Warning

[Medium Risk] Narrowing internal-services ingress to 10.0.0.0/16 will block cross-network health checks, HTTPS, and metrics traffic

The internal-services security group 540044833068.eu-west-2.ec2-security-group.sg-089e5107637083db5 is narrowing ingress on 8080, 443, and 9090 from 10.0.0.0/8 to 10.0.0.0/16. The current VPC itself is 10.0.0.0/16, so this change stops all traffic from other private 10.x.x.x networks outside this VPC, including peered VPCs, hybrid links, and other environments that previously matched the broader rule.

Because this group is explicitly used for internal service mesh, monitoring, and health checks, the new CIDR will block legitimate health probes, internal HTTPS calls, and Prometheus scrapes from any non-local 10/8 source. That will cause service reachability regressions and observability gaps immediately after rollout.
_{View reasoning tree here.}