module "iam_s3_dms_replica_rw" {
  source      = "../../../modules/iam/policies/s3/buckets_rw"
  name        = "dms_replica_rw"
  name_prefix = local.name_prefix
  bucket_masks = [
    module.s3_dms_replication.bucket.id
  ]
}

module "iam_s3_dms_replication_role" {
  source                   = "../../../modules/iam/roles/s3_replication_role"
  name_prefix              = local.name_prefix
  name                     = "dms-s3-replication-role"
  source_bucket_name       = module.s3_dms_replication.bucket.id
  destination_bucket_names = formatlist("%s-delphi-whitelist-db", ["dev", "qa", "stage", "prod"])

  common_tags = {
    project                  = "Infrastructure",
    service                  = "S3",
    plat_env_project_service = "${local.aggregated_tag}_INFRA_S3"
  }
}