module "decibel_x_ref_role" {
  source = "../../../modules/iam/roles/lambda_role"

  name_prefix                = local.name_prefix
  name                       = "x-ref-role"
  allow_execution_inside_vpc = true

  policies_list = [
    data.aws_iam_policy.secrets-services-ro.arn,
    data.aws_iam_policy.logging.arn,
  ]

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Decibel",
      service                  = "Lambda",
      plat_env_project_service = "${local.aggregated_tag}_DCBL_LMB"
    }
  )
}

module "decibel_snowflake_etl_role" {
  source = "../../../modules/iam/roles/lambda_role"

  name_prefix                = local.name_prefix
  name                       = "snowflake-etl-role"
  allow_execution_inside_vpc = true

  policies_list = [
    data.aws_iam_policy.secrets-services-ro.arn,
    data.aws_iam_policy.logging.arn,
  ]

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Decibel",
      service                  = "Lambda",
      plat_env_project_service = "${local.aggregated_tag}_DCBL_LMB"
    }
  )
}

module "decibel_s3_to_postgres_role" {
  source = "../../../modules/iam/roles/lambda_role"

  name_prefix                = local.name_prefix
  name                       = "s3-to-postgres-role"
  allow_execution_inside_vpc = true

  policies_list = [
    data.aws_iam_policy.secrets-services-ro.arn,
    data.aws_iam_policy.logging.arn,
  ]

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Decibel",
      service                  = "Lambda",
      plat_env_project_service = "${local.aggregated_tag}_DCBL_LMB"
    }
  )
}

module "decibel_snowflake_to_s3_role" {
  source = "../../../modules/iam/roles/lambda_role"

  name_prefix                = local.name_prefix
  name                       = "snowflake-to-s3-role"
  allow_execution_inside_vpc = true

  policies_list = [
    data.aws_iam_policy.secrets-services-ro.arn,
    data.aws_iam_policy.logging.arn,
  ]

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Decibel",
      service                  = "Lambda",
      plat_env_project_service = "${local.aggregated_tag}_DCBL_LMB"
    }
  )
}

module "decibel_update_status_role" {
  source = "../../../modules/iam/roles/lambda_role"

  name_prefix                = local.name_prefix
  name                       = "update-status-role"
  allow_execution_inside_vpc = true

  policies_list = [
    data.aws_iam_policy.secrets-services-ro.arn,
    data.aws_iam_policy.logging.arn,
  ]

  common_tags = merge(
    local.common_tags,
    {
      project                  = "Decibel",
      service                  = "Lambda",
      plat_env_project_service = "${local.aggregated_tag}_DCBL_LMB"
    }
  )
}
