diff --git a/resources/vpc-allow-lists/github.api-IPv4.txt b/resources/vpc-allow-lists/github.api-IPv4.txt index f8cbae7ef..241843671 100644 --- a/resources/vpc-allow-lists/github.api-IPv4.txt +++ b/resources/vpc-allow-lists/github.api-IPv4.txt @@ -16,6 +16,7 @@ 20.199.39.228/32 20.217.135.0/32 4.225.11.201/32 +20.250.119.72/32 4.208.26.200/32 20.26.156.210/32 172.182.252.137/32 diff --git a/resources/vpc-allow-lists/github.git-IPv4.txt b/resources/vpc-allow-lists/github.git-IPv4.txt index 64cdc0b24..0eb9e19a3 100644 --- a/resources/vpc-allow-lists/github.git-IPv4.txt +++ b/resources/vpc-allow-lists/github.git-IPv4.txt @@ -27,6 +27,7 @@ 20.217.135.1/32 4.225.11.194/32 4.225.11.199/32 +20.250.119.67/32 4.208.26.197/32 4.208.26.193/32 20.26.156.215/32 @@ -50,6 +51,7 @@ 20.199.39.227/32 20.217.135.4/32 4.225.11.200/32 +20.250.119.68/32 4.208.26.198/32 20.26.156.214/32 172.182.252.135/32 diff --git a/resources/vpc-allow-lists/github.web-IPv4.txt b/resources/vpc-allow-lists/github.web-IPv4.txt index d461e1860..772face22 100644 --- a/resources/vpc-allow-lists/github.web-IPv4.txt +++ b/resources/vpc-allow-lists/github.web-IPv4.txt @@ -27,6 +27,7 @@ 20.217.135.1/32 4.225.11.194/32 4.225.11.199/32 +20.250.119.67/32 4.208.26.197/32 4.208.26.193/32 20.26.156.215/32 diff --git a/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap b/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap index e577f21df..5e0e32c96 100644 --- a/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap +++ b/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap @@ -808,7 +808,7 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "githubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf9": { + "githubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -851,6 +851,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.233.83.146/32", }, + { + "Cidr": "20.250.119.72/32", + }, { "Cidr": "20.26.156.210/32", }, @@ -885,12 +888,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` "Cidr": "48.204.201.2/32", }, ], - "MaxEntries": 24, + "MaxEntries": 25, "PrefixListName": "github.api.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "githubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf95303FA6B": { + "githubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101fB659A4EE": { "Properties": { "GroupDescription": "TestStack/github.api-IPv4", "Tags": [ @@ -905,19 +908,19 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroup", }, - "githubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf9toTestStackgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf94435E7D2307": { + "githubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101ftoTestStackgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f443C2CC103E": { "Properties": { "Description": "to github.api (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "githubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf9", + "githubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "githubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf95303FA6B", + "githubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101fB659A4EE", "GroupId", ], }, @@ -926,7 +929,7 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4": { + "githubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a33": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -1014,6 +1017,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.233.83.149/32", }, + { + "Cidr": "20.250.119.67/32", + }, + { + "Cidr": "20.250.119.68/32", + }, { "Cidr": "20.26.156.213/32", }, @@ -1105,12 +1114,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` "Cidr": "48.204.201.6/32", }, ], - "MaxEntries": 58, + "MaxEntries": 60, "PrefixListName": "github.git.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f43B6F580B": { + "githubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a3366C4FC3F": { "Properties": { "GroupDescription": "TestStack/github.git-IPv4", "Tags": [ @@ -1125,19 +1134,19 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroup", }, - "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4toTestStackgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4443826409A7": { + "githubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a33toTestStackgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a3344304B3710F": { "Properties": { "Description": "to github.git (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4", + "githubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a33", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "githubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f43B6F580B", + "githubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a3366C4FC3F", "GroupId", ], }, @@ -1146,7 +1155,7 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c": { + "githubwebIPv44d5269d755b39293610381b518684b11320ec258": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -1207,6 +1216,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.233.83.148/32", }, + { + "Cidr": "20.250.119.67/32", + }, { "Cidr": "20.26.156.213/32", }, @@ -1265,12 +1277,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` "Cidr": "48.204.201.5/32", }, ], - "MaxEntries": 38, + "MaxEntries": 39, "PrefixListName": "github.web.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c270301D7": { + "githubwebIPv44d5269d755b39293610381b518684b11320ec25815A90363": { "Properties": { "GroupDescription": "TestStack/github.web-IPv4", "Tags": [ @@ -1285,19 +1297,19 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroup", }, - "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5ctoTestStackgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c44325B7676C": { + "githubwebIPv44d5269d755b39293610381b518684b11320ec258toTestStackgithubwebIPv44d5269d755b39293610381b518684b11320ec2584430764A3BB": { "Properties": { "Description": "to github.web (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c", + "githubwebIPv44d5269d755b39293610381b518684b11320ec258", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "githubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c270301D7", + "githubwebIPv44d5269d755b39293610381b518684b11320ec25815A90363", "GroupId", ], }, diff --git a/src/__tests__/__snapshots__/construct-hub.test.ts.snap b/src/__tests__/__snapshots__/construct-hub.test.ts.snap index 7394e12ab..b078e00ec 100644 --- a/src/__tests__/__snapshots__/construct-hub.test.ts.snap +++ b/src/__tests__/__snapshots__/construct-hub.test.ts.snap @@ -64964,21 +64964,21 @@ Direct link to function: /lambda/home#/functions/", "","", { "Fn::GetAtt": [ - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf931C81E6D", + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f2646E1AB", "GroupId", ], }, "","", { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a338C05EE36", "GroupId", ], }, "","", { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258DEFFBFDC", "GroupId", ], }, @@ -72569,19 +72569,19 @@ Runbook: https://github.com/cdklabs/construct-hub/blob/main/docs/operator-runboo }, { "Fn::GetAtt": [ - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf931C81E6D", + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f2646E1AB", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a338C05EE36", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258DEFFBFDC", "GroupId", ], }, @@ -72656,19 +72656,19 @@ Runbook: https://github.com/cdklabs/construct-hub/blob/main/docs/operator-runboo }, { "Fn::GetAtt": [ - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf931C81E6D", + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f2646E1AB", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a338C05EE36", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258DEFFBFDC", "GroupId", ], }, @@ -72766,19 +72766,19 @@ Runbook: https://github.com/cdklabs/construct-hub/blob/main/docs/operator-runboo }, { "Fn::GetAtt": [ - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf931C81E6D", + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f2646E1AB", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a338C05EE36", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258DEFFBFDC", "GroupId", ], }, @@ -75295,19 +75295,19 @@ Runbook: https://github.com/cdklabs/construct-hub/blob/main/docs/operator-runboo }, { "Fn::GetAtt": [ - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf931C81E6D", + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f2646E1AB", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a338C05EE36", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258DEFFBFDC", "GroupId", ], }, @@ -76327,7 +76327,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf931C81E6D": { + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f2646E1AB": { "Properties": { "GroupDescription": "Test/ConstructHub/github.api-IPv4", "SecurityGroupIngress": [ @@ -76370,7 +76370,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroup", }, - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf9B321BB74": { + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f36D9DFFD": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -76413,6 +76413,9 @@ function handler(event) { { "Cidr": "20.233.83.146/32", }, + { + "Cidr": "20.250.119.72/32", + }, { "Cidr": "20.26.156.210/32", }, @@ -76447,24 +76450,24 @@ function handler(event) { "Cidr": "48.204.201.2/32", }, ], - "MaxEntries": 24, + "MaxEntries": 25, "PrefixListName": "github.api.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf9toTestConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf94432B435A83": { + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101ftoTestConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f4431A4C4D94": { "Properties": { "Description": "to github.api (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf9B321BB74", + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f36D9DFFD", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "ConstructHubgithubapiIPv405c09c716f8bf30efa003af21ce0fc68b182aaf931C81E6D", + "ConstructHubgithubapiIPv48b14a44dc387a39ae5a317e3f9d2f5105b37101f2646E1AB", "GroupId", ], }, @@ -76473,50 +76476,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B": { - "Properties": { - "GroupDescription": "Test/ConstructHub/github.git-IPv4", - "SecurityGroupIngress": [ - { - "CidrIp": { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - "Description": { - "Fn::Join": [ - "", - [ - "from ", - { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - ":443", - ], - ], - }, - "FromPort": 443, - "IpProtocol": "tcp", - "ToPort": 443, - }, - ], - "Tags": [ - { - "Key": "Name", - "Value": "github.git.IPv4", - }, - ], - "VpcId": { - "Ref": "ConstructHubVPC16ECCEA2", - }, - }, - "Type": "AWS::EC2::SecurityGroup", - }, - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4C8B7C282": { + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a3388E5AE54": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -76604,6 +76564,12 @@ function handler(event) { { "Cidr": "20.233.83.149/32", }, + { + "Cidr": "20.250.119.67/32", + }, + { + "Cidr": "20.250.119.68/32", + }, { "Cidr": "20.26.156.213/32", }, @@ -76695,24 +76661,67 @@ function handler(event) { "Cidr": "48.204.201.6/32", }, ], - "MaxEntries": 58, + "MaxEntries": 60, "PrefixListName": "github.git.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4toTestConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f444381ADFF8B": { + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a338C05EE36": { + "Properties": { + "GroupDescription": "Test/ConstructHub/github.git-IPv4", + "SecurityGroupIngress": [ + { + "CidrIp": { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + "Description": { + "Fn::Join": [ + "", + [ + "from ", + { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + ":443", + ], + ], + }, + "FromPort": 443, + "IpProtocol": "tcp", + "ToPort": 443, + }, + ], + "Tags": [ + { + "Key": "Name", + "Value": "github.git.IPv4", + }, + ], + "VpcId": { + "Ref": "ConstructHubVPC16ECCEA2", + }, + }, + "Type": "AWS::EC2::SecurityGroup", + }, + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a33toTestConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a33443F8A4F8F1": { "Properties": { "Description": "to github.git (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f4C8B7C282", + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a3388E5AE54", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4e23ab9a4b0baf5e809bac0601614d8b8888729f423FA536B", + "ConstructHubgithubgitIPv48bddd6d40cd8b3ed9535170fe60e258bba595a338C05EE36", "GroupId", ], }, @@ -76721,7 +76730,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c7D5F4993": { + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec25836EE1243": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -76782,6 +76791,9 @@ function handler(event) { { "Cidr": "20.233.83.148/32", }, + { + "Cidr": "20.250.119.67/32", + }, { "Cidr": "20.26.156.213/32", }, @@ -76840,12 +76852,12 @@ function handler(event) { "Cidr": "48.204.201.5/32", }, ], - "MaxEntries": 38, + "MaxEntries": 39, "PrefixListName": "github.web.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D": { + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258DEFFBFDC": { "Properties": { "GroupDescription": "Test/ConstructHub/github.web-IPv4", "SecurityGroupIngress": [ @@ -76888,19 +76900,19 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroup", }, - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5ctoTestConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c44314DD1B34": { + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258toTestConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec25844392D90D8C": { "Properties": { "Description": "to github.web (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5c7D5F4993", + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec25836EE1243", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv48b09f54d49ce98209b0016d0a3962a93cdb24c5cBFC4C88D", + "ConstructHubgithubwebIPv44d5269d755b39293610381b518684b11320ec258DEFFBFDC", "GroupId", ], },