ArticCon 2022 (continued)

same thing for firewalls

export type Fw = {
  allow: boolean;
  name: string;
  priority: number;
  protocol: string;
  sourceRanges?: string[];
  sourceNetworks?: PartialRecord<Vpcs, Subnets>;
  port?: number;
};

type FwDefinition = { ingress: Fw[]; egress: Fw[] };

export type Firewall = Record<Vpcs, FwDefinition>;

export const firewall: Firewall = {
  management: {
    ingress: [
      {
        name: 'ping',
        allow: true,
        priority: 1000,
        protocol: 'icmp',
        sourceNetworks: { infra: 'app' },
      },
[snip]