NOMIS hmpps-test NACL configuration

[davidkelliott]

User Story

For the hmpps-test VPC, we need to configure the following NACLS:

To allow the data subnet to be able to access the internet to make updates:

• Allow outbound access from the data subnet to the NAT gateway for internet access on ports 80 and 443
• Allow inbound access to the data subnet from the NAT gateway for the ephemeral port ranges 1024-65535

To allow access to the load balancer / app servers from the Global Protect VPN so that users can access the application:

• Allow inbound access to the private subnet from the global protect IP range for all ports (to be restricted once ports known)
• Allow outbound access to the private subnet to the global protect IP range for the ephemeral port ranges 1024-65535

Value

Allow users to access the application via private routes and allow the database to make yum updates.

Questions / Assumptions

Definition of done

• [x] NACL changes made
• [x] another team member has reviewed
• [ ] connectivity has been tested

Reference

How to write good user stories

[davidkelliott]

https://github.com/ministryofjustice/modernisation-platform/pull/1237

[davidkelliott]

This has been completed