network_security_group

Documentation

Index

• Constants
• type AwsAcl
• type AwsAclRule
• type AwsDefaultAcl
• type AwsDefaultSecurityGroup
• type AwsSecurityGroup
• type AwsSecurityGroupRule
  • func (r AwsSecurityGroupRule) Equals(other AwsSecurityGroupRule) bool
• type AzureNetworkInterfaceSecurityGroupAssociation
• type AzureNsg
• type AzureRule
• type AzureSubnetNsgAssociation
• type GoogleComputeFirewall
  • func (f *GoogleComputeFirewall) EqualsExceptDirection(other *GoogleComputeFirewall) bool
  • func (f *GoogleComputeFirewall) GetCidrBlock() string
• type GoogleComputeFirewallRule
  • func (r GoogleComputeFirewallRule) Equal(other GoogleComputeFirewallRule) bool

Constants

const AwsDefaultSecurityGroupResourceName = "aws_default_security_group"

const AwsSecurityGroupResourceName = "aws_security_group"

const AzureNetworkSecurityGroupResourceName = "azurerm_network_security_group"

Types

type AwsAcl

type AwsAcl struct {
	*common.AwsResource `hcl:",squash"`
	VpcId               string       `hcl:"vpc_id,expr"`
	SubnetIds           []string     `hcl:"subnet_ids,expr"`
	Ingress             []AwsAclRule `hcl:"ingress"`
	Egress              []AwsAclRule `hcl:"egress"`
}

type AwsAclRule

type AwsAclRule struct {
	Protocol   string   `hcl:"protocol"` // ALL: Aws = -1 (FromPort & ToPort must be 0) / SubnetAz = "*"
	RuleNumber int      `hcl:"rule_no"`
	Action     string   `hcl:"action"`
	FromPort   int      `hcl:"from_port"`
	ToPort     int      `hcl:"to_port"`
	CidrBlock  []string `hcl:"cidr_block"`
}

type AwsDefaultAcl

type AwsDefaultAcl struct {
	*common.AwsResource `hcl:",squash"`
	DefaultNetworkAclId string       `hcl:"default_network_acl_id,expr"`
	Ingress             []AwsAclRule `hcl:"ingress"`
	Egress              []AwsAclRule `hcl:"egress"`
}

type AwsDefaultSecurityGroup

type AwsDefaultSecurityGroup struct {
	*common.AwsResource `hcl:",squash" default:"name=aws_default_security_group"`
	VpcId               string                 `hcl:"vpc_id,expr"`
	Ingress             []AwsSecurityGroupRule `hcl:"ingress,blocks"`
	Egress              []AwsSecurityGroupRule `hcl:"egress,blocks"`
}

type AwsSecurityGroup

type AwsSecurityGroup struct {
	*common.AwsResource `hcl:",squash"  default:"name=aws_security_group"`
	VpcId               string                 `hcl:"vpc_id,expr"`
	Name                string                 `hcl:"name"`
	Description         string                 `hcl:"description"`
	Ingress             []AwsSecurityGroupRule `hcl:"ingress,blocks"`
	Egress              []AwsSecurityGroupRule `hcl:"egress,blocks"`
}

type AwsSecurityGroupRule

type AwsSecurityGroupRule struct {
	Protocol   string   `hcl:"protocol" json:"protocol"`
	FromPort   int      `hcl:"from_port" json:"from_port"`
	ToPort     int      `hcl:"to_port" json:"to_port"`
	CidrBlocks []string `hcl:"cidr_blocks" json:"cidr_blocks"`
	Self       bool     `hcl:"self" hcle:"omitempty" json:"self"`
}

func (AwsSecurityGroupRule) Equals

func (r AwsSecurityGroupRule) Equals(other AwsSecurityGroupRule) bool

checks if 2 rules are equal, assuming they have at most 1 cidr block

type AzureNetworkInterfaceSecurityGroupAssociation

type AzureNetworkInterfaceSecurityGroupAssociation struct {
	*common.AzResource     `hcl:",squash" default:"name=azurerm_network_interface_security_group_association"`
	NetworkInterfaceId     string `hcl:"network_interface_id,expr"`
	NetworkSecurityGroupId string `hcl:"network_security_group_id,expr"`
}

type AzureNsg

type AzureNsg struct {
	*common.AzResource `hcl:",squash" default:"name=azurerm_network_security_group"`
	Rules              []AzureRule `hcl:"security_rule,blocks" json:"security_rule"`
}

type AzureRule

type AzureRule struct {
	Name                     string `hcl:"name" json:"name"`
	Protocol                 string `hcl:"protocol" json:"protocol"`
	Priority                 int    `hcl:"priority" json:"priority"`
	Access                   string `hcl:"access" json:"access"`
	SourcePortRange          string `hcl:"source_port_range" json:"source_port_range"`
	SourceAddressPrefix      string `hcl:"source_address_prefix" json:"source_address_prefix"`
	DestinationPortRange     string `hcl:"destination_port_range" json:"destination_port_range"`
	DestinationAddressPrefix string `hcl:"destination_address_prefix" json:"destination_address_prefix"`
	Direction                string `hcl:"direction" json:"direction"`
}

type AzureSubnetNsgAssociation

type AzureSubnetNsgAssociation struct {
	ResourceName string `hcl:",key"`
	ResourceId   string `hcl:",key"`
	SubnetId     string `hcl:"subnet_id,expr"`
	NsgId        string `hcl:"network_security_group_id,expr"`
}

type GoogleComputeFirewall

type GoogleComputeFirewall struct {
	*common.GcpResource `hcl:",squash" default:"name=google_compute_firewall"`

	Description string `hcl:"description" hcle:"omitempty" json:"description"`
	Network     string `hcl:"network,expr" json:"network"`

	Direction         string   `hcl:"direction" json:"direction"`
	SourceRanges      []string `hcl:"source_ranges" hcle:"omitempty" json:"source_ranges"`
	DestinationRanges []string `hcl:"destination_ranges" hcle:"omitempty" json:"destination_ranges"`
	Priority          int      `hcl:"priority" json:"priority"`

	AllowRules []GoogleComputeFirewallRule `hcl:"allow,blocks" json:"allow"`
	DenyRules  []GoogleComputeFirewallRule `hcl:"deny,blocks" json:"deny"`

	TargetTags []string `hcl:"target_tags" hcle:"omitempty" json:"target_tags"`
}

func (*GoogleComputeFirewall) EqualsExceptDirection

func (f *GoogleComputeFirewall) EqualsExceptDirection(other *GoogleComputeFirewall) bool

func (*GoogleComputeFirewall) GetCidrBlock

func (f *GoogleComputeFirewall) GetCidrBlock() string

type GoogleComputeFirewallRule

type GoogleComputeFirewallRule struct {
	Protocol string   `hcl:"protocol" json:"protocol"`
	Ports    []string `hcl:"ports" hcle:"omitempty" json:"ports"`
}

func (GoogleComputeFirewallRule) Equal

func (r GoogleComputeFirewallRule) Equal(other GoogleComputeFirewallRule) bool