resource "aws_instance" "ampaasd-tusd01" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                          = "ami-064831802eae3c1b0"
  instance_type                = "t3.large"
  iam_instance_profile         = "ampd-ampaasd-aspera02"
  vpc_security_group_ids       = [aws_security_group.AMP-AAS-D2-TUSD-SG.id]
  disable_api_termination      = "true"
  subnet_id                    = aws_subnet.subnet-0fde6cbbd9c7d8d4f.id
  associate_public_ip_address  = "false"
  key_name                     = "amp-ff-d-11Sep2021"
  tags = {
    "CLOPS_APPROVED"           = "YES",
    "Environment"              = "Dev",
    "Name"                     = "ampaasd-tusd01",
    "OS"                       = "AL3",
    "SERVER_TYPE"              = "EC2",
    "Project-Code"             = "SME-AMP",
    "Project-Name"             = "AMP",
    "Business-Unit"            = "SME-AMP",
    "DATA"                     = "NORMAL",
    "OPS"                      = "STND",
    "Owner" = "nathaniel.lovett@sonymusic.com",
    "Terraform" = "True",
    "CLOPS_APPROVED"  = "YES",
    "CLOPS_FW" = "NO",
    "ME-Joined" = "NO"
  }
  lifecycle {
    ignore_changes = [user_data]
  }
}

resource "aws_instance" "ampaass-tusd01" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                          = "ami-064831802eae3c1b0"
  instance_type                = "t3.large"
  iam_instance_profile         = "ampd-ampaass-aspera02"
  vpc_security_group_ids       = [aws_security_group.AMP-AAS-D2-TUSD-SG.id]
  disable_api_termination      = "true"
  subnet_id                    = aws_subnet.subnet-03cdb6356d2f7f8d2.id
  associate_public_ip_address  = "false"
  key_name                     = "amp-ff-d-11Sep2021"
  tags                         = {
    "CLOPS_APPROVED"           = "YES",
    "Environment"              = "Stage",
    "Name"                     = "ampaass-tusd01",
    "OS"                       = "AL3",
    "SERVER_TYPE"              = "EC2",
    "Project-Code"             = "SME-AMP",
    "Project-Name"             = "AMP",
    "Business-Unit"            = "SME-AMP",
    "DATA"                     = "NORMAL",
    "OPS"                      = "STND",
    "Owner"                    = "nathaniel.lovett@sonymusic.com",
    "Terraform"                = "True",
    "CLOPS_APPROVED"           = "YES",
    "CLOPS_FW"                 = "NO",
    "ME-Joined"                = "NO"
  }
  lifecycle {ignore_changes    = [user_data]}
}

resource "aws_instance" "ampaasd-aspera03" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "m5.large"
  iam_instance_profile        = "ampd-ampaasd-aspera02"
  vpc_security_group_ids      = [aws_security_group.AMP-AAS-D2-ASPERA1-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-0d58156e05cba9149.id
  associate_public_ip_address = "false"
  key_name                    = "amp-ff-d-11Sep2021"
  tags                        = {
      "Name"                  = "ampaasd-aspera03",
      "Environment"           = "Dev",
      "SERVER_TYPE"           = "EC2",
      "OS"                    = "AL3",
      "Patch Group"           = "General",
      "Business-Unit"         = "SME-AMP",
      "Project-Code"          = "SME-AMP"
      "Project-Name"          = "AMP"
      "CLOPS_APPROVED"        = "YES",
      "ME-Joined"             = "NO",
      "OPS"                   = "STND",
      "DATA"                  = "NORMAL",
      "Owner"                 = "nathaniel.lovett@sonymusic.com",
      "Terraform"             = "True",
      "CLOPS_FW"              = "YES",
    }
  lifecycle { ignore_changes = [user_data] }
}

resource "aws_instance" "ampaass-aspera03" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "m5.large"
  iam_instance_profile        = "ampd-ampaass-aspera02"
  vpc_security_group_ids      = [aws_security_group.AMP-AAS-D2-ASPERA1-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-0d58156e05cba9149.id
  associate_public_ip_address = "false"
  key_name                    = "amp-ff-d-11Sep2021"
  tags                        = {
      "Name"                  = "ampaass-aspera03",
      "Environment"           = "Stage",
      "SERVER_TYPE"           = "EC2",
      "OS"                    = "AL3",
      "Patch Group"           = "General",
      "Business-Unit"         = "SME-AMP",
      "Project-Code"          = "SME-AMP"
      "Project-Name"          = "AMP"
      "CLOPS_APPROVED"        = "YES",
      "ME-Joined"             = "NO",
      "OPS"                   = "STND",
      "DATA"                  = "NORMAL",
      "Owner"                 = "nathaniel.lovett@sonymusic.com",
      "Terraform"             = "True",
      "CLOPS_FW"              = "YES",
    }
  lifecycle { ignore_changes = [user_data] }
}