module "logs_forwarder_role" {
  source = "../../../modules/iam/roles/lambda_role"

  name_prefix                = local.name_prefix
  name                       = "logs_forwarder_role"
  allow_execution_inside_vpc = true

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Portal",
      service                  = "Lambda",
      plat_env_project_service = "${local.aggregated_tag}_PRL_LMB"
    }
  )

  policies_list = [
    data.aws_iam_policy.secrets_services_ro.arn,
    data.aws_iam_policy.logging_policy.arn,
  ]
}

#data "aws_lambda_function" "logs_forwarder_lambda" {
#  function_name = "logs-forwarder-${local.env_prefix}"
#}
#
#resource "aws_lambda_permission" "logs_forwarder_lambda_permissions" {
#  action        = "lambda:InvokeFunction"
#  function_name = data.aws_lambda_function.logs_forwarder_lambda.function_name
#  principal     = "logs.${var.aws_region_id}.amazonaws.com"
#}
#
#resource "aws_cloudwatch_log_subscription_filter" "atlas_um_audit_admin" {
#  destination_arn = data.aws_lambda_function.logs_forwarder_lambda.arn
#  filter_pattern  = "{ $.logger = \"audit.admin\" }"
#  log_group_name  = "/ecs/${local.name_prefix}-atlas-um"
#  name            = "audit.admin"
#
#  depends_on = [
#    aws_lambda_permission.logs_forwarder_lambda_permissions
#  ]
#}
#
#resource "aws_cloudwatch_log_subscription_filter" "atlas_um_audit_user" {
#  destination_arn = data.aws_lambda_function.logs_forwarder_lambda.arn
#  filter_pattern  = "{ $.logger = \"audit.user\" }"
#  log_group_name  = "/ecs/${local.name_prefix}-atlas-um"
#  name            = "audit.user"
#
#  depends_on = [
#    aws_lambda_permission.logs_forwarder_lambda_permissions
#  ]
#}