# roles for writing the secret
module "dev_role" {
  source = "./modules/env_role"
  env    = "dev"
  external_accounts = [
    { account_id = module.aws_accounts_map.gdb_accounts["gdb-${local.project_group}-prod"], iam_entity = "role/${module.lambda_role.role.name}" },
  ]
  providers = {
    aws = aws.gdb-delphi-dev
  }
}

module "qa_role" {
  source = "./modules/env_role"
  env    = "qa"
  external_accounts = [
    { account_id = module.aws_accounts_map.gdb_accounts["gdb-${local.project_group}-prod"], iam_entity = "role/${module.lambda_role.role.name}" },
  ]
  providers = {
    aws = aws.gdb-delphi-dev
  }
}

module "stage_role" {
  source = "./modules/env_role"
  env    = "stage"
  external_accounts = [
    { account_id = module.aws_accounts_map.gdb_accounts["gdb-${local.project_group}-prod"], iam_entity = "role/${module.lambda_role.role.name}" },
  ]
  providers = {
    aws = aws.gdb-delphi-dev
  }
}

module "prod_role" {
  source = "./modules/env_role"
  env    = "prod"
  external_accounts = [
    { account_id = module.aws_accounts_map.gdb_accounts["gdb-${local.project_group}-prod"], iam_entity = "role/${module.lambda_role.role.name}" },
  ]
}