terraform {
  backend "s3" {
    bucket                  = "gdb-whitelist-legacy-tfstate"
    key                     = "Security/security.tfstate"
    region                  = "eu-west-1"
    shared_credentials_file = "~/.aws/credentials"
    profile                 = "gdb-whitelist-legacy"
  }
}

module "security" {
  source                    = "../../modules/security_v4.0"
  sqs_sse_enable            = true
  sns_sse_enable            = true
  admin_users               = var.admin_users
  aws_profile               = "gdb-whitelist-legacy"
  aws_region_id             = "eu-west-1"
  waf_name                  = "gdb-whitelist-legacy_web_acl"
  platform                  = var.platform
  common_tags               = var.tags
  gd_publishing_s3          = true
  enable_cloudtrail_logging = false
}

provider "aws" {
  region  = "us-east-1"
  alias   = "us_east_1"
  profile = "gdb-whitelist-legacy"
}

resource "aws_guardduty_detector" "guardduty_us_east_1" {
  provider = aws.us_east_1
  enable   = true
}

resource "aws_guardduty_publishing_destination" "s3_destination_us_east_1" {
  provider        = aws.us_east_1
  detector_id     = aws_guardduty_detector.guardduty_us_east_1.id
  destination_arn = "${module.security.guardduty_logs_s3_arn}/gd"
  kms_key_arn     = module.security.guardduty_kms_key_arn
}