moved {
  from = module.dapd_apollo_sync_service
  to   = module.dapd_apollo_sync_flow
}

module "dapd_apollo_sync_flow" {
  source               = "../../modules/dapd_apollo_sync_flow"
  docker_image_env_tag = local.docker_image_env_tag[local.env_prefix]
  env                  = local.env_prefix

  name_prefix        = local.name_prefix
  secrets_env        = local.secrets_name_prefix
  secrets_kms_key_id = data.aws_kms_key.secrets_general_key.id

  tag_plat_env_project = "${local.aggregated_tag}_DAPD"
  tags                 = merge(local.common_tags, { project = "DAPD" })

  batch_queue_arn = data.aws_batch_job_queue.slz_downloader_main.arn

  batch_role_policies = [
    data.aws_iam_policy.logging.arn,
    data.aws_iam_policy.secrets-services-ro.arn,
    module.iam_map.s3_env_rw.arn,
  ]

  sf_role_policy_list = [
    module.iam_map.lambda_invoke.arn,
    data.aws_iam_policy.logging.arn,
    data.aws_iam_policy.secrets-services-ro.arn,
    module.iam_map.s3_env_ro.arn,
    module.iam_map.batch_jobs_sync.arn,
  ]

  vpc_lambda_sg_ids     = [data.aws_security_group.lambda.id]
  vpc_lambda_subnet_ids = data.aws_subnets.private_subnets.ids

  lambda_logs_retention = 365

  finalizer_lambda_env_vars = {
    DD_API_KEY_SECRET_ARN     = aws_secretsmanager_secret.common_env_secrets["common/DD_API_KEY"].arn
    DELPHI_SLZ_DB_CREDENTIALS = "${local.secrets_name_prefix}/slz/storage/pg_proxy/user"
  }

  finalizer_lambda_role_policies = [
    data.aws_iam_policy.logging.arn,
    data.aws_iam_policy.secrets-services-ro.arn,
    module.iam_map.s3_env_rw.arn,
  ]

  finalizer_deploy = true

  providers = {
    aws.ecr = aws.gdb-delphi-dev
  }
}