/*
module "email_assets_s3" {
  source             = "../../../modules/s3/private_bucket_with_logs_aes256"
  bucket_name        = "${local.env_prefix}-rti-email-assets"
  logs_bucket_id     = data.aws_s3_bucket.security_logs.id
  logs_object_prefix = "${local.env_prefix}-rti/email-assets/"

  common_tags = merge(
    local.common_tags,
    {
      project                  = "API",
      service                  = "S3",
      plat_env_project_service = "${local.aggregated_tag}_API_S3"
    }
  )
}

module "email_assets_bucket_default_policy_document" {
  source              = "../../../modules/s3/bucket_policies/default_policy_template"
  template_bucket_arn = module.email_assets_s3.bucket.arn
}

data "aws_iam_policy_document" "email_assets_bucket_policy_doc" {
  version   = "2012-10-17"
  policy_id = "CloudFrontRO"

  source_policy_documents = [module.email_assets_bucket_default_policy_document.document.json]

  statement {
    sid       = "CloudFrontRO"
    effect    = "Allow"
    actions   = ["s3:GetObject"]
    resources = ["${module.email_assets_s3.bucket.arn}/*"]

    principals {
      identifiers = [aws_cloudfront_origin_access_identity.email_assets_access_identity.iam_arn]
      type        = "AWS"
    }
  }
}

resource "aws_s3_bucket_policy" "email_assets_bucket_policy" {
  bucket = module.email_assets_s3.bucket.id
  policy = data.aws_iam_policy_document.email_assets_bucket_policy_doc.json
}

module "rti_notifications_bucket" {
  source = "../../../modules/s3/private_bucket_with_logs_aes256"

  bucket_name        = "${local.name_prefix}-notifications"
  logs_bucket_id     = data.aws_s3_bucket.security_logs.id
  logs_object_prefix = "${local.name_prefix}/notifications/"
  default_policy     = true

  common_tags = merge(
    local.common_tags,
    {
      project                  = "User Preferences",
      service                  = "S3",
      plat_env_project_service = "${local.aggregated_tag}_UP_S3"
    }
  )
}

resource "aws_s3_bucket_notification" "rti_notifications_bucket_notifications" {
  bucket = module.rti_notifications_bucket.bucket.id

  queue {
    queue_arn = module.notifications_queue.queue.arn
    events    = ["s3:ObjectCreated:*"]
  }
}

module "rti_notifications_bucket_ro_policy" {
  source       = "../../../modules/iam/policies/s3/buckets_ro"
  bucket_masks = [module.rti_notifications_bucket.bucket.id]
  name         = "notifications-s3-ro"
  name_prefix  = local.name_prefix
}
*/