locals {
  policies_list = [
    "${local.name_prefix}-es-rw-access",
    "${local.name_prefix}-secrets-services-ro",
    "${local.name_prefix}-logging",
    "${local.name_prefix}-dynamodb_ro",
    "stage-delphi-secrets-services-ro",
    "cmn-delphi-ssm_ecs_exec_policy",
  ]
}

data "aws_iam_policy" "api_policies" {
  count = length(local.policies_list)
  name  = local.policies_list[count.index]
}

module "api_role" {
  source              = "../../../modules/iam/roles/ecs_task_role"
  enable_default_role = false
  name_prefix         = local.name_prefix
  name                = "api_role"
  policies_list       = data.aws_iam_policy.api_policies[*].arn
  common_tags = merge(
    local.common_tags,
    {
      project                  = "Apps API",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_APPA_ECS"
    }
  )
}