═══════════════════════════════════════════════════════════════════════════
  FINTRIXS - PCI DSS Pregunta 12 (Question 12)
  Evidencia extractada de dispositivos de red equivalentes en cloud
  Generated: 2026-05-26
═══════════════════════════════════════════════════════════════════════════

ARCHIVOS EN ESTE PAQUETE:

1. Security Groups / Cloud Firewalls (DigitalOcean)
   - 01-do-cloud-firewalls.json (raw API response)
   - 01-do-cloud-firewalls-pretty.json (formatted)
   - firewalls-individual/*.json (one file per firewall)

2. VPC Configuration
   - 02-vpcs.json (all VPCs)
   - 02-vpcs-pretty.json (formatted)
   - 03-vpc-members.json (members of PCI VPC)
   - 03-vpc-members-pretty.json (formatted)

3. Load Balancers (network devices)
   - 04-load-balancers.json (raw)
   - 04-load-balancers-pretty.json (formatted)

4. Kubernetes Network Policies (microsegmentation - equivalent to ACLs)
   - 05-k8s-networkpolicies.yaml (12 policies in 4 namespaces)
   - 05-k8s-networkpolicies.json (raw)

═══════════════════════════════════════════════════════════════════════════
RESUMEN EJECUTIVO
═══════════════════════════════════════════════════════════════════════════

VPC PCI DSS:
  Name: fintrix-production-vpc
  UUID: 402acbe1-7336-4fde-ad20-e890013b8214
  CIDR: 10.100.0.0/16
  Region: NYC1
  Members: 6 (1 K8s cluster, 3 droplets, 1 managed DB, 1 bitwarden)

CLOUD FIREWALLS (Security Groups equivalent): 14 total
  - PCI scope (fintrix-*): 7 firewalls
  - K8s managed: 2 firewalls
  - Other services: 5 firewalls

K8s NETWORK POLICIES: 12 policies across 4 namespaces
  - cde namespace (CDE): 6 policies (default-deny + 5 allow rules)
  - app namespace: 5 policies (default-deny + 4 allow rules)
  - monitoring: 1 policy
  - kafka: covered by app/cde policies

LOAD BALANCERS: 2 (DigitalOcean managed)
  - Kong Proxy: 129.212.199.126
  - Kong Admin: 129.212.199.127

═══════════════════════════════════════════════════════════════════════════
