resource "aws_iam_policy" "dynamo_db_read_only" {
  name        = "${var.name_prefix}-dynamodb-ro"
  path        = "/"
  description = "${var.name_prefix} dynamodb read access."

  policy = templatefile("${path.module}/read_only_policy.json.tmpl", { region_id = var.region_id, name_prefix = var.name_prefix })
}

resource "aws_iam_policy" "dynamo_db_read_write" {
  name        = "${var.name_prefix}-dynamodb-rw"
  path        = "/"
  description = "${var.name_prefix} dynamodb write access."

  policy = templatefile("${path.module}/read_write_policy.json.tmpl", { region_id = var.region_id, name_prefix = var.name_prefix })
}