network_security_group

Documentation

Index

• Constants
• type AwsAcl
• type AwsAclRule
• type AwsDefaultAcl
• type AwsDefaultSecurityGroup
• type AwsSecurityGroup
• type AwsSecurityGroupRule
• type AzureNetworkInterfaceSecurityGroupAssociation
• type AzureNetworkSecurityGroup
• type AzureNsg
• type AzureRule
• type AzureSubnetNsgAssociation
• type GoogleComputeFirewall
• type GoogleComputeFirewallRule

Constants

const AwsDefaultSecurityGroupResourceName = "aws_default_security_group"

const AwsSecurityGroupResourceName = "aws_security_group"

const AzureNetworkSecurityGroupResourceName = "azurerm_network_security_group"

const AzureNicNsgAssociation = "azurerm_network_interface_security_group_association"

Types

type AwsAcl

type AwsAcl struct {
	*common.AwsResource `hcl:",squash"`
	VpcId               string       `hcl:"vpc_id,expr"`
	SubnetIds           []string     `hcl:"subnet_ids,expr"`
	Ingress             []AwsAclRule `hcl:"ingress"`
	Egress              []AwsAclRule `hcl:"egress"`
}

type AwsAclRule

type AwsAclRule struct {
	Protocol   string   `hcl:"protocol"` // ALL: Aws = -1 (FromPort & ToPort must be 0) / SubnetAz = "*"
	RuleNumber int      `hcl:"rule_no"`
	Action     string   `hcl:"action"`
	FromPort   int      `hcl:"from_port"`
	ToPort     int      `hcl:"to_port"`
	CidrBlock  []string `hcl:"cidr_block"`
}

type AwsDefaultAcl

type AwsDefaultAcl struct {
	*common.AwsResource `hcl:",squash"`
	DefaultNetworkAclId string       `hcl:"default_network_acl_id,expr"`
	Ingress             []AwsAclRule `hcl:"ingress"`
	Egress              []AwsAclRule `hcl:"egress"`
}

type AwsDefaultSecurityGroup

type AwsDefaultSecurityGroup struct {
	*common.AwsResource `hcl:",squash" default:"name=aws_default_security_group"`
	VpcId               string                 `hcl:"vpc_id,expr"`
	Ingress             []AwsSecurityGroupRule `hcl:"ingress,blocks"`
	Egress              []AwsSecurityGroupRule `hcl:"egress,blocks"`
}

type AwsSecurityGroup

type AwsSecurityGroup struct {
	*common.AwsResource `hcl:",squash"  default:"name=aws_security_group"`
	VpcId               string                 `hcl:"vpc_id,expr"`
	Name                string                 `hcl:"name"`
	Description         string                 `hcl:"description"`
	Ingress             []AwsSecurityGroupRule `hcl:"ingress,blocks"`
	Egress              []AwsSecurityGroupRule `hcl:"egress,blocks"`
}

type AwsSecurityGroupRule

type AwsSecurityGroupRule struct {
	Protocol   string   `hcl:"protocol"`
	FromPort   int      `hcl:"from_port"`
	ToPort     int      `hcl:"to_port"`
	CidrBlocks []string `hcl:"cidr_blocks"`
	Self       bool     `hcl:"self" hcle:"omitempty"`
}

type AzureNetworkInterfaceSecurityGroupAssociation

type AzureNetworkInterfaceSecurityGroupAssociation struct {
	*common.AzResource     `hcl:",squash" default:"name=azurerm_network_interface_security_group_association"`
	NetworkInterfaceId     string `hcl:"network_interface_id,expr"`
	NetworkSecurityGroupId string `hcl:"network_security_group_id,expr"`
}

type AzureNetworkSecurityGroup

type AzureNetworkSecurityGroup struct {
	Nsg                  AzureNsg                  `hcl:"resource"`
	SubnetNsgAssociation AzureSubnetNsgAssociation `hcl:"resource"`
}

type AzureNsg

type AzureNsg struct {
	*common.AzResource `hcl:",squash" default:"name=azurerm_network_security_group"`
	Rules              []AzureRule `hcl:"security_rule,blocks"`
}

type AzureRule

type AzureRule struct {
	Name                     string `hcl:"name"`
	Protocol                 string `hcl:"protocol"`
	Priority                 int    `hcl:"priority"`
	Access                   string `hcl:"access"`
	SourcePortRange          string `hcl:"source_port_range"`
	SourceAddressPrefix      string `hcl:"source_address_prefix"`
	DestinationPortRange     string `hcl:"destination_port_range"`
	DestinationAddressPrefix string `hcl:"destination_address_prefix"`
	Direction                string `hcl:"direction"`
}

type AzureSubnetNsgAssociation

type AzureSubnetNsgAssociation struct {
	ResourceName string `hcl:",key"`
	ResourceId   string `hcl:",key"`
	SubnetId     string `hcl:"subnet_id,expr"`
	NsgId        string `hcl:"network_security_group_id,expr"`
}

type GoogleComputeFirewall

type GoogleComputeFirewall struct {
	*common.GcpResource `hcl:",squash" default:"name=google_compute_firewall"`

	Description string `hcl:"description" hcle:"omitempty"`
	Network     string `hcl:"network,expr"`

	Direction         string   `hcl:"direction"`
	SourceRanges      []string `hcl:"source_ranges" hcle:"omitempty"`
	DestinationRanges []string `hcl:"destination_ranges" hcle:"omitempty"`
	Priority          int      `hcl:"priority"`

	AllowRules []GoogleComputeFirewallRule `hcl:"allow,blocks"`
	DenyRules  []GoogleComputeFirewallRule `hcl:"deny,blocks"`

	TargetTags []string `hcl:"target_tags" hcle:"omitempty"`
}

type GoogleComputeFirewallRule

type GoogleComputeFirewallRule struct {
	Protocol string   `hcl:"protocol"`
	Ports    []string `hcl:"ports" hcle:"omitempty"`
}