diff --git a/resources/vpc-allow-lists/github.git-IPv4.txt b/resources/vpc-allow-lists/github.git-IPv4.txt index 1a387af84..2c50a0ff8 100644 --- a/resources/vpc-allow-lists/github.git-IPv4.txt +++ b/resources/vpc-allow-lists/github.git-IPv4.txt @@ -4,20 +4,30 @@ 143.55.64.0/20 20.201.28.151/32 20.205.243.166/32 +20.205.243.161/32 20.87.245.0/32 +20.87.245.2/32 4.237.22.38/32 +4.237.22.36/32 4.228.31.150/32 +4.228.31.144/32 20.207.73.82/32 +20.207.73.81/32 20.27.177.113/32 +20.27.177.119/32 20.200.245.247/32 +20.200.245.244/32 20.175.192.147/32 20.233.83.145/32 +20.233.83.148/32 20.29.134.23/32 20.199.39.232/32 20.217.135.5/32 4.225.11.194/32 +4.225.11.199/32 4.208.26.197/32 20.26.156.215/32 +20.26.156.213/32 172.182.252.133/32 4.249.131.164/32 48.202.248.40/32 diff --git a/resources/vpc-allow-lists/github.web-IPv4.txt b/resources/vpc-allow-lists/github.web-IPv4.txt index 9e2b83d96..7ed953608 100644 --- a/resources/vpc-allow-lists/github.web-IPv4.txt +++ b/resources/vpc-allow-lists/github.web-IPv4.txt @@ -4,20 +4,30 @@ 143.55.64.0/20 20.201.28.151/32 20.205.243.166/32 +20.205.243.161/32 20.87.245.0/32 +20.87.245.2/32 4.237.22.38/32 +4.237.22.36/32 4.228.31.150/32 +4.228.31.144/32 20.207.73.82/32 +20.207.73.81/32 20.27.177.113/32 +20.27.177.119/32 20.200.245.247/32 +20.200.245.244/32 20.175.192.147/32 20.233.83.145/32 +20.233.83.148/32 20.29.134.23/32 20.199.39.232/32 20.217.135.5/32 4.225.11.194/32 +4.225.11.199/32 4.208.26.197/32 20.26.156.215/32 +20.26.156.213/32 172.182.252.133/32 4.249.131.164/32 48.202.248.40/32 diff --git a/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap b/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap index 7e9a11af0..a2bb15193 100644 --- a/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap +++ b/src/__tests__/__snapshots__/_limited-internet-access.test.ts.snap @@ -1072,7 +1072,7 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "githubgitIPv4d84caece240c9c728fedb69928710bdff10598b9": { + "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -1106,6 +1106,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.199.39.232/32", }, + { + "Cidr": "20.200.245.244/32", + }, { "Cidr": "20.200.245.247/32", }, @@ -1121,9 +1124,15 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.205.243.160/32", }, + { + "Cidr": "20.205.243.161/32", + }, { "Cidr": "20.205.243.166/32", }, + { + "Cidr": "20.207.73.81/32", + }, { "Cidr": "20.207.73.82/32", }, @@ -1139,9 +1148,15 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.233.83.145/32", }, + { + "Cidr": "20.233.83.148/32", + }, { "Cidr": "20.233.83.149/32", }, + { + "Cidr": "20.26.156.213/32", + }, { "Cidr": "20.26.156.214/32", }, @@ -1154,6 +1169,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.27.177.118/32", }, + { + "Cidr": "20.27.177.119/32", + }, { "Cidr": "20.29.134.19/32", }, @@ -1163,6 +1181,9 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.87.245.0/32", }, + { + "Cidr": "20.87.245.2/32", + }, { "Cidr": "20.87.245.4/32", }, @@ -1175,15 +1196,24 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "4.225.11.194/32", }, + { + "Cidr": "4.225.11.199/32", + }, { "Cidr": "4.225.11.200/32", }, + { + "Cidr": "4.228.31.144/32", + }, { "Cidr": "4.228.31.145/32", }, { "Cidr": "4.228.31.150/32", }, + { + "Cidr": "4.237.22.36/32", + }, { "Cidr": "4.237.22.38/32", }, @@ -1209,12 +1239,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` "Cidr": "48.204.201.6/32", }, ], - "MaxEntries": 44, + "MaxEntries": 54, "PrefixListName": "github.git.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "githubgitIPv4d84caece240c9c728fedb69928710bdff10598b97EDB41F1": { + "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179820426487": { "Properties": { "GroupDescription": "TestStack/github.git-IPv4", "Tags": [ @@ -1229,19 +1259,19 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroup", }, - "githubgitIPv4d84caece240c9c728fedb69928710bdff10598b9toTestStackgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b944392ACE1FE": { + "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798toTestStackgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179844335B305D0": { "Properties": { "Description": "to github.git (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "githubgitIPv4d84caece240c9c728fedb69928710bdff10598b9", + "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "githubgitIPv4d84caece240c9c728fedb69928710bdff10598b97EDB41F1", + "githubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179820426487", "GroupId", ], }, @@ -1250,7 +1280,7 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "githubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6": { + "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -1275,15 +1305,24 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.199.39.232/32", }, + { + "Cidr": "20.200.245.244/32", + }, { "Cidr": "20.200.245.247/32", }, { "Cidr": "20.201.28.151/32", }, + { + "Cidr": "20.205.243.161/32", + }, { "Cidr": "20.205.243.166/32", }, + { + "Cidr": "20.207.73.81/32", + }, { "Cidr": "20.207.73.82/32", }, @@ -1293,27 +1332,48 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` { "Cidr": "20.233.83.145/32", }, + { + "Cidr": "20.233.83.148/32", + }, + { + "Cidr": "20.26.156.213/32", + }, { "Cidr": "20.26.156.215/32", }, { "Cidr": "20.27.177.113/32", }, + { + "Cidr": "20.27.177.119/32", + }, { "Cidr": "20.29.134.23/32", }, { "Cidr": "20.87.245.0/32", }, + { + "Cidr": "20.87.245.2/32", + }, { "Cidr": "4.208.26.197/32", }, { "Cidr": "4.225.11.194/32", }, + { + "Cidr": "4.225.11.199/32", + }, + { + "Cidr": "4.228.31.144/32", + }, { "Cidr": "4.228.31.150/32", }, + { + "Cidr": "4.237.22.36/32", + }, { "Cidr": "4.237.22.38/32", }, @@ -1327,12 +1387,12 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` "Cidr": "48.204.201.5/32", }, ], - "MaxEntries": 24, + "MaxEntries": 34, "PrefixListName": "github.web.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "githubwebIPv49714e37a9e272af29b858112310fe29df85f8ba687BF1C9E": { + "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F1642425": { "Properties": { "GroupDescription": "TestStack/github.web-IPv4", "Tags": [ @@ -1347,19 +1407,19 @@ exports[`createRestrictedSecurityGroups creates the correct resources 1`] = ` }, "Type": "AWS::EC2::SecurityGroup", }, - "githubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6toTestStackgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba64434E0038B0": { + "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85toTestStackgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85443591199C6": { "Properties": { "Description": "to github.web (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "githubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6", + "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "githubwebIPv49714e37a9e272af29b858112310fe29df85f8ba687BF1C9E", + "githubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F1642425", "GroupId", ], }, diff --git a/src/__tests__/__snapshots__/construct-hub.test.ts.snap b/src/__tests__/__snapshots__/construct-hub.test.ts.snap index d62a2d19e..5d96d23f9 100644 --- a/src/__tests__/__snapshots__/construct-hub.test.ts.snap +++ b/src/__tests__/__snapshots__/construct-hub.test.ts.snap @@ -61667,14 +61667,14 @@ Direct link to function: /lambda/home#/functions/", "","", { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b991AEA62C", + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", "GroupId", ], }, "","", { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6042DEA2B", + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", "GroupId", ], }, @@ -68465,13 +68465,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b991AEA62C", + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6042DEA2B", + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", "GroupId", ], }, @@ -68552,13 +68552,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b991AEA62C", + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6042DEA2B", + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", "GroupId", ], }, @@ -68662,13 +68662,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b991AEA62C", + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6042DEA2B", + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", "GroupId", ], }, @@ -71191,13 +71191,13 @@ Direct link to Lambda function: /lambda/home#/functions/", }, { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b991AEA62C", + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", "GroupId", ], }, { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6042DEA2B", + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", "GroupId", ], }, @@ -72361,50 +72361,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b991AEA62C": { - "Properties": { - "GroupDescription": "Test/ConstructHub/github.git-IPv4", - "SecurityGroupIngress": [ - { - "CidrIp": { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - "Description": { - "Fn::Join": [ - "", - [ - "from ", - { - "Fn::GetAtt": [ - "ConstructHubVPC16ECCEA2", - "CidrBlock", - ], - }, - ":443", - ], - ], - }, - "FromPort": 443, - "IpProtocol": "tcp", - "ToPort": 443, - }, - ], - "Tags": [ - { - "Key": "Name", - "Value": "github.git.IPv4", - }, - ], - "VpcId": { - "Ref": "ConstructHubVPC16ECCEA2", - }, - }, - "Type": "AWS::EC2::SecurityGroup", - }, - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b9FF18AEFD": { + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a17985441902B": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -72438,6 +72395,9 @@ function handler(event) { { "Cidr": "20.199.39.232/32", }, + { + "Cidr": "20.200.245.244/32", + }, { "Cidr": "20.200.245.247/32", }, @@ -72453,9 +72413,15 @@ function handler(event) { { "Cidr": "20.205.243.160/32", }, + { + "Cidr": "20.205.243.161/32", + }, { "Cidr": "20.205.243.166/32", }, + { + "Cidr": "20.207.73.81/32", + }, { "Cidr": "20.207.73.82/32", }, @@ -72471,9 +72437,15 @@ function handler(event) { { "Cidr": "20.233.83.145/32", }, + { + "Cidr": "20.233.83.148/32", + }, { "Cidr": "20.233.83.149/32", }, + { + "Cidr": "20.26.156.213/32", + }, { "Cidr": "20.26.156.214/32", }, @@ -72486,6 +72458,9 @@ function handler(event) { { "Cidr": "20.27.177.118/32", }, + { + "Cidr": "20.27.177.119/32", + }, { "Cidr": "20.29.134.19/32", }, @@ -72495,6 +72470,9 @@ function handler(event) { { "Cidr": "20.87.245.0/32", }, + { + "Cidr": "20.87.245.2/32", + }, { "Cidr": "20.87.245.4/32", }, @@ -72507,15 +72485,24 @@ function handler(event) { { "Cidr": "4.225.11.194/32", }, + { + "Cidr": "4.225.11.199/32", + }, { "Cidr": "4.225.11.200/32", }, + { + "Cidr": "4.228.31.144/32", + }, { "Cidr": "4.228.31.145/32", }, { "Cidr": "4.228.31.150/32", }, + { + "Cidr": "4.237.22.36/32", + }, { "Cidr": "4.237.22.38/32", }, @@ -72541,24 +72528,67 @@ function handler(event) { "Cidr": "48.204.201.6/32", }, ], - "MaxEntries": 44, + "MaxEntries": 54, "PrefixListName": "github.git.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b9toTestConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b9443FE39F4B2": { + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF": { + "Properties": { + "GroupDescription": "Test/ConstructHub/github.git-IPv4", + "SecurityGroupIngress": [ + { + "CidrIp": { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + "Description": { + "Fn::Join": [ + "", + [ + "from ", + { + "Fn::GetAtt": [ + "ConstructHubVPC16ECCEA2", + "CidrBlock", + ], + }, + ":443", + ], + ], + }, + "FromPort": 443, + "IpProtocol": "tcp", + "ToPort": 443, + }, + ], + "Tags": [ + { + "Key": "Name", + "Value": "github.git.IPv4", + }, + ], + "VpcId": { + "Ref": "ConstructHubVPC16ECCEA2", + }, + }, + "Type": "AWS::EC2::SecurityGroup", + }, + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798toTestConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a1798443DA79EE39": { "Properties": { "Description": "to github.git (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b9FF18AEFD", + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a17985441902B", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "ConstructHubgithubgitIPv4d84caece240c9c728fedb69928710bdff10598b991AEA62C", + "ConstructHubgithubgitIPv4174dea8856a4816cdc37d9c1b733c83f789a179884C095CF", "GroupId", ], }, @@ -72567,7 +72597,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroupEgress", }, - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6042DEA2B": { + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9": { "Properties": { "GroupDescription": "Test/ConstructHub/github.web-IPv4", "SecurityGroupIngress": [ @@ -72610,7 +72640,7 @@ function handler(event) { }, "Type": "AWS::EC2::SecurityGroup", }, - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba61227140D": { + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F9136747": { "Properties": { "AddressFamily": "IPv4", "Entries": [ @@ -72635,15 +72665,24 @@ function handler(event) { { "Cidr": "20.199.39.232/32", }, + { + "Cidr": "20.200.245.244/32", + }, { "Cidr": "20.200.245.247/32", }, { "Cidr": "20.201.28.151/32", }, + { + "Cidr": "20.205.243.161/32", + }, { "Cidr": "20.205.243.166/32", }, + { + "Cidr": "20.207.73.81/32", + }, { "Cidr": "20.207.73.82/32", }, @@ -72653,27 +72692,48 @@ function handler(event) { { "Cidr": "20.233.83.145/32", }, + { + "Cidr": "20.233.83.148/32", + }, + { + "Cidr": "20.26.156.213/32", + }, { "Cidr": "20.26.156.215/32", }, { "Cidr": "20.27.177.113/32", }, + { + "Cidr": "20.27.177.119/32", + }, { "Cidr": "20.29.134.23/32", }, { "Cidr": "20.87.245.0/32", }, + { + "Cidr": "20.87.245.2/32", + }, { "Cidr": "4.208.26.197/32", }, { "Cidr": "4.225.11.194/32", }, + { + "Cidr": "4.225.11.199/32", + }, + { + "Cidr": "4.228.31.144/32", + }, { "Cidr": "4.228.31.150/32", }, + { + "Cidr": "4.237.22.36/32", + }, { "Cidr": "4.237.22.38/32", }, @@ -72687,24 +72747,24 @@ function handler(event) { "Cidr": "48.204.201.5/32", }, ], - "MaxEntries": 24, + "MaxEntries": 34, "PrefixListName": "github.web.IPv4", }, "Type": "AWS::EC2::PrefixList", }, - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6toTestConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba64439EFB9E70": { + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85toTestConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce854436C7DF0AC": { "Properties": { "Description": "to github.web (IPv4)", "DestinationPrefixListId": { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba61227140D", + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85F9136747", "PrefixListId", ], }, "FromPort": 443, "GroupId": { "Fn::GetAtt": [ - "ConstructHubgithubwebIPv49714e37a9e272af29b858112310fe29df85f8ba6042DEA2B", + "ConstructHubgithubwebIPv4fe83518cd6c19f987c85dfcef25455dc9bd1ce85B382FFE9", "GroupId", ], },