/*
resource "random_password" "password" {
  length           = 16
  special          = true
  override_special = "!#$%&*-_=+[]{}<>:?"
}

resource "aws_db_subnet_group" "main" {
  name       = "${local.name_prefix}-db-subnet-group"
  subnet_ids = module.main_private_subnets.subnet_ids
  tags       = local.common_tags
}

resource "aws_db_parameter_group" "main" {
  name   = "${local.name_prefix}-parameter-group"
  family = "postgres11"
}

resource "aws_db_parameter_group" "main_12" {
  name   = "${local.name_prefix}-parameter-group-12"
  family = "postgres12"
}

resource "aws_db_parameter_group" "main_13" {
  name   = "${local.name_prefix}-parameter-group-13"
  family = "postgres13"
}

resource "aws_db_instance" "main" {
  storage_type                    = "gp2"
  instance_class                  = "db.t4g.small"
  identifier                      = "${local.name_prefix}-user-preferences"
  final_snapshot_identifier       = "${local.name_prefix}-user-preferences-final"
  apply_immediately               = true
  db_subnet_group_name            = aws_db_subnet_group.main.id
  parameter_group_name            = aws_db_parameter_group.main_13.name
  option_group_name               = ""
  vpc_security_group_ids          = [module.main_sg_map.rds_id, module.main_sg_map.db_debug_id]
  publicly_accessible             = false
  copy_tags_to_snapshot           = true
  engine_version                  = "13.18"
  allocated_storage               = 20
  deletion_protection             = true
  backup_retention_period         = 7
  auto_minor_version_upgrade      = true
  multi_az                        = true
  enabled_cloudwatch_logs_exports = ["postgresql"]
  snapshot_identifier             = "arn:aws:rds:us-east-1:${local.account_id}:snapshot:${local.name_prefix}-um-instance-final-snapshot"
  storage_encrypted               = true
  kms_key_id                      = data.aws_kms_alias.default_rds.target_key_arn

  tags = merge(
    local.common_tags,
    {
      project                  = "User Preferences",
      service                  = "RDS",
      plat_env_project_service = "${local.aggregated_tag}_UP_RDS"
    }
  )

  lifecycle {
    ignore_changes = [password, snapshot_identifier, engine_version]
  }
}

resource "aws_secretsmanager_secret" "user_preferences_db_cluster_admin" {
  name       = "maintenance/root/${local.secrets_name_prefix}/up_admin"
  kms_key_id = module.kms_secrets_manager.maintenance_root_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}

resource "aws_secretsmanager_secret" "user_preferences_db_database_owner" {
  name       = "maintenance/common/${local.secrets_name_prefix}/up_owner"
  kms_key_id = module.kms_secrets_manager.maintenance_common_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}

resource "aws_secretsmanager_secret" "user_preferences_db_database_user" {
  name       = "${local.secrets_name_prefix}/up/pg/user"
  kms_key_id = module.kms_secrets_manager.general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}

resource "aws_secretsmanager_secret" "user_preferences_db_database_reader" {
  name       = "${local.secrets_name_prefix}/up/pg/reader"
  kms_key_id = module.kms_secrets_manager.general_key.id

  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "Secrets Manager",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
    }
  )
}
*/