From b277e1e69842a53eb5566fc2070326ea2365af38 Mon Sep 17 00:00:00 2001 From: Sean Rankine Date: Tue, 14 Jul 2026 10:36:55 +0100 Subject: [PATCH] Update IP addresses for pen testers --- .../deployments/deploy/engineer-access/roles.tf | 17 ++++++++--------- .../forms/account/tfvars/staging.tfvars | 17 ++++++++--------- infra/deployments/forms/tfvars/staging.tfvars | 17 ++++++++--------- 3 files changed, 24 insertions(+), 27 deletions(-) diff --git a/infra/deployments/deploy/engineer-access/roles.tf b/infra/deployments/deploy/engineer-access/roles.tf index 815cf1200..aabf9f407 100644 --- a/infra/deployments/deploy/engineer-access/roles.tf +++ b/infra/deployments/deploy/engineer-access/roles.tf @@ -22,14 +22,13 @@ module "engineer_access" { "cameron.steel@digital.cabinet-office.gov.uk" ] pentester_cidrs = [ - "88.98.40.224/27", - "172.167.216.147/32", - "3.10.36.101/32", - "35.178.26.242/32", - "18.168.92.160/32", - "18.134.34.111/32", - "13.41.39.172/32", - "20.123.237.233/32", - "88.208.100.190/32" + "172.167.139.53/32", + "172.166.224.184/32", + "172.167.51.76/32", + "4.234.97.14/32", + "20.0.43.178/32", + "4.234.140.58/32", + "51.142.199.225/32", + "20.162.198.121/32" ] } diff --git a/infra/deployments/forms/account/tfvars/staging.tfvars b/infra/deployments/forms/account/tfvars/staging.tfvars index f0b1eb1f3..b3f1d8a69 100644 --- a/infra/deployments/forms/account/tfvars/staging.tfvars +++ b/infra/deployments/forms/account/tfvars/staging.tfvars @@ -13,13 +13,12 @@ pentester_email_addresses = [ "cameron.steel@digital.cabinet-office.gov.uk" ] pentester_cidr_ranges = [ - "88.98.40.224/27", - "172.167.216.147/32", - "3.10.36.101/32", - "35.178.26.242/32", - "18.168.92.160/32", - "18.134.34.111/32", - "13.41.39.172/32", - "20.123.237.233/32", - "88.208.100.190/32" + "172.167.139.53/32", + "172.166.224.184/32", + "172.167.51.76/32", + "4.234.97.14/32", + "20.0.43.178/32", + "4.234.140.58/32", + "51.142.199.225/32", + "20.162.198.121/32" ] diff --git a/infra/deployments/forms/tfvars/staging.tfvars b/infra/deployments/forms/tfvars/staging.tfvars index 6e625f253..36e3e5f36 100644 --- a/infra/deployments/forms/tfvars/staging.tfvars +++ b/infra/deployments/forms/tfvars/staging.tfvars @@ -26,15 +26,14 @@ environmental_settings = { rds_force_ssl_connections = true ips_to_block = [] rate_limit_bypass_cidrs = [ - "88.98.40.224/27", - "172.167.216.147/32", - "3.10.36.101/32", - "35.178.26.242/32", - "18.168.92.160/32", - "18.134.34.111/32", - "13.41.39.172/32", - "20.123.237.233/32", - "88.208.100.190/32" + "172.167.139.53/32", + "172.166.224.184/32", + "172.167.51.76/32", + "4.234.97.14/32", + "20.0.43.178/32", + "4.234.140.58/32", + "51.142.199.225/32", + "20.162.198.121/32" ] enable_shield_advanced_healthchecks = false allow_pagerduty_alerts = false