Initial Commit

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2017 Abhay Rana
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,38 @@
+# terraform-http-duo-whitelist ![](https://img.shields.io/badge/license-MIT-blue.svg)
+
+This module provides an updated list of Duo's public CIDRs. These are maintained against the Duo Documentation: https://help.duo.com/s/article/1337
+
+# Usage
+
+```hcl
+module "duo-whitelist" {
+  source  = "captn3m0/duo-whitelist/http"
+  version = "1.0.0"
+}
+
+resource "aws_security_group_rule" "allow_all_to_duo" {
+  type            = "egress"
+  from_port       = 0
+  to_port         = 443
+  protocol        = "tcp"
+  cidr_blocks     = ["${module.duo-whitelist.cidr}"]
+  security_group_id = "sg-123456"
+}
+```
+
+# Outputs
+
+The following outputs are exported:
+
+## cidrs
+
+Description: List of all Duo Service CIDRs. Whitelist for egress
+
+## trusted\_endpoints\_cidrs
+
+Description: Duo's Trusted Endpoint CIDRs. Whitelist for ingress
+
+
+# LICENSE
+
+Licensed under MIT. See [nemo.mit-license.org](https://nemo.mit-license.org/) for complete text.

main.tf

@@ -0,0 +1 @@
+

outputs.tf

@@ -0,0 +1,24 @@
+output "cidrs" {
+  description = "List of all Duo Service CIDRs. Whitelist for egress"
+
+  value = [
+    "54.241.191.128/26",
+    "54.236.251.192/26",
+    "52.19.127.192/26",
+    "52.32.63.128/26",
+    "52.59.243.192/26",
+    "35.182.14.128/26",
+  ]
+}
+
+output "trusted_endpoints_cidrs" {
+  description = "List of Duo's Trusted Endpoint CIDRs. Whitelist for ingress"
+
+  value = [
+    "13.56.32.240/29",
+    "52.32.63.176/30",
+    "52.19.127.200/30",
+    "52.59.243.200/30",
+    "35.182.14.128/30",
+  ]
+}

variables.tf

@@ -0,0 +1 @@
+