data "aws_caller_identity" "current" {}

data "aws_iam_account_alias" "current" {}

data "aws_iam_role" "standard_exec" {
  name = "${local.env_prefix}-${local.project_group}-ecs-task_execution_role"
}

data "aws_iam_policy" "secrets_services_ro" {
  arn = "${local.policy_base_arn}-secrets-services-ro"
}

data "aws_iam_policy" "secrets_deployment_ro" {
  arn = "${local.policy_base_arn}-secrets-deployment-ro"
}

data "aws_iam_policy" "logging_policy" {
  arn = "${local.policy_base_arn}-logging"
}
/*
data "aws_iam_policy_document" "cloudfront_cache_invalidate_policy_doc" {
  statement {
    effect    = "Allow"
    resources = [aws_cloudfront_distribution.images_api.arn]
    actions   = ["cloudfront:CreateInvalidation"]
  }
}

resource "aws_iam_policy" "cloudfront_cache_invalidate_policy" {
  name        = "${local.name_prefix}-images-api-cache-invalidation"
  description = "Allow CloudFront cache invalidation."
  policy      = data.aws_iam_policy_document.cloudfront_cache_invalidate_policy_doc.json
}
*/
module "images_api_uploads_bucket_rw" {
  source = "../../../../modules/iam/policies/s3/buckets_rw"

  bucket_masks = [module.images_api_uploaded_files.bucket.bucket]
  name         = "images-api-uploads-rw"
  name_prefix  = local.name_prefix
}