# resource "random_password" "password" {
#   length           = 16
#   special          = true
#   override_special = "!#$%&*-_=+[]{}<>:?"
# }
#
# resource "aws_db_subnet_group" "main" {
#   name       = "${local.name_prefix}-db-subnet-group"
#   subnet_ids = module.main_private_subnets.subnet_ids
#   tags       = local.common_tags
# }
#
# resource "aws_db_parameter_group" "main" {
#   name   = "${local.name_prefix}-parameter-group"
#   family = "postgres11"
# }
/*
resource "aws_db_instance" "main" {
  storage_type                    = "gp2"
  instance_class                  = "db.t3.small"
  identifier                      = "${local.name_prefix}-user-preferences"
  final_snapshot_identifier       = "${local.name_prefix}-user-preferences-final"
  apply_immediately               = true
  db_subnet_group_name            = aws_db_subnet_group.main.id
  parameter_group_name            = aws_db_parameter_group.main.name
  option_group_name               = ""
  vpc_security_group_ids          = [module.main_sg_map.rds_id, module.main_sg_map.db_debug_id]
  publicly_accessible             = false
  copy_tags_to_snapshot           = true
  engine_version                  = "11.15"
  allocated_storage               = 20
  engine                          = "postgres"
  deletion_protection             = false
  backup_retention_period         = 7
  auto_minor_version_upgrade      = true
  enabled_cloudwatch_logs_exports = ["postgresql"]
  snapshot_identifier             = "arn:aws:rds:us-east-1:714609459574:snapshot:${local.name_prefix}-user-preferences-final-snapshot"
  storage_encrypted               = true
  kms_key_id                      = data.aws_kms_alias.default_rds.target_key_arn

  tags = merge(
    local.common_tags,
    {
      project                  = "User Preferences",
      service                  = "RDS",
      plat_env_project_service = "${local.aggregated_tag}_UP_RDS"
    }
  )

  lifecycle {
    ignore_changes = [password, snapshot_identifier, engine_version]
  }
}
*/

# resource "aws_secretsmanager_secret" "user_preferences_db_cluster_admin" {
#   name       = "maintenance/root/${local.secrets_name_prefix}/up_admin"
#   kms_key_id = module.kms_secrets_manager.maintenance_root_key.id
#
#   tags = merge(
#     local.common_tags,
#     {
#       project                  = "Infrastructure",
#       service                  = "Secrets Manager",
#       plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
#     }
#   )
# }
#
# resource "aws_secretsmanager_secret" "user_preferences_db_database_owner" {
#   name       = "maintenance/common/${local.secrets_name_prefix}/up_owner"
#   kms_key_id = module.kms_secrets_manager.maintenance_common_key.id
#
#   tags = merge(
#     local.common_tags,
#     {
#       project                  = "Infrastructure",
#       service                  = "Secrets Manager",
#       plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
#     }
#   )
# }
#
# resource "aws_secretsmanager_secret" "user_preferences_db_database_user" {
#   name       = "${local.secrets_name_prefix}/up/pg/user"
#   kms_key_id = module.kms_secrets_manager.general_key.id
#
#   tags = merge(
#     local.common_tags,
#     {
#       project                  = "Infrastructure",
#       service                  = "Secrets Manager",
#       plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
#     }
#   )
# }
#
# resource "aws_secretsmanager_secret" "user_preferences_db_database_reader" {
#   name       = "${local.secrets_name_prefix}/up/pg/reader"
#   kms_key_id = module.kms_secrets_manager.general_key.id
#
#   tags = merge(
#     local.common_tags,
#     {
#       project                  = "Infrastructure",
#       service                  = "Secrets Manager",
#       plat_env_project_service = "${local.aggregated_tag}_INFRA_SCRT"
#     }
#   )
# }