provider "aws" {
  region = var.aws_region
}

terraform {
  backend "s3" {
    bucket  = "dev-orcd-terraform-state"
    key     = "dev/iam/users/dummy/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

resource "aws_iam_user" "user" {
  name          = local.user_name
  force_destroy = true
  tags          = local.tags
}

resource "aws_iam_access_key" "user_access_key" {
  user = aws_iam_user.user.name
}

data "aws_iam_policy" "existing_policies" {
  for_each = toset(var.existing_policies_to_attach)

  name = each.value
}

resource "aws_iam_user_policy_attachment" "user_policy_attachments" {
  for_each = toset(var.existing_policies_to_attach)

  user       = aws_iam_user.user.name
  policy_arn = data.aws_iam_policy.existing_policies[each.value].arn
}