# resource "aws_iam_role" "ecs_tasks_execution_role" {
#   name = "${local.name_prefix}-ecs_tasks_execution"
#
#   assume_role_policy = <<POLICY
# {
#   "Version": "2012-10-17",
#   "Statement": [
#     {
#       "Action": "sts:AssumeRole",
#       "Principal": {
#         "Service": "ecs-tasks.amazonaws.com"
#       },
#       "Effect": "Allow",
#       "Sid": ""
#     }
#   ]
# }
# POLICY
#   tags = merge(
#     local.common_tags,
#     {
#       project                  = "Infrastructure",
#       service                  = "IAM",
#       plat_env_project_service = "${local.aggregated_tag}_INFRA_IAM"
#     }
#   )
# }
#
# resource "aws_iam_role_policy_attachment" "ecs_tasks_execution_role_policy_attachment" {
#   role       = aws_iam_role.ecs_tasks_execution_role.id
#   policy_arn = "arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy"
# }
#
# resource "aws_iam_role_policy_attachment" "secrets_ro_policy_attachment" {
#   role       = aws_iam_role.ecs_tasks_execution_role.id
#   policy_arn = module.kms_secrets_manager.secrets_services_ro_policy.arn
# }
#
# module "images_mapping_bucket_iam_ro_policy" {
#   source = "../../../modules/iam/policies/s3/buckets_ro"
#
#   name        = "images-mapping-ro"
#   name_prefix = local.name_prefix
#   bucket_masks = [
#     "prod-core-images-mapping"
#   ]
# }
#
# module "logging_policy" {
#   source      = "../../../modules/iam/policies/logging"
#   name_prefix = local.name_prefix
# }
#
# module "cross_account_notifications_role" {
#   source      = "../../../modules/iam/roles/cross_account_role"
#   name        = "${local.name_prefix}-cross_account_notifications_role"
#   common_tags = local.common_tags
#   require_mfa = false
#   principal_list = [
#     format("arn:aws:iam::%s:role/${var.platform["prefix"]}-delphi-dae-s3-consumer-events-distribution-lambda-role", module.aws_accounts_list.accounts["gdb-delphi-dev"]),
#   ]
#   policies_list = [
#     module.notifications_s3_rw_policy.policy.arn,
#     module.notifications_delphi_s3_ro_policy.policy.arn,
#   ]
# }
#
# module "notifications_s3_rw_policy" {
#   source = "../../../modules/iam/policies/s3/buckets_rw"
#
#   name        = "s3-crossaccount-notifications-rw"
#   name_prefix = local.name_prefix
#
#   bucket_masks = [
#     module.rti_notifications_bucket.bucket.id,
#   ]
# }
#
# module "notifications_delphi_s3_ro_policy" {
#   source      = "../../../modules/iam/policies/s3/buckets_ro"
#   name        = "s3-delphi-notifications-ro"
#   name_prefix = local.name_prefix
#
#   bucket_masks = [
#     "${local.env_prefix}-delphi-notifications"
#   ]
# }