"),
+    var.tags,
+    )}"
+}
+
+# - site: bcc
+#   base_subnet: 148.129.121.0/24
+#   subnets:
+#     - subnet: 148.129.121.0/27
+#       purpose: ois-scanning-devices
+#       location: bcc-m2
+#     - subnet: 148.129.121.32/27
+#       purpose: ois-scanning-devices
+#       location: bcc-m6
+#     - subnet: 148.129.121.64/27
+#       purpose: ois-scanning-devices
+#       location: bcc-m4
+#     - subnet: 148.129.121.128/27
+#       purpose: ois-scanning-devices
+#       location: bcc-m7
+#   hosts:
+#     - name: scanner1.ois.census.gov
+#       address: 172.18.33.207
+#     - name: lightning.ois.census.gov
+#       address: 172.18.33.208
+#     - name: scanner2.ois.census.gov
+#       address: 172.18.33.210
+#     - name: scanner3.ois.census.gov
+#       address: 172.18.33.211
+#     - name: portal1.ois.census.gov
+#       address: 172.18.33.213
+# - site: npc
+#   base_subnet: 148.129.21.0/24
+#   subnets:
+#     - subnet: 148.129.21.0/27
+#       purpose: ois-scanning-devices
+#       location: npc-60c
+#     - subnet: 148.129.21.32/27
+#       purpose: ois-scanning-devices
+#       location: npc-63f

ois-scanner/variables.tf

@@ -0,0 +1,10 @@
+variable "vpc_id" {
+  description = "VPC ID Number"
+}
+
+variable "tags" {
+  description = "Extra security group tags"
+
+  type    = "map"
+  default = { }
+}