Add source IP conditions to SSB-services

[rahearn]

Todo:

• Put SourceIP condition on brokerpak-created credentials ttsnotify-brokerpak-sms#3
• bump sms pak version
• Put sourceIP condition on brokerpak-created credentials GSA-TTS/datagov-brokerpak-smtp#25
• bump smtp pak version
• Bump brokerpaks to versions including SourceIP conditions usnotify-ssb#11
• Keep development SES & SNS keys open #225
• wait for authoritative answer on VPN/Zscaler egress IP addresses
• wait for GSA-wide zscaler rollout (should be by end of May)
• lock down development service keys

[rahearn]

Instructions for determining ZScaler egress IPs

[rahearn]

Once zscaler is deployed to all GFE being used on the project, follow the above instructions to use nslookup to determine which set of zscaler egress IPs to default to. Include instructions in the onboarding/setup docs for how any non-GFE can supply their own IP address to override the zscaler list.

[rahearn]

@stvnrlly since this will likely be blocked until after I'm gone, let me know if you have any questions about it

[tdlowden]

This requires rollout of Zscaler in order to pursue.

[tdlowden]

I think we are clear to pursue this now?