{
  "name": "security",
  "title": "Security",
  "description": "The servers and firewalls by site and subnet, every flow split at the devices it traverses.",
  "formats": [
    "svg"
  ],
  "declared": "views.cav:95:6",
  "nodes": [
    {
      "id": "aws-paris.prod.dmz.web01",
      "kind": "server",
      "label": "web01",
      "frame": "aws-paris.prod.dmz"
    },
    {
      "id": "aws-paris.prod.dmz.web02",
      "kind": "server",
      "label": "web02",
      "frame": "aws-paris.prod.dmz"
    },
    {
      "id": "aws-paris.prod.db.db01",
      "kind": "server",
      "label": "db01",
      "frame": "aws-paris.prod.db"
    },
    {
      "id": "paris-dc1.fw01",
      "kind": "firewall",
      "label": "fw01",
      "frame": "paris-dc1"
    },
    {
      "id": "paris-dc1.lan.erp.erp01",
      "kind": "server",
      "label": "erp01",
      "frame": "paris-dc1.lan.erp"
    }
  ],
  "frames": [
    {
      "id": "aws-paris",
      "title": "aws-paris",
      "resource": "aws-paris",
      "in": null
    },
    {
      "id": "aws-paris.prod.dmz",
      "title": "dmz",
      "resource": "aws-paris.prod.dmz",
      "in": "aws-paris"
    },
    {
      "id": "aws-paris.prod.db",
      "title": "db",
      "resource": "aws-paris.prod.db",
      "in": "aws-paris"
    },
    {
      "id": "paris-dc1",
      "title": "paris-dc1",
      "resource": "paris-dc1",
      "in": null
    },
    {
      "id": "paris-dc1.lan.erp",
      "title": "erp",
      "resource": "paris-dc1.lan.erp",
      "in": "paris-dc1"
    }
  ],
  "edges": [
    {
      "source": "aws-paris.prod.dmz.web02",
      "target": "aws-paris.prod.dmz.web01",
      "relation": null,
      "ports": [
        "https/443"
      ],
      "layers": [
        "flow"
      ],
      "carries": [
        "customer"
      ],
      "through": [],
      "through_steps": [],
      "step": null
    },
    {
      "source": "aws-paris.prod.dmz.web01",
      "target": "paris-dc1.fw01",
      "relation": null,
      "ports": [
        "tcp/1521"
      ],
      "layers": [
        "flow"
      ],
      "carries": [
        "invoice"
      ],
      "through": [
        "paris-dc1.fw01",
        "paris-aws-1"
      ],
      "through_steps": [
        [
          "paris-aws-1"
        ],
        [
          "paris-dc1.fw01"
        ]
      ],
      "step": null
    },
    {
      "source": "paris-dc1.fw01",
      "target": "paris-dc1.lan.erp.erp01",
      "relation": null,
      "ports": [
        "tcp/1521"
      ],
      "layers": [
        "flow"
      ],
      "carries": [
        "invoice"
      ],
      "through": [
        "paris-dc1.fw01",
        "paris-aws-1"
      ],
      "through_steps": [
        [
          "paris-aws-1"
        ],
        [
          "paris-dc1.fw01"
        ]
      ],
      "step": null
    },
    {
      "source": "aws-paris.prod.dmz.web02",
      "target": "paris-dc1.fw01",
      "relation": null,
      "ports": [
        "tcp/1521"
      ],
      "layers": [
        "flow"
      ],
      "carries": [
        "invoice"
      ],
      "through": [
        "paris-dc1.fw01",
        "paris-aws-1"
      ],
      "through_steps": [
        [
          "paris-aws-1"
        ],
        [
          "paris-dc1.fw01"
        ]
      ],
      "step": null
    },
    {
      "source": "aws-paris.prod.dmz.web01",
      "target": "aws-paris.prod.db.db01",
      "relation": null,
      "ports": [
        "tcp/5432"
      ],
      "layers": [
        "flow"
      ],
      "carries": [
        "customer",
        "invoice"
      ],
      "through": [],
      "through_steps": [],
      "step": null
    }
  ],
  "diagnostics": [
    {
      "severity": "warning",
      "message": "view security: edge invoicing.billing -> stripe : https/443 dropped, stripe is neither selected nor liftable via on",
      "help": null
    },
    {
      "severity": "warning",
      "message": "view security: edge invoicing.billing -> invoicing.analytics : tcp/5432 dropped, invoicing.analytics is neither selected nor liftable via on",
      "help": null
    }
  ]
}