provider "aws" {
  region = "us-east-1"

  default_tags {
    tags = module.default_tags.tags
  }
}

module "default_tags" {
  source             = "git@github.com:theorchard/terraform-default-tags.git//?ref=2.0.0"
  environment        = "dev"
  application_family = "devops"
  service_name       = "roles"
  team_name          = "devops"
}

module "group_role" {
  source = "../../modules/roles"

  role_name                      = "test-group-role"
  application_families_to_access = ["test_family"]

  additional_policies_to_attach = [
    "test-shared-engineering-read-policy",
    "test-shared-engineering-iam-access-policy",
  ]

  assume_role_principals = [
    "arn:aws:iam::103233932089:root"
  ]

  max_session_duration = 3600
}

module "generic_engineer_role" {
  source = "../../modules/roles"

  role_name = "generic-engineer-role"

  additional_policies_to_attach = [
    "test-shared-engineering-read-policy",
    "test-shared-engineering-iam-access-policy",
  ]

  assume_role_principals = [
    "arn:aws:iam::103233932089:root"
  ]
}