data "aws_iam_policy" "assume_role_policy" {
  name = "${local.name_prefix}-jenkins_terraform_agent_assume_roles"
}

data "aws_iam_policy_document" "atlantis_task_role_assume_policy" {
  version = "2012-10-17"
  statement {
    actions = ["sts:AssumeRole"]
    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
    effect = "Allow"
  }
}

resource "aws_iam_role" "atlantis_task_role" {
  name = "${var.environment}-infra-${var.service_name}_task_role"

  assume_role_policy = data.aws_iam_policy_document.atlantis_task_role_assume_policy.json

  tags = {
    project                  = "Infrastructure",
    service                  = "IAM",
    plat_env_project_service = "DLP_CMN_INFRA_IAM"
    terraformed              = true
  }
}

resource "aws_iam_role_policy_attachment" "atlantis_task_role_attachment" {
  role       = aws_iam_role.atlantis_task_role.id
  policy_arn = data.aws_iam_policy.assume_role_policy.arn
}