cloudformation/FIXEngineApplication.yml [3028:3079]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Metadata:
      cfn_nag:
        rules_to_suppress:
          - id: W5
            reason: Outbound HTTP(S) traffic is required to download third-party dependencies.
    Properties:
      GroupDescription: Security Group for RDS Cluster Prep
      SecurityGroupEgress:
        - CidrIp: '0.0.0.0/0'
          Description: Allow All HTTPS Traffic
          FromPort: 80
          IpProtocol: tcp
          ToPort: 80
        - CidrIp: '0.0.0.0/0'
          Description: Allow All HTTPS Traffic
          FromPort: 443
          IpProtocol: tcp
          ToPort: 443
      VpcId: !Ref 'VPC'
    Type: AWS::EC2::SecurityGroup
  RDSClusterPrepSecurityGroupEgressToRDS:
    DependsOn:
      - RDSClusterSecurityGroup
      - RDSClusterPrepSecurityGroup
    Properties:
      Description: Allow TCP Traffic to RDS MySQL
      DestinationSecurityGroupId: !GetAtt 'RDSClusterSecurityGroup.GroupId'
      FromPort: 3306
      GroupId: !GetAtt 'RDSClusterPrepSecurityGroup.GroupId'
      IpProtocol: tcp
      ToPort: 3306
    Type: AWS::EC2::SecurityGroupEgress
  RDSClusterSecretArnParam:
    Condition: ''
    Properties:
      Description: !Join
        - ''
        - - 'ARN of RDS cluster secret for '
          - !Ref 'AWS::StackName'
          - ' stack'
      Name: !Join
        - /
        - - /fixengine
          - !Ref 'AWS::StackName'
          - RDSClusterSecretArn
      Tier: Standard
      Type: String
      Value: !Ref 'RDSClusterAdminSecret'
    Type: AWS::SSM::Parameter
  RDSClusterSecurityGroup:
    DependsOn:
      - FargateSecurityGroup
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



cloudformation/FIXEngineVPCApplication.yml [3341:3392]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Metadata:
      cfn_nag:
        rules_to_suppress:
          - id: W5
            reason: Outbound HTTP(S) traffic is required to download third-party dependencies.
    Properties:
      GroupDescription: Security Group for RDS Cluster Prep
      SecurityGroupEgress:
        - CidrIp: '0.0.0.0/0'
          Description: Allow All HTTPS Traffic
          FromPort: 80
          IpProtocol: tcp
          ToPort: 80
        - CidrIp: '0.0.0.0/0'
          Description: Allow All HTTPS Traffic
          FromPort: 443
          IpProtocol: tcp
          ToPort: 443
      VpcId: !Ref 'VPC'
    Type: AWS::EC2::SecurityGroup
  RDSClusterPrepSecurityGroupEgressToRDS:
    DependsOn:
      - RDSClusterSecurityGroup
      - RDSClusterPrepSecurityGroup
    Properties:
      Description: Allow TCP Traffic to RDS MySQL
      DestinationSecurityGroupId: !GetAtt 'RDSClusterSecurityGroup.GroupId'
      FromPort: 3306
      GroupId: !GetAtt 'RDSClusterPrepSecurityGroup.GroupId'
      IpProtocol: tcp
      ToPort: 3306
    Type: AWS::EC2::SecurityGroupEgress
  RDSClusterSecretArnParam:
    Condition: ''
    Properties:
      Description: !Join
        - ''
        - - 'ARN of RDS cluster secret for '
          - !Ref 'AWS::StackName'
          - ' stack'
      Name: !Join
        - /
        - - /fixengine
          - !Ref 'AWS::StackName'
          - RDSClusterSecretArn
      Tier: Standard
      Type: String
      Value: !Ref 'RDSClusterAdminSecret'
    Type: AWS::SSM::Parameter
  RDSClusterSecurityGroup:
    DependsOn:
      - FargateSecurityGroup
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



