add tf_vpc for dsk dev;

terraform/tf-dev-cloud-20221025/.terraform.lock.hcl

@@ -0,0 +1,22 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/hashicorp/aws" {
+  version     = "4.27.0"
+  constraints = ">= 4.0.0"
+  hashes = [
+    "h1:w3j7YomUQ9IfRp3MUuY0+hFX1T1cawZoj0Xsc1a46bU=",
+    "zh:0f5ade3801fec487641e4f7d81e28075b716c787772f9709cc2378d20f325791",
+    "zh:19ffa83be6b6765a4f821a17b8d260dd0f192a6c40765fa53ac65fd042cb1f65",
+    "zh:3ac89d33ff8ca75bdc42f31c63ce0018ffc66aa69917c18713e824e381950e4e",
+    "zh:81a199724e74992c8a029a968d211cb45277d95a2e88d0f07ec85127b6c6849b",
+    "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425",
+    "zh:a2e2c851a37ef97bbccccd2e686b4d016abe207a7f56bff70b10bfdf8ed1cbfd",
+    "zh:baf844def338d77f8a3106b1411a1fe22e93a82e3dc51e5d33b766f741c4a6a3",
+    "zh:bc33137fae808f91da0a9de7031cbea77d0ee4eefb4d2ad6ab7f58cc2111a7ff",
+    "zh:c960ae2b33c8d3327f67a3db5ce1952315146d69dfc3f1b0922242e2b218eec8",
+    "zh:f3ea1a25797c79c035463a1188a6a42e131f391f3cb714975ce49ccd301cda07",
+    "zh:f7e77c871d38236e5fedee0086ff77ff396e88964348c794cf38e578fcc00293",
+    "zh:fb338d5dfafab907b8608bd66cad8ca9ae4679f8c62c2435c2056a38b719baa2",
+  ]
+}

terraform/tf-dev-cloud-20221025/changes.txt

@@ -0,0 +1,768 @@
+aws_route_table_association.rta-iac-c: Refreshing state... [id=rtbassoc-0fd9ea480fc1bd2ec]
+aws_route_table_association.rta-iac-a: Refreshing state... [id=rtbassoc-0d9f0c70e1d159ede]
+aws_route_table_association.rta-iac-b: Refreshing state... [id=rtbassoc-04f3b256e59854ac7]
+aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io: Refreshing state... [id=sgrule-3927496604]
+aws_route.route-private-rt-datasaker-iac-0-0-0-0--0: Refreshing state... [id=r-rtb-02fa87e2873f596311080289494]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io: Refreshing state... [id=sgrule-3238310385]
+aws_security_group.sg-iac-datasaker: Refreshing state... [id=sg-07d769a675ed05b35]
+aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io: Refreshing state... [id=sgrule-361293936]
+aws_subnet.sbn-iac-a: Refreshing state... [id=subnet-08330ae1fd7c5d77e]
+aws_subnet.sbn-iac-b: Refreshing state... [id=subnet-0c8c4d1df1a2920e4]
+aws_subnet.sbn-iac-c: Refreshing state... [id=subnet-06e724baf7d879769]
+aws_route_table.rt-datasaker-iac: Refreshing state... [id=rtb-02fa87e2873f59631]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io: Refreshing state... [id=sgrule-3300624291]
+aws_vpc_dhcp_options.vpc-dhcp-datasaker: Refreshing state... [id=dopt-086d99ae90c3cde26]
+aws_key_pair.kp-bastion-datasaker: Refreshing state... [id=kp-bastion-datasaker]
+aws_eip.eip-natgw-datasaker: Refreshing state... [id=eipalloc-08b46670f70c2d11d]
+aws_vpc.vpc-datasaker: Refreshing state... [id=vpc-0b6e0b906c678a22f]
+aws_security_group.sg-dev-datasaker: Refreshing state... [id=sg-0aed067b37f609a6f]
+aws_vpc_dhcp_options_association.vpc-dhcp-asso-datasaker: Refreshing state... [id=dopt-086d99ae90c3cde26-vpc-0b6e0b906c678a22f]
+aws_route_table.rt-datasaker-pub: Refreshing state... [id=rtb-057ad7940bd4d0e47]
+aws_subnet.sbn-dev-a: Refreshing state... [id=subnet-0c875e254456809f7]
+aws_security_group.sg-dmz-datasaker: Refreshing state... [id=sg-07f27eba164d59dfa]
+aws_internet_gateway.igw-datasaker: Refreshing state... [id=igw-024cfe034db889aee]
+aws_route_table.rt-datasaker-dev: Refreshing state... [id=rtb-0222c34fe74835820]
+aws_subnet.sbn-dev-c: Refreshing state... [id=subnet-0940fd78504acbbde]
+aws_subnet.sbn-dev-b: Refreshing state... [id=subnet-05672a669943fc12f]
+aws_subnet.sbn-dmz-a: Refreshing state... [id=subnet-0de55619bee2411f8]
+aws_subnet.sbn-dmz-b: Refreshing state... [id=subnet-0a5d787353f874684]
+aws_subnet.sbn-dmz-c: Refreshing state... [id=subnet-0ee26ffc561efb292]
+aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io: Refreshing state... [id=sgrule-3441164403]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io: Refreshing state... [id=sgrule-4096359581]
+aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io: Refreshing state... [id=sgrule-4111863151]
+aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io: Refreshing state... [id=sgrule-320777473]
+aws_route.r-0-0-0-0--0: Refreshing state... [id=r-rtb-057ad7940bd4d0e471080289494]
+aws_route.r-__--0: Refreshing state... [id=r-rtb-057ad7940bd4d0e472750132062]
+aws_route_table_association.rta-dmz-a: Refreshing state... [id=rtbassoc-02b2175a50034917e]
+aws_nat_gateway.natgw-datasaker: Refreshing state... [id=nat-0149e41fa11377dfd]
+aws_route_table_association.rta-dev-a: Refreshing state... [id=rtbassoc-0459be806f7412cc4]
+aws_route_table_association.rta-dev-c: Refreshing state... [id=rtbassoc-02bd4922ff04a92c9]
+aws_security_group_rule.sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io: Refreshing state... [id=sgrule-807868327]
+aws_security_group_rule.sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io: Refreshing state... [id=sgrule-3686484473]
+aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io: Refreshing state... [id=sgrule-3688340000]
+aws_route_table_association.rta-dev-b: Refreshing state... [id=rtbassoc-099a4bf3c51f94b59]
+aws_launch_template.lt-dmz-bastion-datasaker: Refreshing state... [id=lt-0a499abed36cc72a3]
+aws_route_table_association.rta-dmz-b: Refreshing state... [id=rtbassoc-094e0157c4a065f34]
+aws_route_table_association.rta-dmz-c: Refreshing state... [id=rtbassoc-0989ba31270eaee71]
+aws_route.route-private-rt-datasaker-dev-0-0-0-0--0: Refreshing state... [id=r-rtb-0222c34fe748358201080289494]
+aws_autoscaling_group.ag-dmz-bastion-datasaker: Refreshing state... [id=ag-dmz-bastion-datasaker]
+
+Note: Objects have changed outside of Terraform
+
+Terraform detected the following changes made outside of Terraform since the
+last "terraform apply":
+
+  # aws_autoscaling_group.ag-dmz-bastion-datasaker has changed
+  ~ resource "aws_autoscaling_group" "ag-dmz-bastion-datasaker" {
+        id                        = "ag-dmz-bastion-datasaker"
+      + load_balancers            = []
+        name                      = "ag-dmz-bastion-datasaker"
+      + suspended_processes       = []
+      + target_group_arns         = []
+      + termination_policies      = []
+        # (19 unchanged attributes hidden)
+
+
+        # (2 unchanged blocks hidden)
+    }
+
+  # aws_eip.eip-natgw-datasaker has changed
+  ~ resource "aws_eip" "eip-natgw-datasaker" {
+      + association_id       = "eipassoc-0a0634f3c2394e898"
+        id                   = "eipalloc-08b46670f70c2d11d"
+      + network_interface    = "eni-013cb7e830637be38"
+      + private_dns          = "ip-172-21-0-244.ap-northeast-2.compute.internal"
+      + private_ip           = "172.21.0.244"
+        tags                 = {
+            "Name" = "eip-natgw-datasaker"
+        }
+        # (8 unchanged attributes hidden)
+    }
+
+  # aws_launch_template.lt-dmz-bastion-datasaker has changed
+  ~ resource "aws_launch_template" "lt-dmz-bastion-datasaker" {
+        id                      = "lt-0a499abed36cc72a3"
+        name                    = "lt-dmz-bastion-datasaker"
+      + security_group_names    = []
+        tags                    = {
+            "Name" = "lt-dmz-bastion-datasaker"
+        }
+      + vpc_security_group_ids  = []
+        # (9 unchanged attributes hidden)
+
+
+
+
+      ~ network_interfaces {
+          + ipv4_addresses              = []
+          + ipv4_prefixes               = []
+          + ipv6_addresses              = []
+          + ipv6_prefixes               = []
+            # (9 unchanged attributes hidden)
+        }
+        # (3 unchanged blocks hidden)
+    }
+
+  # aws_route.route-private-rt-datasaker-iac-0-0-0-0--0 has been deleted
+  - resource "aws_route" "route-private-rt-datasaker-iac-0-0-0-0--0" {
+      - destination_cidr_block = "0.0.0.0/0" -> null
+      - id                     = "r-rtb-02fa87e2873f596311080289494" -> null
+      - nat_gateway_id         = "nat-0149e41fa11377dfd" -> null
+      - origin                 = "CreateRoute" -> null
+      - route_table_id         = "rtb-02fa87e2873f59631" -> null
+      - state                  = "active" -> null
+    }
+
+  # aws_route_table.rt-datasaker-dev has changed
+  ~ resource "aws_route_table" "rt-datasaker-dev" {
+        id               = "rtb-0222c34fe74835820"
+      ~ route            = [
+          + {
+              + carrier_gateway_id         = ""
+              + cidr_block                 = "0.0.0.0/0"
+              + core_network_arn           = ""
+              + destination_prefix_list_id = ""
+              + egress_only_gateway_id     = ""
+              + gateway_id                 = ""
+              + instance_id                = ""
+              + ipv6_cidr_block            = ""
+              + local_gateway_id           = ""
+              + nat_gateway_id             = "nat-0149e41fa11377dfd"
+              + network_interface_id       = ""
+              + transit_gateway_id         = ""
+              + vpc_endpoint_id            = ""
+              + vpc_peering_connection_id  = ""
+            },
+        ]
+        tags             = {
+            "Name" = "rt-datasaker-dev"
+        }
+        # (5 unchanged attributes hidden)
+    }
+
+  # aws_route_table.rt-datasaker-iac has been deleted
+  - resource "aws_route_table" "rt-datasaker-iac" {
+      - arn              = "arn:aws:ec2:ap-northeast-2:508259851457:route-table/rtb-02fa87e2873f59631" -> null
+      - id               = "rtb-02fa87e2873f59631" -> null
+      - owner_id         = "508259851457" -> null
+      - propagating_vgws = [] -> null
+      - route            = [] -> null
+      - tags             = {
+          - "Name" = "rt-datasaker-iac"
+        } -> null
+      - tags_all         = {
+          - "Name" = "rt-datasaker-iac"
+        } -> null
+      - vpc_id           = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_route_table.rt-datasaker-pub has changed
+  ~ resource "aws_route_table" "rt-datasaker-pub" {
+        id               = "rtb-057ad7940bd4d0e47"
+      ~ route            = [
+          + {
+              + carrier_gateway_id         = ""
+              + cidr_block                 = ""
+              + core_network_arn           = ""
+              + destination_prefix_list_id = ""
+              + egress_only_gateway_id     = ""
+              + gateway_id                 = "igw-024cfe034db889aee"
+              + instance_id                = ""
+              + ipv6_cidr_block            = "::/0"
+              + local_gateway_id           = ""
+              + nat_gateway_id             = ""
+              + network_interface_id       = ""
+              + transit_gateway_id         = ""
+              + vpc_endpoint_id            = ""
+              + vpc_peering_connection_id  = ""
+            },
+          + {
+              + carrier_gateway_id         = ""
+              + cidr_block                 = "0.0.0.0/0"
+              + core_network_arn           = ""
+              + destination_prefix_list_id = ""
+              + egress_only_gateway_id     = ""
+              + gateway_id                 = "igw-024cfe034db889aee"
+              + instance_id                = ""
+              + ipv6_cidr_block            = ""
+              + local_gateway_id           = ""
+              + nat_gateway_id             = ""
+              + network_interface_id       = ""
+              + transit_gateway_id         = ""
+              + vpc_endpoint_id            = ""
+              + vpc_peering_connection_id  = ""
+            },
+        ]
+        tags             = {
+            "Name" = "rt-datasaker-pub"
+        }
+        # (5 unchanged attributes hidden)
+    }
+
+  # aws_route_table_association.rta-iac-a has been deleted
+  - resource "aws_route_table_association" "rta-iac-a" {
+      - id             = "rtbassoc-0d9f0c70e1d159ede" -> null
+      - route_table_id = "rtb-02fa87e2873f59631" -> null
+      - subnet_id      = "subnet-08330ae1fd7c5d77e" -> null
+    }
+
+  # aws_route_table_association.rta-iac-b has been deleted
+  - resource "aws_route_table_association" "rta-iac-b" {
+      - id             = "rtbassoc-04f3b256e59854ac7" -> null
+      - route_table_id = "rtb-02fa87e2873f59631" -> null
+      - subnet_id      = "subnet-0c8c4d1df1a2920e4" -> null
+    }
+
+  # aws_route_table_association.rta-iac-c has been deleted
+  - resource "aws_route_table_association" "rta-iac-c" {
+      - id             = "rtbassoc-0fd9ea480fc1bd2ec" -> null
+      - route_table_id = "rtb-02fa87e2873f59631" -> null
+      - subnet_id      = "subnet-06e724baf7d879769" -> null
+    }
+
+  # aws_security_group.sg-dev-datasaker has changed
+  ~ resource "aws_security_group" "sg-dev-datasaker" {
+      ~ egress                 = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 0
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 65535
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 8
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "icmp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 8
+            },
+        ]
+        id                     = "sg-0aed067b37f609a6f"
+      ~ ingress                = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 22
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 22
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 8
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "icmp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 8
+            },
+        ]
+        name                   = "secg-dev-datasaker"
+        tags                   = {
+            "Name" = "sg-dev-datasaker"
+        }
+        # (6 unchanged attributes hidden)
+    }
+
+  # aws_security_group.sg-dmz-datasaker has changed
+  ~ resource "aws_security_group" "sg-dmz-datasaker" {
+      ~ egress                 = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 0
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 65535
+            },
+        ]
+        id                     = "sg-07f27eba164d59dfa"
+      ~ ingress                = [
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 30000
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 30000
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 443
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 443
+            },
+          + {
+              + cidr_blocks      = [
+                  + "0.0.0.0/0",
+                ]
+              + description      = ""
+              + from_port        = 80
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 80
+            },
+          + {
+              + cidr_blocks      = [
+                  + "115.178.73.2/32",
+                  + "115.178.73.91/32",
+                ]
+              + description      = ""
+              + from_port        = 22
+              + ipv6_cidr_blocks = []
+              + prefix_list_ids  = []
+              + protocol         = "tcp"
+              + security_groups  = []
+              + self             = false
+              + to_port          = 22
+            },
+        ]
+        name                   = "secg-dmz-datasaker"
+        tags                   = {
+            "Name" = "sg-dmz-datasaker"
+        }
+        # (6 unchanged attributes hidden)
+    }
+
+  # aws_security_group.sg-iac-datasaker has been deleted
+  - resource "aws_security_group" "sg-iac-datasaker" {
+      - arn                    = "arn:aws:ec2:ap-northeast-2:508259851457:security-group/sg-07d769a675ed05b35" -> null
+      - description            = "Security group iac-datasaker" -> null
+      - egress                 = [] -> null
+      - id                     = "sg-07d769a675ed05b35" -> null
+      - ingress                = [] -> null
+      - name                   = "secg-iac-datasaker" -> null
+      - owner_id               = "508259851457" -> null
+      - revoke_rules_on_delete = false -> null
+      - tags                   = {
+          - "Name" = "sg-iac-datasaker"
+        } -> null
+      - tags_all               = {
+          - "Name" = "sg-iac-datasaker"
+        } -> null
+      - vpc_id                 = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io" {
+        id                = "sgrule-3441164403"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io" {
+        id                = "sgrule-3688340000"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 0 -> null
+      - id                = "sgrule-3927496604" -> null
+      - protocol          = "tcp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 65535 -> null
+      - type              = "egress" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io" {
+        id                = "sgrule-4111863151"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 8 -> null
+      - id                = "sgrule-3238310385" -> null
+      - protocol          = "icmp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 0 -> null
+      - type              = "ingress" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io" {
+        id                = "sgrule-4096359581"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 22 -> null
+      - id                = "sgrule-3300624291" -> null
+      - protocol          = "tcp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 22 -> null
+      - type              = "ingress" -> null
+    }
+
+  # aws_security_group_rule.sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io" {
+        id                = "sgrule-3686484473"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io" {
+        id                = "sgrule-807868327"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io has changed
+  ~ resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io" {
+        id                = "sgrule-320777473"
+        # (7 unchanged attributes hidden)
+    }
+
+  # aws_security_group_rule.sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io has been deleted
+  - resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-iac-datasaker-io" {
+      - cidr_blocks       = [
+          - "0.0.0.0/0",
+        ] -> null
+      - from_port         = 8 -> null
+      - id                = "sgrule-361293936" -> null
+      - protocol          = "icmp" -> null
+      - security_group_id = "sg-07d769a675ed05b35" -> null
+      - self              = false -> null
+      - to_port           = 8 -> null
+      - type              = "egress" -> null
+    }
+
+  # aws_subnet.sbn-dev-a has changed
+  ~ resource "aws_subnet" "sbn-dev-a" {
+        id                                             = "subnet-0c875e254456809f7"
+      ~ tags                                           = {
+          + "kops.k8s.io/instance-group/dev-data-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-a"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true"
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          + "kops.k8s.io/instance-group/dev-data-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-a"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-a"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true"
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-b has changed
+  ~ resource "aws_subnet" "sbn-dev-b" {
+        id                                             = "subnet-05672a669943fc12f"
+      ~ tags                                           = {
+          + "kops.k8s.io/instance-group/dev-data-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-b"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true"
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          + "kops.k8s.io/instance-group/dev-data-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-b"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-b"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true"
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-c has changed
+  ~ resource "aws_subnet" "sbn-dev-c" {
+        id                                             = "subnet-0940fd78504acbbde"
+      ~ tags                                           = {
+          + "kops.k8s.io/instance-group/dev-data-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-c"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true"
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          + "kops.k8s.io/instance-group/dev-data-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-data-druid-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true"
+          + "kops.k8s.io/instance-group/dev-mgmt-c"             = "true"
+          + "kops.k8s.io/instance-group/dev-process-c"          = "true"
+          + "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true"
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-iac-a has been deleted
+  - resource "aws_subnet" "sbn-iac-a" {
+      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-08330ae1fd7c5d77e" -> null
+      - assign_ipv6_address_on_creation                = false -> null
+      - availability_zone                              = "ap-northeast-2a" -> null
+      - availability_zone_id                           = "apne2-az1" -> null
+      - cidr_block                                     = "172.21.16.0/23" -> null
+      - enable_dns64                                   = false -> null
+      - enable_resource_name_dns_a_record_on_launch    = true -> null
+      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
+      - id                                             = "subnet-08330ae1fd7c5d77e" -> null
+      - ipv6_native                                    = false -> null
+      - map_customer_owned_ip_on_launch                = false -> null
+      - map_public_ip_on_launch                        = false -> null
+      - owner_id                                       = "508259851457" -> null
+      - private_dns_hostname_type_on_launch            = "resource-name" -> null
+      - tags                                           = {
+          - "Name"                            = "sbn-iac-a.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - tags_all                                       = {
+          - "Name"                            = "sbn-iac-a.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_subnet.sbn-iac-b has been deleted
+  - resource "aws_subnet" "sbn-iac-b" {
+      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-0c8c4d1df1a2920e4" -> null
+      - assign_ipv6_address_on_creation                = false -> null
+      - availability_zone                              = "ap-northeast-2b" -> null
+      - availability_zone_id                           = "apne2-az2" -> null
+      - cidr_block                                     = "172.21.18.0/23" -> null
+      - enable_dns64                                   = false -> null
+      - enable_resource_name_dns_a_record_on_launch    = true -> null
+      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
+      - id                                             = "subnet-0c8c4d1df1a2920e4" -> null
+      - ipv6_native                                    = false -> null
+      - map_customer_owned_ip_on_launch                = false -> null
+      - map_public_ip_on_launch                        = false -> null
+      - owner_id                                       = "508259851457" -> null
+      - private_dns_hostname_type_on_launch            = "resource-name" -> null
+      - tags                                           = {
+          - "Name"                            = "sbn-iac-b.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - tags_all                                       = {
+          - "Name"                            = "sbn-iac-b.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_subnet.sbn-iac-c has been deleted
+  - resource "aws_subnet" "sbn-iac-c" {
+      - arn                                            = "arn:aws:ec2:ap-northeast-2:508259851457:subnet/subnet-06e724baf7d879769" -> null
+      - assign_ipv6_address_on_creation                = false -> null
+      - availability_zone                              = "ap-northeast-2c" -> null
+      - availability_zone_id                           = "apne2-az3" -> null
+      - cidr_block                                     = "172.21.20.0/23" -> null
+      - enable_dns64                                   = false -> null
+      - enable_resource_name_dns_a_record_on_launch    = true -> null
+      - enable_resource_name_dns_aaaa_record_on_launch = false -> null
+      - id                                             = "subnet-06e724baf7d879769" -> null
+      - ipv6_native                                    = false -> null
+      - map_customer_owned_ip_on_launch                = false -> null
+      - map_public_ip_on_launch                        = false -> null
+      - owner_id                                       = "508259851457" -> null
+      - private_dns_hostname_type_on_launch            = "resource-name" -> null
+      - tags                                           = {
+          - "Name"                            = "sbn-iac-c.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - tags_all                                       = {
+          - "Name"                            = "sbn-iac-c.datasaker"
+          - "SubnetType"                      = "Private"
+          - "kubernetes.io/cluster/datasaker" = "owned"
+          - "kubernetes.io/role/elb"          = "1"
+          - "kubernetes.io/role/internal-elb" = "1"
+        } -> null
+      - vpc_id                                         = "vpc-0b6e0b906c678a22f" -> null
+    }
+
+  # aws_vpc.vpc-datasaker has changed
+  ~ resource "aws_vpc" "vpc-datasaker" {
+      ~ dhcp_options_id                      = "dopt-021d4c0e9e138e269" -> "dopt-086d99ae90c3cde26"
+        id                                   = "vpc-0b6e0b906c678a22f"
+        tags                                 = {
+            "Name" = "vpc-datasaker"
+        }
+        # (18 unchanged attributes hidden)
+    }
+
+  # aws_vpc_dhcp_options.vpc-dhcp-datasaker has changed
+  ~ resource "aws_vpc_dhcp_options" "vpc-dhcp-datasaker" {
+        id                   = "dopt-086d99ae90c3cde26"
+      + netbios_name_servers = []
+      + ntp_servers          = []
+        tags                 = {
+            "Name" = "vpc-dhcp-datasaker"
+        }
+        # (5 unchanged attributes hidden)
+    }
+
+
+Unless you have made equivalent changes to your configuration, or ignored the
+relevant attributes using ignore_changes, the following plan may include
+actions to undo or respond to these changes.
+
+─────────────────────────────────────────────────────────────────────────────
+
+Terraform used the selected providers to generate the following execution
+plan. Resource actions are indicated with the following symbols:
+  ~ update in-place
+
+Terraform will perform the following actions:
+
+  # aws_subnet.sbn-dev-a will be updated in-place
+  ~ resource "aws_subnet" "sbn-dev-a" {
+        id                                             = "subnet-0c875e254456809f7"
+      ~ tags                                           = {
+          - "kops.k8s.io/instance-group/dev-data-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-a"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          - "kops.k8s.io/instance-group/dev-data-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-a"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-a"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-a"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2a" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-b will be updated in-place
+  ~ resource "aws_subnet" "sbn-dev-b" {
+        id                                             = "subnet-05672a669943fc12f"
+      ~ tags                                           = {
+          - "kops.k8s.io/instance-group/dev-data-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-b"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          - "kops.k8s.io/instance-group/dev-data-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-b"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-b"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-b"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2b" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+  # aws_subnet.sbn-dev-c will be updated in-place
+  ~ resource "aws_subnet" "sbn-dev-c" {
+        id                                             = "subnet-0940fd78504acbbde"
+      ~ tags                                           = {
+          - "kops.k8s.io/instance-group/dev-data-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-c"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+      ~ tags_all                                       = {
+          - "kops.k8s.io/instance-group/dev-data-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-druid-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-data-kafka-c"       = "true" -> null
+          - "kops.k8s.io/instance-group/dev-mgmt-c"             = "true" -> null
+          - "kops.k8s.io/instance-group/dev-process-c"          = "true" -> null
+          - "kops.k8s.io/instance-group/master-ap-northeast-2c" = "true" -> null
+            # (6 unchanged elements hidden)
+        }
+        # (14 unchanged attributes hidden)
+    }
+
+Plan: 0 to add, 3 to change, 0 to destroy.
+
+─────────────────────────────────────────────────────────────────────────────
+
+Note: You didn't use the -out option to save this plan, so Terraform can't
+guarantee to take exactly these actions if you run "terraform apply" now.

terraform/tf-dev-cloud-20221025/dev.tf

@@ -0,0 +1,133 @@
+resource "aws_route_table" "rt-datasaker-dev" {
+  tags = {
+    "Name" = "rt-datasaker-dev"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+
+resource "aws_route" "route-private-rt-datasaker-dev-0-0-0-0--0" {
+  destination_cidr_block = "0.0.0.0/0"
+  nat_gateway_id         = aws_nat_gateway.natgw-datasaker.id
+  route_table_id         = aws_route_table.rt-datasaker-dev.id
+}
+
+
+
+resource "aws_subnet" "sbn-dev-a" {
+  availability_zone                           = "ap-northeast-2a"
+  cidr_block                                  = "172.21.8.0/23"
+  enable_resource_name_dns_a_record_on_launch = true
+  private_dns_hostname_type_on_launch         = "resource-name"
+  tags = {
+    "Name"                                                  = "sbn-dev-a.datasaker"
+    "SubnetType"                                            = "Private"
+    "kubernetes.io/cluster/datasaker" = "owned"
+    "kubernetes.io/cluster/dev.datasaker.io" = "shared"
+    "kubernetes.io/role/elb"                                = "1"
+    "kubernetes.io/role/internal-elb"                       = "1"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+resource "aws_subnet" "sbn-dev-b" {
+  availability_zone                           = "ap-northeast-2b"
+  cidr_block                                  = "172.21.10.0/23"
+  enable_resource_name_dns_a_record_on_launch = true
+  private_dns_hostname_type_on_launch         = "resource-name"
+  tags = {
+    "Name"                                                  = "sbn-dev-b.datasaker"
+    "SubnetType"                                            = "Private"
+    "kubernetes.io/cluster/datasaker" = "owned"
+    "kubernetes.io/cluster/dev.datasaker.io" = "shared"
+    "kubernetes.io/role/elb"                                = "1"
+    "kubernetes.io/role/internal-elb"                       = "1"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+resource "aws_subnet" "sbn-dev-c" {
+  availability_zone                           = "ap-northeast-2c"
+  cidr_block                                  = "172.21.12.0/23"
+  enable_resource_name_dns_a_record_on_launch = true
+  private_dns_hostname_type_on_launch         = "resource-name"
+  tags = {
+    "Name"                                                  = "sbn-dev-c.datasaker"
+    "SubnetType"                                            = "Private"
+    "kubernetes.io/cluster/datasaker" = "owned"
+    "kubernetes.io/cluster/dev.datasaker.io" = "shared"
+    "kubernetes.io/role/elb"                                = "1"
+    "kubernetes.io/role/internal-elb"                       = "1"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+
+resource "aws_route_table_association" "rta-dev-a" {
+  route_table_id = aws_route_table.rt-datasaker-dev.id
+  subnet_id      = aws_subnet.sbn-dev-a.id
+}
+
+resource "aws_route_table_association" "rta-dev-b" {
+  route_table_id = aws_route_table.rt-datasaker-dev.id
+  subnet_id      = aws_subnet.sbn-dev-b.id
+}
+
+resource "aws_route_table_association" "rta-dev-c" {
+  route_table_id = aws_route_table.rt-datasaker-dev.id
+  subnet_id      = aws_subnet.sbn-dev-c.id
+}
+
+resource "aws_security_group" "sg-dev-datasaker" {
+  description = "Security group dev-datasaker"
+  name        = "secg-dev-datasaker"
+  tags = {
+    "Name" = "sg-dev-datasaker"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+
+resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-dev-datasaker-io" {
+  cidr_blocks       = ["0.0.0.0/0"]
+  from_port         = 22
+  protocol          = "tcp"
+  security_group_id = aws_security_group.sg-dev-datasaker.id
+  to_port           = 22
+  type              = "ingress"
+}
+
+resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-dev-datasaker-io" {
+  cidr_blocks       = ["0.0.0.0/0"]
+  from_port         = 8
+  protocol          = "icmp"
+  security_group_id = aws_security_group.sg-dev-datasaker.id
+  to_port           = 8
+  type              = "ingress"
+}
+
+resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-dev-datasaker-io" {
+  cidr_blocks       = ["0.0.0.0/0"]
+  from_port         = 8
+  protocol          = "icmp"
+  security_group_id = aws_security_group.sg-dev-datasaker.id
+  to_port           = 8
+  type              = "egress"
+}
+
+resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dev-datasaker-io" {
+  cidr_blocks       = ["0.0.0.0/0"]
+  from_port         = 0
+  protocol          = "tcp"
+  security_group_id = aws_security_group.sg-dev-datasaker.id
+  to_port           = 65535
+  type              = "egress"
+}
+
+
+
+
+
+
+
+

terraform/tf-dev-cloud-20221025/dmz.tf

@@ -0,0 +1,252 @@
+
+output "sbn_dmz_a_id" {
+  value = aws_subnet.sbn-dmz-a.id
+}
+
+output "sbn_dmz_b_id" {
+  value = aws_subnet.sbn-dmz-b.id
+}
+
+output "sbn_dmz_c_id" {
+  value = aws_subnet.sbn-dmz-c.id
+}
+
+
+
+resource "aws_subnet" "sbn-dmz-a" {
+  availability_zone                           = "ap-northeast-2a"
+  cidr_block                                  = "172.21.0.0/24"
+  enable_resource_name_dns_a_record_on_launch = true
+  private_dns_hostname_type_on_launch         = "resource-name"
+  tags = {
+    "Name"                                                  = "sbn-dmz-a.datasaker"
+    "SubnetType"                                            = "Utility"
+    "kubernetes.io/cluster/datasaker" = "owned"
+    "kubernetes.io/cluster/dev.datasaker.io" = "shared"
+    "kubernetes.io/role/elb"                                = "1"
+    "kubernetes.io/role/internal-elb"                       = "1"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+resource "aws_subnet" "sbn-dmz-b" {
+  availability_zone                           = "ap-northeast-2b"
+  cidr_block                                  = "172.21.1.0/24"
+  enable_resource_name_dns_a_record_on_launch = true
+  private_dns_hostname_type_on_launch         = "resource-name"
+  tags = {
+    "Name"                                                  = "sbn-dmz-b.datasaker"
+    "SubnetType"                                            = "Utility"
+    "kubernetes.io/cluster/datasaker" = "owned"
+    "kubernetes.io/cluster/dev.datasaker.io" = "shared"
+    "kubernetes.io/role/elb"                                = "1"
+    "kubernetes.io/role/internal-elb"                       = "1"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+resource "aws_subnet" "sbn-dmz-c" {
+  availability_zone                           = "ap-northeast-2c"
+  cidr_block                                  = "172.21.2.0/24"
+  enable_resource_name_dns_a_record_on_launch = true
+  private_dns_hostname_type_on_launch         = "resource-name"
+  tags = {
+    "Name"                                                  = "sbn-dmz-c.datasaker"
+    "SubnetType"                                            = "Utility"
+    "kubernetes.io/cluster/datasaker" = "owned"
+    "kubernetes.io/cluster/dev.datasaker.io" = "shared"
+    "kubernetes.io/role/elb"                                = "1"
+    "kubernetes.io/role/internal-elb"                       = "1"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+
+
+resource "aws_route_table_association" "rta-dmz-a" {
+  route_table_id = aws_route_table.rt-datasaker-pub.id
+  subnet_id      = aws_subnet.sbn-dmz-a.id
+}
+
+resource "aws_route_table_association" "rta-dmz-b" {
+  route_table_id = aws_route_table.rt-datasaker-pub.id
+  subnet_id      = aws_subnet.sbn-dmz-b.id
+}
+
+resource "aws_route_table_association" "rta-dmz-c" {
+  route_table_id = aws_route_table.rt-datasaker-pub.id
+  subnet_id      = aws_subnet.sbn-dmz-c.id
+}
+
+
+
+resource "aws_security_group" "sg-dmz-datasaker" {
+  description = "Security group dmz-datasaker"
+  name        = "secg-dmz-datasaker"
+  tags = {
+    "Name" = "sg-dmz-datasaker"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+# resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-tcp-22to22-dmz-datasaker-io" {
+#   cidr_blocks       = ["0.0.0.0/0"]
+#   from_port         = 22
+#   protocol          = "tcp"
+#   security_group_id = aws_security_group.sg-dmz-datasaker.id
+#   to_port           = 22
+#   type              = "ingress"
+# }
+
+resource "aws_security_group_rule" "sgr-from-115-178-73-2--32-ingress-tcp-22to22-dmz-datasaker-io" {
+  cidr_blocks       = ["115.178.73.2/32"]
+  from_port         = 22
+  protocol          = "tcp"
+  security_group_id = aws_security_group.sg-dmz-datasaker.id
+  to_port           = 22
+  type              = "ingress"
+}
+
+resource "aws_security_group_rule" "sgr-from-115-178-73-91--32-ingress-tcp-22to22-dmz-datasaker-io" {
+  cidr_blocks       = ["115.178.73.91/32"]
+  from_port         = 22
+  protocol          = "tcp"
+  security_group_id = aws_security_group.sg-dmz-datasaker.id
+  to_port           = 22
+  type              = "ingress"
+}
+
+
+
+
+# resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-ingress-icmp-dmz-datasaker-io" {
+#   cidr_blocks       = ["0.0.0.0/0"]
+#   from_port         = 8
+#   protocol          = "icmp"
+#   security_group_id = aws_security_group.sg-dmz-datasaker.id
+#   to_port           = 8
+#   type              = "ingress"
+# }
+
+# resource "aws_security_group_rule" "sgr-to-0-0-0-0--0-egress-icmp-dmz-datasaker-io" {
+#   cidr_blocks       = ["0.0.0.0/0"]
+#   from_port         = 8
+#   protocol          = "icmp"
+#   security_group_id = aws_security_group.sg-dmz-datasaker.id
+#   to_port           = 8
+#   type              = "egress"
+# }
+
+resource "aws_security_group_rule" "sgr-from-0-0-0-0--0-engress-tcp-all-dmz-datasaker-io" {
+  cidr_blocks       = ["0.0.0.0/0"]
+  from_port         = 0
+  protocol          = "tcp"
+  security_group_id = aws_security_group.sg-dmz-datasaker.id
+  to_port           = 65535
+  type              = "egress"
+}
+
+
+
+
+resource "aws_launch_template" "lt-dmz-bastion-datasaker" {
+  block_device_mappings {
+    device_name = "/dev/xvda"
+    ebs {
+      delete_on_termination = true
+      encrypted             = true
+      iops                  = 3000
+      throughput            = 125
+      volume_size           = 20
+      volume_type           = "gp3"
+    }
+  }
+
+
+  image_id      = "ami-0ea5eb4b05645aa8a"
+  instance_type = "t3.small"
+  key_name      = aws_key_pair.kp-bastion-datasaker.id
+  lifecycle {
+    create_before_destroy = true
+  }
+  metadata_options {
+    http_endpoint               = "enabled"
+    http_protocol_ipv6          = "disabled"
+    http_put_response_hop_limit = 3
+    http_tokens                 = "required"
+  }
+  monitoring {
+    enabled = false
+  }
+  name = "lt-dmz-bastion-datasaker"
+  network_interfaces {
+    associate_public_ip_address = true
+    delete_on_termination = true
+    ipv6_address_count = 0
+    security_groups = [aws_security_group.sg-dmz-datasaker.id]
+  }
+  # tag_specifications {
+  #   resource_type = "instance"
+  #   tags = {
+  #     "Name" = "lt-dmz-bastion-datasaker"
+  #   }
+  # }
+  # tag_specifications {
+  #   resource_type = "volume"
+  #   tags = {
+  #     "Name" = "master-ap-northeast-2b.masters.ap-northeast-2.dev.datasaker.io"
+  #   }
+  # }
+  tags = {
+    "Name" = "lt-dmz-bastion-datasaker"
+  }
+  # user_data = filebase64("${path.module}/data/aws_launch_template_master-ap-northeast-2b.masters.ap-northeast-2.dev.datasaker.io_user_data")
+}
+
+resource "aws_autoscaling_group" "ag-dmz-bastion-datasaker" {
+  enabled_metrics = ["GroupDesiredCapacity", "GroupInServiceInstances", "GroupMaxSize", "GroupMinSize", "GroupPendingInstances", "GroupStandbyInstances", "GroupTerminatingInstances", "GroupTotalInstances"]
+  launch_template {
+    id      = aws_launch_template.lt-dmz-bastion-datasaker.id
+    version = aws_launch_template.lt-dmz-bastion-datasaker.latest_version
+  }
+  max_instance_lifetime = 0
+  max_size              = 1
+  metrics_granularity   = "1Minute"
+  min_size              = 1
+  name                  = "ag-dmz-bastion-datasaker"
+  protect_from_scale_in = false
+
+  tag {
+    key                 = "Name"
+    propagate_at_launch = true
+    value               = "ag-dmz-bastion-datasaker"
+  }
+  vpc_zone_identifier = [aws_subnet.sbn-dmz-a.id,aws_subnet.sbn-dmz-b.id]
+}
+
+
+
+resource "aws_eip" "eip-natgw-datasaker" {
+  # instance = aws_instance.web1-ec2.id
+  vpc      = true
+
+  tags = {
+    Name    = "eip-natgw-datasaker"
+  }
+}
+
+resource "aws_nat_gateway" "natgw-datasaker" {
+  allocation_id = aws_eip.eip-natgw-datasaker.id
+  subnet_id     = aws_subnet.sbn-dmz-a.id
+
+  tags = {
+    Name = "natgw-datasaker"
+  }
+
+  # To ensure proper ordering, it is recommended to add an explicit dependency
+  # on the Internet Gateway for the VPC.
+  depends_on = [aws_internet_gateway.igw-datasaker]
+}
+
+
+

terraform/tf-dev-cloud-20221025/terraform.tfstate.backup

@@ -0,0 +1,8 @@
+{
+  "version": 4,
+  "terraform_version": "1.1.9",
+  "serial": 1058,
+  "lineage": "0d7102e1-4b04-a7c0-069c-c81a4ba42c0d",
+  "outputs": {},
+  "resources": []
+}

terraform/tf-dev-cloud-20221025/vpc.tf

@@ -0,0 +1,93 @@
+terraform {
+  required_version = ">= 0.15.0"
+  required_providers {
+    aws = {
+      "configuration_aliases" = [aws.files]
+      "source"                = "hashicorp/aws"
+      "version"               = ">= 4.0.0"
+    }
+  }
+}
+
+provider "aws" {
+  region = "ap-northeast-2"
+}
+
+provider "aws" {
+  alias  = "files"
+  region = "ap-northeast-2"
+}
+
+output "vpc_datasaker_id" {
+  value = aws_vpc.vpc-datasaker.id
+}
+
+output "vpc_datasaker_cidr_block" {
+  value = aws_vpc.vpc-datasaker.cidr_block
+}
+
+
+
+resource "aws_vpc" "vpc-datasaker" {
+  assign_generated_ipv6_cidr_block = true
+  cidr_block                       = "172.21.0.0/16"
+  enable_dns_hostnames             = true
+  enable_dns_support               = true
+  tags = {
+    "Name" = "vpc-datasaker"
+  }
+}
+
+resource "aws_vpc_dhcp_options" "vpc-dhcp-datasaker" {
+  domain_name         = "ap-northeast-2.compute.internal"
+  domain_name_servers = ["AmazonProvidedDNS"]
+  tags = {
+    "Name" = "vpc-dhcp-datasaker"
+  }
+}
+
+resource "aws_vpc_dhcp_options_association" "vpc-dhcp-asso-datasaker" {
+  dhcp_options_id = aws_vpc_dhcp_options.vpc-dhcp-datasaker.id
+  vpc_id          = aws_vpc.vpc-datasaker.id
+}
+
+resource "aws_internet_gateway" "igw-datasaker" {
+  tags = {
+    "Name" = "igw-datasaker"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+
+resource "aws_key_pair" "kp-bastion-datasaker" {
+  key_name   = "kp-bastion-datasaker"
+  public_key = "ssh-rsa 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 hsgahm@ws-ubuntu"
+  tags = {
+    "Name" = "kp-bastion-datasaker"
+  }
+}
+
+
+resource "aws_route_table" "rt-datasaker-pub" {
+  tags = {
+    "Name" = "rt-datasaker-pub"
+  }
+  vpc_id = aws_vpc.vpc-datasaker.id
+}
+
+
+resource "aws_route" "r-0-0-0-0--0" {
+  destination_cidr_block = "0.0.0.0/0"
+  gateway_id = aws_internet_gateway.igw-datasaker.id
+  route_table_id = aws_route_table.rt-datasaker-pub.id
+}
+
+resource "aws_route" "r-__--0" {
+  destination_ipv6_cidr_block = "::/0"
+  gateway_id = aws_internet_gateway.igw-datasaker.id
+  route_table_id = aws_route_table.rt-datasaker-pub.id
+}
+
+
+
+