resource "aws_lambda_permission" "allow_cloudwatch_logs_trigger" {
  statement_id   = "allow-cloudwatch-logs-trigger"
  principal      = "logs.${var.aws_region}.amazonaws.com"
  source_account = data.aws_caller_identity.current.account_id
  action         = "lambda:InvokeFunction"
  function_name  = module.datadog_forwarder_lambda.lambda_name
}

resource "aws_lambda_permission" "allow_cloudwatch_events_trigger" {
  statement_id   = "allow-cloudwatch-events-trigger"
  principal      = "events.amazonaws.com"
  source_account = data.aws_caller_identity.current.account_id
  action         = "lambda:InvokeFunction"
  function_name  = module.datadog_forwarder_lambda.lambda_name
}

resource "aws_lambda_permission" "allow_s3_trigger" {
  statement_id   = "allow-s3-trigger"
  principal      = "s3.amazonaws.com"
  source_account = data.aws_caller_identity.current.account_id
  action         = "lambda:InvokeFunction"
  function_name  = module.datadog_forwarder_lambda.lambda_name
}

resource "aws_lambda_permission" "allow_sns_trigger" {
  statement_id   = "allow-sns-trigger"
  principal      = "sns.amazonaws.com"
  source_account = data.aws_caller_identity.current.account_id
  action         = "lambda:InvokeFunction"
  function_name  = module.datadog_forwarder_lambda.lambda_name
}