rm critical rule, add logging to remaining fw-rules

[OldPatrick]

DSDE-347: add fw rule logging / rm critical fw rule

Goal

From the JIRA-Ticket:

I want to

a) add default firewall rule logging to a terraform template of cloud foundation

b) remove fw-allow-all-iap rule as it opens up all ports and is flagged by GCP projects in general

In order to:

for a) do not need to care for our own vpc Infrastructure but do not suffer from “Medium”GCP vulnerabilities due to missing logging in several projects

for b) do not suffer from “High” GCP vulnerabilities due to open ports

Since the fw rules will always be updated, when we update our tf template, and we do that quite often recently, we want to have a universal solution, so that we do not need to turn on logging manually for fw rules every time we push a new template

Key takeaways (max 3):

• fw rules have logging activated by default (solving medium vulnerabilities in GCP)
• deleted fw rule with all open ports for iap (solving high vulnerability in GCP)