Make cloud deployments secure

[YuryHrytsuk]

Tasks

Preview Give feedback

1. Private EC2 #574
   4 of 6
   EPIC SECURITY p:mid-prio +3
   
2. Review values assigned to APPMOTION_GATEWAY_REVERSE_PROXY_IPS #572
   SECURITY t:enhancement +2
   
3. Review terraform security: Make tfsec pass #269
   0 of 5
   EPIC SECURITY e2e & test p:low-prio t:enhancement +5
4. Security: Autoscaled EC2 instances currently need to be accessible through the internet #195
   8 of 8
   SECURITY blocked / paused p:mid-prio t:infra-ops +4
   
5. Add sudo password to autoscaled machines #673
   5 of 9
   SECURITY +1
   
6. Cloud Security: Enforce 2FA for Users with Console Access #831
   SECURITY +1
   
7. Cloud Security: Make RDS private #832
   2 of 5
   SECURITY +1
   
8. Refactor test docker swarm / test external maintenance page curl tests
9. Support emails configured with AWS SES / Workmail fail to pass SPF Hard Check #898
   SECURITY p:mid-prio +2