diff --git a/resources/vpc-allow-lists/github.git-IPv4.txt b/resources/vpc-allow-lists/github.git-IPv4.txt index 2c50a0ff8..64cdc0b24 100644 --- a/resources/vpc-allow-lists/github.git-IPv4.txt +++ b/resources/vpc-allow-lists/github.git-IPv4.txt @@ -21,14 +21,18 @@ 20.233.83.145/32 20.233.83.148/32 20.29.134.23/32 +20.29.134.22/32 20.199.39.232/32 20.217.135.5/32 +20.217.135.1/32 4.225.11.194/32 4.225.11.199/32 4.208.26.197/32 +4.208.26.193/32 20.26.156.215/32 20.26.156.213/32 172.182.252.133/32 +172.182.252.130/32 4.249.131.164/32 48.202.248.40/32 48.204.201.5/32 diff --git a/resources/vpc-allow-lists/github.web-IPv4.txt b/resources/vpc-allow-lists/github.web-IPv4.txt index 7ed953608..d461e1860 100644 --- a/resources/vpc-allow-lists/github.web-IPv4.txt +++ b/resources/vpc-allow-lists/github.web-IPv4.txt @@ -21,14 +21,18 @@ 20.233.83.145/32 20.233.83.148/32 20.29.134.23/32 +20.29.134.22/32 20.199.39.232/32 20.217.135.5/32 +20.217.135.1/32 4.225.11.194/32 4.225.11.199/32 4.208.26.197/32 +4.208.26.193/32 20.26.156.215/32 20.26.156.213/32 172.182.252.133/32 +172.182.252.130/32 4.249.131.164/32 48.202.248.40/32 48.204.201.5/32 \ No newline at end of file diff --git a/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap b/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap index a2bb15193..343143ec7 100644 --- a/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap +++ b/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap @@ -1072,7 +1072,7 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798": { + "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -1082,6 +1082,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "143.55.64.0/20", }, + { + "Cidr": "172.182.252.130/32", + }, { "Cidr": "172.182.252.133/32", }, @@ -1139,6 +1142,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.207.73.83/32", }, + { + "Cidr": "20.217.135.1/32", + }, { "Cidr": "20.217.135.4/32", }, @@ -1175,6 +1181,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.29.134.19/32", }, + { + "Cidr": "20.29.134.22/32", + }, { "Cidr": "20.29.134.23/32", }, @@ -1187,6 +1196,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.87.245.4/32", }, + { + "Cidr": "4.208.26.193/32", + }, { "Cidr": "4.208.26.197/32", }, @@ -1239,12 +1251,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` "Cidr": "48.204.201.6/32", }, ], - "MaxEntries": 54, + "MaxEntries": 58, "PrefixListName": "github.git.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179820426487": { + "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f43B6F580B": { "Properties": { "GroupDescription": "TestStack/github.git-IPv4", "Tags": [ @@ -1259,19 +1271,19 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroup", }, - "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798toTestStackgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179844335B305D0": { + "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4toTestStackgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4443826409A7": { "Properties": { "Description": "to github.git (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798", + "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179820426487", + "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f43B6F580B", "GroupId", ], }, @@ -1280,7 +1292,7 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85": { + "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -1290,6 +1302,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "143.55.64.0/20", }, + { + "Cidr": "172.182.252.130/32", + }, { "Cidr": "172.182.252.133/32", }, @@ -1326,6 +1341,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.207.73.82/32", }, + { + "Cidr": "20.217.135.1/32", + }, { "Cidr": "20.217.135.5/32", }, @@ -1347,6 +1365,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.27.177.119/32", }, + { + "Cidr": "20.29.134.22/32", + }, { "Cidr": "20.29.134.23/32", }, @@ -1356,6 +1377,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.87.245.2/32", }, + { + "Cidr": "4.208.26.193/32", + }, { "Cidr": "4.208.26.197/32", }, @@ -1387,12 +1411,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` "Cidr": "48.204.201.5/32", }, ], - "MaxEntries": 34, + "MaxEntries": 38, "PrefixListName": "github.web.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F1642425": { + "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c270301D7": { "Properties": { "GroupDescription": "TestStack/github.web-IPv4", "Tags": [ @@ -1407,19 +1431,19 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroup", }, - "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85toTestStackgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85443591199C6": { + "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5ctoTestStackgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c44325B7676C": { "Properties": { "Description": "to github.web (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85", + "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F1642425", + "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c270301D7", "GroupId", ], }, diff --git a/src/__tests__/__snapshots__/construct-hub.test.ts.snap b/src/__tests__/__snapshots__/construct-hub.test.ts.snap index 5441e7b70..3e48cb9bf 100644 --- a/src/__tests__/__snapshots__/construct-hub.test.ts.snap +++ b/src/__tests__/__snapshots__/construct-hub.test.ts.snap @@ -61667,14 +61667,14 @@ Direct link to function: /lambda/home#/functions/", "","", { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", "GroupId", ], }, "","", { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", "GroupId", ], }, @@ -68465,13 +68465,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", "GroupId", ], }, @@ -68552,13 +68552,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", "GroupId", ], }, @@ -68662,13 +68662,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", "GroupId", ], }, @@ -71191,13 +71191,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", "GroupId", ], }, @@ -72361,7 +72361,50 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a17985441902B": { + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B": { + "Properties": { + "GroupDescription": "Test/ConstructHub/github.git-IPv4", + "SecurityGroupIngress": [ + { + "CidrIp": { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + "Description": { + "Fn::Join": [ + "", + [ + "from ", + { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + ":443", + ], + ], + }, + "FromPort": 443, + "IpProtocol": "tcp", + "ToPort": 443, + }, + ], + "Tags": [ + { + "Key": "Name", + "Value": "github.git.IPv4", + }, + ], + "VpcId": { + "Ref": "ConstructHubVPC16ECCEA2", + }, + }, + "Type": "AWS::EC2::SecurityGroup", + }, + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4C8B7C282": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -72371,6 +72414,9 @@ function handler(event) { { "Cidr": "143.55.64.0/20", }, + { + "Cidr": "172.182.252.130/32", + }, { "Cidr": "172.182.252.133/32", }, @@ -72428,6 +72474,9 @@ function handler(event) { { "Cidr": "20.207.73.83/32", }, + { + "Cidr": "20.217.135.1/32", + }, { "Cidr": "20.217.135.4/32", }, @@ -72464,6 +72513,9 @@ function handler(event) { { "Cidr": "20.29.134.19/32", }, + { + "Cidr": "20.29.134.22/32", + }, { "Cidr": "20.29.134.23/32", }, @@ -72476,6 +72528,9 @@ function handler(event) { { "Cidr": "20.87.245.4/32", }, + { + "Cidr": "4.208.26.193/32", + }, { "Cidr": "4.208.26.197/32", }, @@ -72528,67 +72583,24 @@ function handler(event) { "Cidr": "48.204.201.6/32", }, ], - "MaxEntries": 54, + "MaxEntries": 58, "PrefixListName": "github.git.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF": { - "Properties": { - "GroupDescription": "Test/ConstructHub/github.git-IPv4", - "SecurityGroupIngress": [ - { - "CidrIp": { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - "Description": { - "Fn::Join": [ - "", - [ - "from ", - { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - ":443", - ], - ], - }, - "FromPort": 443, - "IpProtocol": "tcp", - "ToPort": 443, - }, - ], - "Tags": [ - { - "Key": "Name", - "Value": "github.git.IPv4", - }, - ], - "VpcId": { - "Ref": "ConstructHubVPC16ECCEA2", - }, - }, - "Type": "AWS::EC2::SecurityGroup", - }, - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798toTestConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798443DA79EE39": { + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4toTestConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f444381ADFF8B": { "Properties": { "Description": "to github.git (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a17985441902B", + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4C8B7C282", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", + "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", "GroupId", ], }, @@ -72597,50 +72609,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9": { - "Properties": { - "GroupDescription": "Test/ConstructHub/github.web-IPv4", - "SecurityGroupIngress": [ - { - "CidrIp": { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - "Description": { - "Fn::Join": [ - "", - [ - "from ", - { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - ":443", - ], - ], - }, - "FromPort": 443, - "IpProtocol": "tcp", - "ToPort": 443, - }, - ], - "Tags": [ - { - "Key": "Name", - "Value": "github.web.IPv4", - }, - ], - "VpcId": { - "Ref": "ConstructHubVPC16ECCEA2", - }, - }, - "Type": "AWS::EC2::SecurityGroup", - }, - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F9136747": { + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c7D5F4993": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -72650,6 +72619,9 @@ function handler(event) { { "Cidr": "143.55.64.0/20", }, + { + "Cidr": "172.182.252.130/32", + }, { "Cidr": "172.182.252.133/32", }, @@ -72686,6 +72658,9 @@ function handler(event) { { "Cidr": "20.207.73.82/32", }, + { + "Cidr": "20.217.135.1/32", + }, { "Cidr": "20.217.135.5/32", }, @@ -72707,6 +72682,9 @@ function handler(event) { { "Cidr": "20.27.177.119/32", }, + { + "Cidr": "20.29.134.22/32", + }, { "Cidr": "20.29.134.23/32", }, @@ -72716,6 +72694,9 @@ function handler(event) { { "Cidr": "20.87.245.2/32", }, + { + "Cidr": "4.208.26.193/32", + }, { "Cidr": "4.208.26.197/32", }, @@ -72747,24 +72728,67 @@ function handler(event) { "Cidr": "48.204.201.5/32", }, ], - "MaxEntries": 34, + "MaxEntries": 38, "PrefixListName": "github.web.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85toTestConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce854436C7DF0AC": { + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D": { + "Properties": { + "GroupDescription": "Test/ConstructHub/github.web-IPv4", + "SecurityGroupIngress": [ + { + "CidrIp": { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + "Description": { + "Fn::Join": [ + "", + [ + "from ", + { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + ":443", + ], + ], + }, + "FromPort": 443, + "IpProtocol": "tcp", + "ToPort": 443, + }, + ], + "Tags": [ + { + "Key": "Name", + "Value": "github.web.IPv4", + }, + ], + "VpcId": { + "Ref": "ConstructHubVPC16ECCEA2", + }, + }, + "Type": "AWS::EC2::SecurityGroup", + }, + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5ctoTestConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c44314DD1B34": { "Properties": { "Description": "to github.web (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F9136747", + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c7D5F4993", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", + "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", "GroupId", ], },