data.json

{
  "resource": {
    "aws_security_group": {
      "base_node": {
        "name": "${var.network_namespace}-base_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-base_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "base_node"
        }
      },
      "vpn_node": {
        "name": "${var.network_namespace}-vpn_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-vpn_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "vpn_node"
        }
      },
      "saltmaster_node": {
        "name": "${var.network_namespace}-saltmaster_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-saltmaster_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "saltmaster_node"
        }
      },
      "bastion_node": {
        "name": "${var.network_namespace}-bastion_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-bastion_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "bastion_node"
        }
      },
      "webapp_node": {
        "name": "${var.network_namespace}-webapp_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-webapp_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "webapp_node"
        }
      },
      "sql_node": {
        "name": "${var.network_namespace}-sql_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-sql_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "sql_node"
        }
      },      
      "ci_node": {
        "name": "${var.network_namespace}-ci_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-ci_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "ci_node"
        }
      },
      "ci_node": {
        "name": "${var.network_namespace}-ci_node",
        "vpcid": "${var.vpcid}",

        "tags": {
          "name": "${var.network_namespace}-ci_node",
          "network_namespace": "${var.network_namespace}",
          "purpose": "ci_node"
        }
      }
    },
    "aws_security_group_rule": {
      "from_basenode_to_saltmaster_tcp_4505-4506": {
        "type": "ingress",
        "from_port": 4505,
        "to_port": 4506,
        "protocol": "tcp",
        "source_security_group_id": "${aws_security_group.base_node.id}",
        "security_group_id" : "${aws_security_group.saltmaster_node.id}"
      },
      "from_bastion_to_base_node_tcp_22": {
        "type": "ingress",
        "from_port": 22,
        "to_port": 22,
        "protocol": "tcp",
        "source_security_group_id": "${aws_security_group.bastion_node.id}",
        "security_group_id" : "${aws_security_group.base_node.id}"
      },
      "from_vpn_to_webapp_node_tcp_8080": {
        "type": "ingress",
        "from_port": 8080,
        "to_port": 8080,
        "protocol": "tcp",
        "source_security_group_id": "${aws_security_group.vpn_node.id}",
        "security_group_id" : "${aws_security_group.webapp_node.id}"
      },
      "from_vpn_to_base_node_tcp_22": {
        "type": "ingress",
        "from_port": 22,
        "to_port": 22,
        "protocol": "tcp",
        "source_security_group_id": "${aws_security_group.vpn_node.id}",
        "security_group_id" : "${aws_security_group.base_node.id}"
      },
        "from_ci_to_webapp_node_tcp_22": {
        "type": "ingress",
        "from_port": 22,
        "to_port": 22,
        "protocol": "tcp",
        "source_security_group_id": "${aws_security_group.ci_node.id}",
        "security_group_id" : "${aws_security_group.webapp_node.id}"
      },
        "from_webapp_to_sql_node_tcp_3306": {
        "type": "ingress",
        "from_port": 3306,
        "to_port": 3306,
        "protocol": "tcp",
        "source_security_group_id": "${aws_security_group.webapp_node.id}",
        "security_group_id" : "${aws_security_group.sql_node.id}"
      }
    }
  }
}