From ee9dd86a095b07a3c52c8e9d8ca41a9c59b4a20a Mon Sep 17 00:00:00 2001
From: robertsweetman <robert.sweetman@digital.justice.gov.uk>
Date: Thu, 22 Feb 2024 10:55:36 +0000
Subject: [PATCH] remove migration cutover security group

---
 terraform/environments/planetfm/locals.tf     |  1 -
 .../planetfm/locals_security_groups.tf        | 43 -------------------
 2 files changed, 44 deletions(-)

diff --git a/terraform/environments/planetfm/locals.tf b/terraform/environments/planetfm/locals.tf
index 08d7fcec9d9..357e4208972 100644
--- a/terraform/environments/planetfm/locals.tf
+++ b/terraform/environments/planetfm/locals.tf
@@ -67,7 +67,6 @@ locals {
   }
 
   baseline_security_groups = {
-    migration_cutover         = local.security_groups.migration_cutover
     loadbalancer              = local.security_groups.loadbalancer
     web                       = local.security_groups.web
     app                       = local.security_groups.app
diff --git a/terraform/environments/planetfm/locals_security_groups.tf b/terraform/environments/planetfm/locals_security_groups.tf
index 3274fd809fc..ff465417adc 100644
--- a/terraform/environments/planetfm/locals_security_groups.tf
+++ b/terraform/environments/planetfm/locals_security_groups.tf
@@ -38,49 +38,6 @@ locals {
   security_group_cidrs = local.security_group_cidrs_by_environment[local.environment]
 
   security_groups = {
-    migration_cutover = {
-      description = "Security group for migrated instances"
-      ingress = {
-        all-from-self = {
-          description = "Allow all ingress to self"
-          from_port   = 0
-          to_port     = 0
-          protocol    = -1
-          self        = true
-        }
-        https = {
-          description     = "443: https ingress"
-          from_port       = 443
-          to_port         = 443
-          protocol        = "TCP"
-          cidr_blocks     = ["10.0.0.0/8"]
-          security_groups = []
-        }
-
-        rdp = {
-          description     = "3389: Allow RDP ingress"
-          from_port       = 3389
-          to_port         = 3389
-          protocol        = "TCP"
-          cidr_blocks     = ["10.40.50.128/26", "10.40.50.64/26", "10.40.50.0/26"]
-          security_groups = []
-        }
-      }
-
-
-      egress = {
-        all = {
-          description     = "Allow all egress"
-          from_port       = 0
-          to_port         = 0
-          protocol        = "-1"
-          cidr_blocks     = ["0.0.0.0/0"]
-          security_groups = []
-        }
-      }
-
-
-    }
     loadbalancer = {
       description = "PlanetFM loadbalancer SG"
       ingress = {