data "aws_db_subnet_group" "this" {
  name = "${local.name_prefix}-private-subnet-group"
}

data "aws_kms_alias" "default_rds" {
  name = "alias/default_rds"
}

resource "aws_db_instance" "octopus_db" {
  identifier                = "${local.name_prefix}-octopus-mssql"
  allocated_storage         = 50
  max_allocated_storage     = 200
  backup_retention_period   = 14
  db_subnet_group_name      = data.aws_db_subnet_group.this.id
  license_model             = "license-included"
  storage_type              = "gp2"
  engine                    = "sqlserver-web"
  engine_version            = "14.00.3356.20.v1"
  instance_class            = "db.m5.large"
  copy_tags_to_snapshot     = true
  vpc_security_group_ids    = [aws_security_group.octopus_db.id]
  storage_encrypted         = true
  kms_key_id                = data.aws_kms_alias.default_rds.target_key_arn
  snapshot_identifier       = "arn:aws:rds:us-east-1:483193324480:snapshot:infra-octpous-mssql-premigration-encrypted"
  final_snapshot_identifier = "${local.name_prefix}-octopus-mssql-final-snapshot"
  tags                      = local.infra_rds_tags

  lifecycle {
    ignore_changes = [password]
  }
}