Clarify extra groups comments to explain inbound outbound directions.

shinesolutions · Mar 8, 2020 · 4811378 · 4811378
1 parent 1c7cb75
commit 4811378
Show file tree

Hide file tree

Showing 19 changed files with 217 additions and 217 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,7 +8,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## Unreleased
 
 ### Changed
-- Update Jumphost access security group with the resource `shn-awsres-03`
+- Update Jumphost access security group (from jumphost inbound to instances) with the resource `shn-awsres-03`
 
 ### Removed
 - Removed `inbound_from_bastion_host_security_group` configuration since it's no longer needed in aem-aws-stack-builder 4.34.0
diff --git a/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem62/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem62/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem63/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem63/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem64/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem64/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem65/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-amazon-linux2-aem65/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-consolidated-rhel7-aem62/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-rhel7-aem62/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-consolidated-rhel7-aem63/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-rhel7-aem63/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-consolidated-rhel7-aem64/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-rhel7-aem64/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-consolidated-rhel7-aem65/consolidated.yaml b/aem-aws-stack-builder/aem-consolidated-rhel7-aem65/consolidated.yaml
@@ -44,11 +44,11 @@ security_groups:
   author_publish_dispatcher:
     inbound_cidr_ip: 10.0.8.0/21
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
   secure_shell:
     inbound_cidr_ip: 10.0.8.0/21

diff --git a/aem-aws-stack-builder/aem-full-set-amazon-linux2-aem62/full-set.yaml b/aem-aws-stack-builder/aem-full-set-amazon-linux2-aem62/full-set.yaml
@@ -64,65 +64,65 @@ security_groups:
 
   author_primary:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   author_standby:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   publish:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   author_dispatcher:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   publish_dispatcher:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   orchestrator:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   chaos_monkey:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
 s3:

diff --git a/aem-aws-stack-builder/aem-full-set-amazon-linux2-aem63/full-set.yaml b/aem-aws-stack-builder/aem-full-set-amazon-linux2-aem63/full-set.yaml
@@ -64,65 +64,65 @@ security_groups:
 
   author_primary:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   author_standby:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   publish:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   author_dispatcher:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   publish_dispatcher:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   orchestrator:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   chaos_monkey:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
 s3:

diff --git a/aem-aws-stack-builder/aem-full-set-amazon-linux2-aem64/full-set.yaml b/aem-aws-stack-builder/aem-full-set-amazon-linux2-aem64/full-set.yaml
@@ -64,65 +64,65 @@ security_groups:
 
   author_primary:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   author_standby:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   publish:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   author_dispatcher:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   publish_dispatcher:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   orchestrator:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
   chaos_monkey:
     extra_groups:
-      # Corp network security group
+      # Corp network security group (from corp network inbound to instances)
       - sg-01b72e7bb83c77a07
-      # Forward proxy access security group
+      # Forward proxy access security group (from instances outbound to forward proxy)
       - sg-09bbdf9db5255406f
-      # Jumphost access security group
+      # Jumphost access security group (from jumphost inbound to instances)
       - sg-0c68e3fad6526b077
 
 s3: