resource "aws_iam_role_policy_attachment" "attachments" {
  for_each = toset([
    data.aws_iam_policy.secrets-services-ro.arn,
    data.aws_iam_policy.logging.arn,
    aws_iam_policy.ses_sender_policy.arn,
    module.s3_env_rw.policy.arn,
  ])
  role       = "cross_account_deployment_role"
  policy_arn = each.value
}