provider "aws" {
  profile = var.aws_profile
  region  = var.aws_region_id

}

locals {
  env_prefix          = lower(var.platform.prefix)
  project_group       = lower(var.platform.name)
  name_prefix         = "${local.env_prefix}-${local.project_group}"
  account_id          = data.aws_caller_identity.current.account_id
  secrets_name_prefix = "${local.project_group}/${local.env_prefix}"
  buckets_prefix      = "${local.env_prefix}-crm"
  aggregated_tag      = "${var.platform.short_platform_name}_${upper(var.platform.prefix)}"
  policy_base_arn     = "arn:aws:iam::${local.account_id}:policy/${local.name_prefix}"

  common_tags = {
    platform           = var.platform["name"]
    environment        = var.platform["environment"]
    platform_with_env  = "${var.platform["name"]} ${var.platform["environment"]}"
    managed_by         = "Terraform"
    application_family = "salesforce-business-systems"
  }

  docker_image_env_tag = {
    dev   = "develop",
    qa    = "qa",
    stage = "release",
    uat   = "uat",
    prod  = "production",
  }
}

data "aws_caller_identity" "current" {}

data "aws_vpc" "main" {
  tags = {
    Name = "${local.env_prefix}-${local.project_group}-vpc"
  }
}

data "aws_subnets" "public_subnets" {
  filter {
    name   = "vpc-id"
    values = [data.aws_vpc.main.id]
  }

  tags = {
    Name = "${local.env_prefix}-${local.project_group}-subnet-public-0*"
  }
}

data "aws_subnets" "private_subnets" {
  filter {
    name   = "vpc-id"
    values = [data.aws_vpc.main.id]
  }

  tags = {
    Name = "${local.env_prefix}-${local.project_group}-subnet-private-0*"
  }
}

data "aws_security_group" "main" {
  tags = {
    Name = "${local.env_prefix}-${local.project_group}-sg-ecs"
  }
}

data "aws_iam_role" "standard_exec" {
  name = "${local.env_prefix}-${local.project_group}-ecs_task_execution_role"
}

data "aws_ecs_cluster" "main" {
  cluster_name = "${local.env_prefix}-${local.project_group}-clu"
}

data "aws_iam_policy" "secrets-services-ro" {
  arn = "${local.policy_base_arn}-secrets-services-ro"
}

data "aws_iam_policy" "secrets-services-rw" {
  arn = "${local.policy_base_arn}-secrets-services-rw"
}

data "aws_iam_policy" "logging" {
  arn = "${local.policy_base_arn}-logging"
}

resource "aws_cloudwatch_log_group" "datadog-agent" {
  name = "/ecs/${local.name_prefix}-datadog-agent"
  tags = merge(
    local.common_tags,
    {
      project                  = "Infrastructure",
      service                  = "ECS",
      plat_env_project_service = "${local.aggregated_tag}_INFRA_ECS"
    }
  )
}

data "aws_lb" "internal_alb" {
  name = "${local.env_prefix}-${local.project_group}-alb-internal"
}

data "aws_lb_listener" "internal_https_listener" {
  load_balancer_arn = data.aws_lb.internal_alb.arn
  port              = 443
}

data "aws_lb_listener" "internal_http_listener" {
  load_balancer_arn = data.aws_lb.internal_alb.arn
  port              = 80
}

data "aws_route53_zone" "default" {
  name         = "crm.delphiplatform.io."
  private_zone = false
}

# Account main log bucket
data "aws_s3_bucket" "logs" {
  bucket = "security-${data.aws_caller_identity.current.account_id}-logs"
}

/* data "aws_ecr_repository" "datadog_agent" {
  name = "datadog/agent"
} */

module "aws_accounts_list" {
  source = "../../../modules/iam/aws_accounts_list"
}

data "aws_kms_key" "secrets_general_key" {
  key_id = "alias/${local.env_prefix}/${local.project_group}/secrets_general"
}