Sovereign VirtualPrivate Cloud.Zero EgressPenalties.

# Terraform HCL snippet for DataDack Sovereign VPC
resource "datadack_vpc" "prod" {
  name        = "vpc-noida-production"
  cidr_block  = "10.100.0.0/16"
  region      = "ap-south-3" # Noida Tier-IV Facility
  mtu         = 1500
  description = "Production sovereign network perimeter"
}

resource "datadack_subnet" "public_dmz" {
  vpc_id            = datadack_vpc.prod.id
  name              = "public-dmz-01"
  cidr_block        = "10.100.1.0/24"
  type              = "public"
  enable_nat        = true
}

resource "datadack_subnet" "private_app" {
  vpc_id            = datadack_vpc.prod.id
  name              = "private-app-02"
  cidr_block        = "10.100.2.0/24"
  type              = "private"
  nat_gateway_id    = datadack_subnet.public_dmz.nat_gateway_id
}

resource "datadack_security_group" "app_sg" {
  vpc_id      = datadack_vpc.prod.id
  name        = "sg-app-internal-only"
  description = "Allow inbound HTTP/gRPC only from Public DMZ"
  ingress {
    protocol    = "tcp"
    ports       = ["8000", "8080"]
    cidr_blocks = ["10.100.1.0/24"]
  }
}