locals {
  region     = data.aws_region.current.region
  account_id = data.aws_caller_identity.current.account_id
}

data "aws_region" "current" {}

data "aws_caller_identity" "current" {}

data "aws_kms_alias" "default_ssm_key" {
  name = "alias/aws/ssm"
}

data "aws_iam_policy_document" "combined" {
  source_policy_documents = [
    data.aws_iam_policy_document.cloudfront_deployment_policy.json,
    data.aws_iam_policy_document.ecs_deployment_policy.json,
    data.aws_iam_policy_document.lambda_deployment_policy.json,
    data.aws_iam_policy_document.ssm_parameter_store_access_policy.json,
    data.aws_iam_policy_document.step_functions_deployment_policy.json
  ]
}

resource "aws_iam_policy" "combined_deployment_policy" {
  name   = "${var.name_prefix}-deployment_policy"
  policy = data.aws_iam_policy_document.combined.json
}