resource "postgresql_grant" "main_admin_aws_s3_schema_ro" {
  database    = postgresql_database.main.name
  role        = postgresql_role.main_admin.name
  schema      = postgresql_schema.aws_s3.name
  object_type = "schema"
  privileges  = ["USAGE"]

  depends_on = [postgresql_schema.aws_s3]
}

resource "postgresql_grant" "main_owner_aws_s3_schema_ro" {
  database    = postgresql_database.main.name
  role        = postgresql_role.main_owner.name
  schema      = postgresql_schema.aws_s3.name
  object_type = "schema"
  privileges  = ["USAGE"]

  depends_on = [postgresql_schema.aws_s3]
}

resource "postgresql_grant" "main_user_aws_s3_schema_ro" {
  database    = postgresql_database.main.name
  role        = postgresql_role.main_user.name
  schema      = postgresql_schema.aws_s3.name
  object_type = "schema"
  privileges  = ["USAGE"]

  depends_on = [postgresql_schema.aws_s3]
}

resource "postgresql_grant" "main_reader_aws_s3_schema_ro" {
  database    = postgresql_database.main.name
  role        = postgresql_role.main_reader.name
  schema      = postgresql_schema.aws_s3.name
  object_type = "schema"
  privileges  = ["USAGE"]

  depends_on = [postgresql_schema.aws_s3]
}