module "isnt_access_role" {
  source            = "../../../modules/iam/roles/client_role"
  name              = "${local.name_prefix}-isnt_access_role"
  client_account_id = local.account_id
  common_tags = merge(
    local.common_tags,
    {
      service                  = "IAM",
      plat_env_project_service = "${local.aggregated_tag}_IAM"
    }
  )
  policies_list = [
    module.isnt_access_policy.policy.arn
  ]
}

module "isnt_access_policy" {
  source      = "../../../modules/iam/policies/s3/buckets_rw"
  name        = "isnt_access_policy"
  name_prefix = local.name_prefix
  bucket_masks = [
    "sme.max.prod.dataload",
    "*-sme-data-*",
    "*-delphi-*",
  ]
}