resource "aws_iam_policy" "amp_assets_ecs_task_s3" {
  description = "amp_assets_ecs_task_s3"
  name        = "amp_assets_ecs_task_s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp_assets_ecs_task_s3.json
}

resource "aws_iam_policy" "ECS_FullAcess" {
  name   = "ECS_FullAcess"
  path   = var.path
  policy = data.aws_iam_policy_document.ECS_FullAcess.json
}

resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" {
  description = "AWSLoadBalancerControllerIAMPolicy"
  name        = "AWSLoadBalancerControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "MandoManagementPolicyForDesignatedAdministrators" {
  name   = "MandoManagementPolicyForDesignatedAdministrators"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoManagementPolicyForDesignatedAdministrators.json
}

resource "aws_iam_policy" "ecr_full_access" {
  description = "Allow Full access to ECR "
  name        = "ecr_full_access"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecr_full_access.json
}

resource "aws_iam_policy" "ampd-ecs-ampd-asset-srv-processor-taskdef-task-policy" {
  description = "Policy used by the ECS task ampd-asset-srv-processor-taskdef in ampd-asset-srv-processor"
  name        = "ampd-ecs-ampd-asset-srv-processor-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-ecs-ampd-asset-srv-processor-taskdef-task-policy.json
}

resource "aws_iam_policy" "kms" {
  name   = "kms"
  path   = var.path
  policy = data.aws_iam_policy_document.kms.json
}

resource "aws_iam_policy" "amp-export-stage-inline-1" {
  description = "amp-export-stage-inline-1"
  name        = "amp-export-stage-inline-1"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-export-stage-inline-1.json
}

resource "aws_iam_policy" "RDS-policy-for-lambda" {
  description = "RDS-policy-for-lambda"
  name        = "RDS-policy-for-lambda"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDS-policy-for-lambda.json
}

resource "aws_iam_policy" "RDSProxyIAMPolicy" {
  description = "CLOUDOPS-9396"
  name        = "RDSProxyIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSProxyIAMPolicy.json
}

resource "aws_iam_policy" "amp-asset-repo-gra-0001-s" {
  description = "S3-amp-asset-repo-gra-0001-s"
  name        = "amp-asset-repo-gra-0001-s"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-gra-0001-s.json
}

resource "aws_iam_policy" "ampd-aws-config-policy" {
  description = "ampd-aws-config-policy"
  name        = "ampd-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-aws-config-policy.json
}

resource "aws_iam_policy" "oneClick_Cognito_amps_kibana_usersAuth_Role_1578476719183" {
  name   = "oneClick_Cognito_amps_kibana_usersAuth_Role_1578476719183"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_amps_kibana_usersAuth_Role_1578476719183.json
}

resource "aws_iam_policy" "amp-asset-sts-policy-s3" {
  description = "amp-asset-sts-policy-s3"
  name        = "amp-asset-sts-policy-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-sts-policy-s3.json
}

resource "aws_iam_policy" "amp-asset-repo-aud-0001-s" {
  description = "S3-amp-asset-repo-aud-0001-s"
  name        = "amp-asset-repo-aud-0001-s"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-aud-0001-s.json
}

resource "aws_iam_policy" "amp-asset-copy-request-sqs-stage" {
  name   = "amp-asset-copy-request-sqs-stage"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-asset-copy-request-sqs-stage.json
  tags = {
    "JIRA" = "CLOUDOPS-7901"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-7901"
  }
}

resource "aws_iam_policy" "ampd-aas-stage" {
  description = "Policy for Aspera"
  name        = "ampd-aas-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-aas-stage.json
}

resource "aws_iam_policy" "es-snap-write" {
  name   = "es-snap-write"
  path   = var.path
  policy = data.aws_iam_policy_document.es-snap-write.json
}

resource "aws_iam_policy" "ampd-portal-policy" {
  description = "ampd-portal-policy"
  name        = "ampd-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-portal-policy.json
}

resource "aws_iam_policy" "amp-dev-aspera-s3" {
  description = "For AMP-D S3 Buckets"
  name        = "amp-dev-aspera-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-dev-aspera-s3.json
}

resource "aws_iam_policy" "amp-admin-dev-ec2" {
  name   = "amp-admin-dev-ec2"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-admin-dev-ec2.json
}

resource "aws_iam_policy" "amp-asset-repo-vid-0002-dev-readonly" {
  description = "amp-asset-repo-vid-0002-dev-readonly"
  name        = "amp-asset-repo-vid-0002-dev-readonly"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-vid-0002-dev-readonly.json
}

resource "aws_iam_policy" "amp-asset-repo-gra-0001-dev" {
  description = "Replication Role"
  name        = "amp-asset-repo-gra-0001-dev"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-gra-0001-dev.json
}

resource "aws_iam_policy" "awx-iam" {
  name   = "awx-iam"
  path   = var.path
  policy = data.aws_iam_policy_document.awx-iam.json
}

resource "aws_iam_policy" "oneClick_Cognito_amp_asset_service_logs_IDAuth_Role_1569586905821" {
  name   = "oneClick_Cognito_amp_asset_service_logs_IDAuth_Role_1569586905821"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_amp_asset_service_logs_IDAuth_Role_1569586905821.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "efs_admin" {
  name   = "efs_admin"
  path   = var.path
  policy = data.aws_iam_policy_document.efs_admin.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "oneClick_Cognito_ampd_kibana_usersAuth_Role_1569828967849" {
  name   = "oneClick_Cognito_ampd_kibana_usersAuth_Role_1569828967849"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_ampd_kibana_usersAuth_Role_1569828967849.json
}

resource "aws_iam_policy" "kafka_Policy" {
  description = "FullAccess on DynamoDB table"
  name        = "kafka_Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.kafka_Policy.json
}

resource "aws_iam_policy" "dynamodb_replication_access" {
  description = "dynamodb_replication_access"
  name        = "dynamodb_replication_access"
  path        = var.path
  policy      = data.aws_iam_policy_document.dynamodb_replication_access.json
}

resource "aws_iam_policy" "For_RDS_Enhanced_Monitoring" {
  name   = "For_RDS_Enhanced_Monitoring"
  path   = var.path
  policy = data.aws_iam_policy_document.For_RDS_Enhanced_Monitoring.json
}

resource "aws_iam_policy" "amp-archive-developers-policy" {
  description = "amp-archive-developer-policy"
  name        = "amp-archive-developers-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-archive-developers-policy.json
}

resource "aws_iam_policy" "s3-list" {
  name   = "s3-list"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-list.json
}

resource "aws_iam_policy" "SNS-Publish-Policy" {
  name   = "SNS-Publish-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.SNS-Publish-Policy.json
}

resource "aws_iam_policy" "amp-asset-repo-gra-0001-d" {
  description = "For S3 amp-asset-repo-gra-0001-d"
  name        = "amp-asset-repo-gra-0001-d"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-gra-0001-d.json
}

resource "aws_iam_policy" "ampd-iam-passrole-access-policy" {
  name   = "ampd-iam-passrole-access-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampd-iam-passrole-access-policy.json
}

resource "aws_iam_policy" "quicksight_full" {
  name   = "quicksight_full"
  path   = var.path
  policy = data.aws_iam_policy_document.quicksight_full.json
}

resource "aws_iam_policy" "aoma-core-s3-access-policy" {
  description = "aoma-core-s3-access-policy"
  name        = "aoma-core-s3-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-core-s3-access-policy.json
}

resource "aws_iam_policy" "sme-amp-dev-waf-logging-policy" {
  description = "sme-amp-dev-waf-logging-policy"
  name        = "sme-amp-dev-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-amp-dev-waf-logging-policy.json
}

resource "aws_iam_policy" "amp-asset-repo-aud-0001-d" {
  description = "S3 - amp-asset-repo-aud-0001-d - amp-asset-repo-aud-0001-dev"
  name        = "amp-asset-repo-aud-0001-d"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-aud-0001-d.json
}

resource "aws_iam_policy" "ampd-ecs-ampd-asset-srv-gateway-taskdef-task-policy" {
  description = "Policy used by the ECS task ampd-asset-srv-gateway-taskdef in ampd-asset-srv-gateway"
  name        = "ampd-ecs-ampd-asset-srv-gateway-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-ecs-ampd-asset-srv-gateway-taskdef-task-policy.json
}

resource "aws_iam_policy" "amps-asset-usr-ust" {
  description = "amps-asset-usr-ust"
  name        = "amps-asset-usr-ust"
  path        = var.path
  policy      = data.aws_iam_policy_document.amps-asset-usr-ust.json
}

resource "aws_iam_policy" "asset-service-aas-dev" {
  description = "Policy for Aspera"
  name        = "asset-service-aas-dev"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset-service-aas-dev.json
}

resource "aws_iam_policy" "ampd-amino-export-app-d-s3-policy" {
  description = "ampd-amino-export-app-d-s3-policy"
  name        = "ampd-amino-export-app-d-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-amino-export-app-d-s3-policy.json
}

resource "aws_iam_policy" "elasticsearchfa" {
  name   = "elasticsearchfa"
  path   = var.path
  policy = data.aws_iam_policy_document.elasticsearchfa.json
}

resource "aws_iam_policy" "ampd-aas-dev" {
  description = "Policy for Aspera"
  name        = "ampd-aas-dev"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-aas-dev.json
}

resource "aws_iam_policy" "SsmOnboardingInlinePolicy" {
  name   = "SsmOnboardingInlinePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.SsmOnboardingInlinePolicy.json
}

resource "aws_iam_policy" "global-ds-dev-s3-access" {
  description = "global-ds-dev-s3-access"
  name        = "global-ds-dev-s3-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.global-ds-dev-s3-access.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1513243932416" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1513243932416"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1513243932416.json
}

resource "aws_iam_policy" "ACMIssueCertificate" {
  name   = "ACMIssueCertificate"
  path   = var.path
  policy = data.aws_iam_policy_document.ACMIssueCertificate.json
}

resource "aws_iam_policy" "eks-admin" {
  name   = "eks-admin"
  path   = var.path
  policy = data.aws_iam_policy_document.eks-admin.json
}

resource "aws_iam_policy" "ampd-ecs-ampd-asset-srv-discovery-taskdef-task-policy" {
  description = "Policy used by the ECS task ampd-asset-srv-discovery-taskdef in ampd-asset-srv-discovery"
  name        = "ampd-ecs-ampd-asset-srv-discovery-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-ecs-ampd-asset-srv-discovery-taskdef-task-policy.json
}

resource "aws_iam_policy" "secretsManagerReadOnly" {
  name   = "secretsManagerReadOnly"
  path   = var.path
  policy = data.aws_iam_policy_document.secretsManagerReadOnly.json
}

resource "aws_iam_policy" "sqs_batch" {
  name   = "sqs_batch"
  path   = var.path
  policy = data.aws_iam_policy_document.sqs_batch.json
}

resource "aws_iam_policy" "amp-graphics-metadata-extract-stage" {
  description = "amp-graphics-metadata-extract-stage"
  name        = "amp-graphics-metadata-extract-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-graphics-metadata-extract-stage.json
}

resource "aws_iam_policy" "MandoFullAccessPolicyForStandaloneAccounts" {
  name   = "MandoFullAccessPolicyForStandaloneAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoFullAccessPolicyForStandaloneAccounts.json
}

resource "aws_iam_policy" "asset_srv_processor" {
  description = "asset_srv_processor"
  name        = "asset_srv_processor"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset_srv_processor.json
}

resource "aws_iam_policy" "amp-asset-repo-aud-0001-dev-readonly" {
  description = "amp-asset-repo-aud-0001-dev-readonly"
  name        = "amp-asset-repo-aud-0001-dev-readonly"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-aud-0001-dev-readonly.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "ecsservicerole" {
  name   = "ecsservicerole"
  path   = var.path
  policy = data.aws_iam_policy_document.ecsservicerole.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540815839808" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540815839808"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540815839808.json
}

resource "aws_iam_policy" "ampd-rekognition-01" {
  description = "For Rekognition POC"
  name        = "ampd-rekognition-01"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-rekognition-01.json
  tags = {
    "JIRA" = "CLOUDOPS-8283"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-8283"
  }
}

resource "aws_iam_policy" "ampd-amino-export-app-s-s3-policy" {
  description = "ampd-amino-export-app-s-s3-policy"
  name        = "ampd-amino-export-app-s-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-amino-export-app-s-s3-policy.json
}

resource "aws_iam_policy" "acmpc" {
  name   = "acmpc"
  path   = var.path
  policy = data.aws_iam_policy_document.acmpc.json
}

resource "aws_iam_policy" "ampd-asset-usr-ust-policy" {
  name   = "ampd-asset-usr-ust-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampd-asset-usr-ust-policy.json
}

resource "aws_iam_policy" "api-gateway-policy" {
  name   = "api-gateway-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.api-gateway-policy.json
}

resource "aws_iam_policy" "GetSSHKeyFromCloudopsDev" {
  description = "GetSSHKeyFromCloudopsDev"
  name        = "GetSSHKeyFromCloudopsDev"
  path        = var.path
  policy      = data.aws_iam_policy_document.GetSSHKeyFromCloudopsDev.json
}

resource "aws_iam_policy" "amp-asset-usr-processor-d-ff-s3-policy" {
  name   = "amp-asset-usr-processor-d-ff-s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-asset-usr-processor-d-ff-s3-policy.json
}

resource "aws_iam_policy" "amp-asset-usr-processor-d-ff-WriteOnly-Policy" {
  description = "amp-asset-usr-processor-d-ff-WriteOnly-Policy"
  name        = "amp-asset-usr-processor-d-ff-WriteOnly-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-usr-processor-d-ff-WriteOnly-Policy.json
}

resource "aws_iam_policy" "batch_processor" {
  name   = "batch_processor"
  path   = var.path
  policy = data.aws_iam_policy_document.batch_processor.json
}

resource "aws_iam_policy" "promo-stage-aoma-autosend-access" {
  description = "promo-stage-aoma-autosend-access"
  name        = "promo-stage-aoma-autosend-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.promo-stage-aoma-autosend-access.json
}

resource "aws_iam_policy" "amp-archive-exports-dev-Aspera" {
  description = "amp-archive-exports-dev-Aspera"
  name        = "amp-archive-exports-dev-Aspera"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-archive-exports-dev-Aspera.json
}

resource "aws_iam_policy" "oneClick_Cognito_ampd_kibana_usersUnauth_Role_1569828967850" {
  name   = "oneClick_Cognito_ampd_kibana_usersUnauth_Role_1569828967850"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_ampd_kibana_usersUnauth_Role_1569828967850.json
}

resource "aws_iam_policy" "ampd-digarch-stage-transferor" {
  description = "Policy for transferor"
  name        = "ampd-digarch-stage-transferor"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-digarch-stage-transferor.json
}

resource "aws_iam_policy" "amp-asset-repo-vid-0002-d" {
  description = "S3 - amp-asset-repo-vid-0002-d + amp-asset-repo-vid-0002-dev"
  name        = "amp-asset-repo-vid-0002-d"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-vid-0002-d.json
}

resource "aws_iam_policy" "ampd-mcon-ust-dev" {
  name   = "ampd-mcon-ust-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.ampd-mcon-ust-dev.json
}

resource "aws_iam_policy" "KinesisFirehoseServicePolicy-WAFV2-Logs-us-east-1" {
  name   = "KinesisFirehoseServicePolicy-WAFV2-Logs-us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.KinesisFirehoseServicePolicy-WAFV2-Logs-us-east-1.json
}

resource "aws_iam_policy" "jenkin-lambda-s3" {
  name   = "jenkin-lambda-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.jenkin-lambda-s3.json
}

resource "aws_iam_policy" "s3-policy" {
  name   = "s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-policy.json
}

resource "aws_iam_policy" "efs" {
  name   = "efs"
  path   = var.path
  policy = data.aws_iam_policy_document.efs.json
}

resource "aws_iam_policy" "ampd-ecs-ampd-asset-srv-api-taskdef-task-policy" {
  description = "Policy used by the ECS task ampd-asset-srv-api-taskdef in ampd-asset-srv-api"
  name        = "ampd-ecs-ampd-asset-srv-api-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-ecs-ampd-asset-srv-api-taskdef-task-policy.json
}

resource "aws_iam_policy" "amps-amazon-rekognition-amp-dev-sns-sqs-topic-policy" {
  name   = "amps-amazon-rekognition-amp-dev-sns-sqs-topic-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amps-amazon-rekognition-amp-dev-sns-sqs-topic-policy.json
}

resource "aws_iam_policy" "ampd-digarch-stage-exporter" {
  description = "Policy for exporter"
  name        = "ampd-digarch-stage-exporter"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-digarch-stage-exporter.json
}

resource "aws_iam_policy" "s3_replication_access" {
  description = "s3_replication_access"
  name        = "s3_replication_access"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3_replication_access.json
}

resource "aws_iam_policy" "elasicsearchfa" {
  description = "-3395"
  name        = "elasicsearchfa"
  path        = var.path
  policy      = data.aws_iam_policy_document.elasicsearchfa.json
}

resource "aws_iam_policy" "Route53FullAccess" {
  name   = "Route53FullAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.Route53FullAccess.json
}

resource "aws_iam_policy" "oneClick_lambda_elasticsearch_execution_1513246954107" {
  name   = "oneClick_lambda_elasticsearch_execution_1513246954107"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_elasticsearch_execution_1513246954107.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "S3-amp-asset-app-s" {
  description = "For S3 bucket amp-asset-app-s only"
  name        = "S3-amp-asset-app-s"
  path        = var.path
  policy      = data.aws_iam_policy_document.S3-amp-asset-app-s.json
}

resource "aws_iam_policy" "oneClick_Cognito_amp_asset_service_logs_IDUnauth_Role_1569586905822" {
  name   = "oneClick_Cognito_amp_asset_service_logs_IDUnauth_Role_1569586905822"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_amp_asset_service_logs_IDUnauth_Role_1569586905822.json
}

resource "aws_iam_policy" "oneClick_lambda_elasticsearch_execution_1569952629240" {
  name   = "oneClick_lambda_elasticsearch_execution_1569952629240"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_elasticsearch_execution_1569952629240.json
}

resource "aws_iam_policy" "iam-pass-policy" {
  name   = "iam-pass-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.iam-pass-policy.json
}

resource "aws_iam_policy" "amp-asset-repo-gra-0001-dev-readonly" {
  description = "amp-asset-repo-gra-0001-dev-readonly"
  name        = "amp-asset-repo-gra-0001-dev-readonly"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-gra-0001-dev-readonly.json
}

resource "aws_iam_policy" "ecr-full-access" {
  name   = "ecr-full-access"
  path   = var.path
  policy = data.aws_iam_policy_document.ecr-full-access.json
}

resource "aws_iam_policy" "ampd-digarch-dev-transferor" {
  description = "Policy for transferor"
  name        = "ampd-digarch-dev-transferor"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-digarch-dev-transferor.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "MandoEnablePolicyForManagementAccounts" {
  name   = "MandoEnablePolicyForManagementAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoEnablePolicyForManagementAccounts.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "STS-Policy" {
  name   = "STS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.STS-Policy.json
}

resource "aws_iam_policy" "ampd-da-s3-exporter-policy" {
  description = "ampd-da-s3-exporter-policy"
  name        = "ampd-da-s3-exporter-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-da-s3-exporter-policy.json
}

resource "aws_iam_policy" "ec2_eureka_policy" {
  description = "Eureka App EC2 policy"
  name        = "ec2_eureka_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ec2_eureka_policy.json
}

resource "aws_iam_policy" "oneClick_Cognito_amps_kibana_usersUnauth_Role_1578476719183" {
  name   = "oneClick_Cognito_amps_kibana_usersUnauth_Role_1578476719183"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_amps_kibana_usersUnauth_Role_1578476719183.json
}

resource "aws_iam_policy" "oneClick_Cognito_amps_asset_service_kibana_usersAuth_Role_1578632530767" {
  name   = "oneClick_Cognito_amps_asset_service_kibana_usersAuth_Role_1578632530767"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_amps_asset_service_kibana_usersAuth_Role_1578632530767.json
}

resource "aws_iam_policy" "amp-graphics-metadata-extract-dev" {
  name   = "amp-graphics-metadata-extract-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-graphics-metadata-extract-dev.json
}

resource "aws_iam_policy" "amp-asset-usr-processor-d" {
  description = "For S3 bucket amp-asset-usr-processor-d"
  name        = "amp-asset-usr-processor-d"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-usr-processor-d.json
}

resource "aws_iam_policy" "amp-asset-S3service" {
  name   = "amp-asset-S3service"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-asset-S3service.json
}

resource "aws_iam_policy" "ampd-digarch-stage" {
  description = "Policy for Aspera"
  name        = "ampd-digarch-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-digarch-stage.json
}

resource "aws_iam_policy" "amp-RDS_snapshot_lambda-role-policy" {
  name   = "amp-RDS_snapshot_lambda-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-RDS_snapshot_lambda-role-policy.json
}

resource "aws_iam_policy" "oneClick_lambda_basic_execution_1525758112956" {
  name   = "oneClick_lambda_basic_execution_1525758112956"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1525758112956.json
}

resource "aws_iam_policy" "ampd-ssm-sec-agent-status-upload" {
  description = "SSM permissions to check security agent status for sme-portal and upload to S3"
  name        = "ampd-ssm-sec-agent-status-upload"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-ssm-sec-agent-status-upload.json
}

resource "aws_iam_policy" "ampd-EKS-worker-node-Role-ECR-policy" {
  description = "ampd-EKS-worker-node-Role-ECR-policy"
  name        = "ampd-EKS-worker-node-Role-ECR-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-EKS-worker-node-Role-ECR-policy.json
}

resource "aws_iam_policy" "ampd-amino-uploader-s" {
  description = "ampd-amino-uploader-s"
  name        = "ampd-amino-uploader-s"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-amino-uploader-s.json
}

resource "aws_iam_policy" "ampd-aas-dev-aspera-T1" {
  description = "AMP Asset Service Aspera Try 1"
  name        = "ampd-aas-dev-aspera-T1"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-aas-dev-aspera-T1.json
}

resource "aws_iam_policy" "MandoUserPolicyForStandaloneAccounts" {
  name   = "MandoUserPolicyForStandaloneAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoUserPolicyForStandaloneAccounts.json
}

resource "aws_iam_policy" "amp-asset-repo-vid-0001-s" {
  description = "S3-amp-asset-repo-vid-0001-s"
  name        = "amp-asset-repo-vid-0001-s"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-vid-0001-s.json
}

resource "aws_iam_policy" "ampd-mcon-ust-stage" {
  name   = "ampd-mcon-ust-stage"
  path   = var.path
  policy = data.aws_iam_policy_document.ampd-mcon-ust-stage.json
}

resource "aws_iam_policy" "AnsibleLimitedReadOnly" {
  description = "AnsibleLimitedReadOnly"
  name        = "AnsibleLimitedReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.AnsibleLimitedReadOnly.json
}

resource "aws_iam_policy" "cloudops-BudgetActionDenyPolicy" {
  description = "cloudops-BudgetActionDenyPolicy"
  name        = "cloudops-BudgetActionDenyPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-BudgetActionDenyPolicy.json
}

resource "aws_iam_policy" "ampd-eks-amp-dev-as-asset-service-sa-policy" {
  description = "ampd-eks-amp-dev-as-asset-service-sa-policy"
  name        = "ampd-eks-amp-dev-as-asset-service-sa-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-eks-amp-dev-as-asset-service-sa-policy.json
}

resource "aws_iam_policy" "ampd-digarch-dev-exporter" {
  description = "Policy for exporter"
  name        = "ampd-digarch-dev-exporter"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-digarch-dev-exporter.json
}

resource "aws_iam_policy" "ECRReadOnly" {
  name   = "ECRReadOnly"
  path   = var.path
  policy = data.aws_iam_policy_document.ECRReadOnly.json
}

resource "aws_iam_policy" "MandoUserPolicyForOrganizationMembers" {
  name   = "MandoUserPolicyForOrganizationMembers"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoUserPolicyForOrganizationMembers.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "s3crr_kms_for_amp-video-archives-stage_to_amp-video-archives-stage-eu" {
  description = "Policy gives permission to access kms keys and replicate objects from amp-video-archives-stage to amp-video-archives-stage-eu"
  name        = "s3crr_kms_for_amp-video-archives-stage_to_amp-video-archives-stage-eu"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3crr_kms_for_amp-video-archives-stage_to_amp-video-archives-stage-eu.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "tagging_policy" {
  name   = "tagging_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.tagging_policy.json
}

resource "aws_iam_policy" "ListIAMUsers" {
  name   = "ListIAMUsers"
  path   = var.path
  policy = data.aws_iam_policy_document.ListIAMUsers.json
}

resource "aws_iam_policy" "sme-netezza-aoma-dev" {
  description = "s3 access  to sme-netezza-aoma-dev"
  name        = "sme-netezza-aoma-dev"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-netezza-aoma-dev.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}


resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "rdsadmin-lambda-access" {
  description = "Allow RDSAdmin role to access lambda functions"
  name        = "rdsadmin-lambda-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.rdsadmin-lambda-access.json
}

resource "aws_iam_policy" "ampd-CLOUDOPS-15607" {
  description = "Allow RDSAdmin role to access lambda functions"
  name        = "ampd-CLOUDOPS-15607"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-CLOUDOPS-15607.json
}

resource "aws_iam_policy" "ampd-lambda-layers-policy" {
  description = "Policy for accessing and creating lambda layers"
  name        = "ampd-lambda-layers-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-lambda-layers-policy.json
}

resource "aws_iam_policy" "ampd-eventbridge-policy" {
  description = "Policy used to manage tags on EventBridge resources"
  name        = "ampd-eventbridge-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-eventbridge-policy.json
}

resource "aws_iam_policy" "ampd-aoma-da-user-policy" {
  description = "ampd-aoma-da-user-policy"
  name        = "ampd-aoma-da-user-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-aoma-da-user-policy.json
}

resource "aws_iam_policy" "amps-aoma-da-user-policy" {
  description = "amps-aoma-da-user-policy"
  name        = "amps-aoma-da-user-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amps-aoma-da-user-policy.json
}

resource "aws_iam_policy" "da-asset-importer-role-policy" {
  description = "da-asset-importer-role-policy"
  name        = "da-asset-importer-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-asset-importer-role-policy.json
}

resource "aws_iam_policy" "da-asset-sonyciImporter-stage-role-policy" {
  description = "da-asset-sonyciImporter-stage-role-policy"
  name        = "da-asset-sonyciImporter-stage-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-asset-sonyCiImporter-stage-role-policy.json
}

resource "aws_iam_policy" "da-asset-importer-stage-role-policy" {
  description = "da-asset-importer-stage-role-policy"
  name        = "da-asset-importer-stage-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-asset-importer-stage-role-policy.json
}

resource "aws_iam_policy" "da-asset-sonyciImporter-role-policy" {
  description = "da-asset-sonyciImporter-role-policy"
  name        = "da-asset-sonyciImporter-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-asset-sonyciImporter-role-policy.json
}

resource "aws_iam_policy" "sme-ust-ci-transfer-dev-role-policy" {
  description = "sme-ust-ci-transfer-dev-role-policy"
  name        = "sme-ust-ci-transfer-dev-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-ust-ci-transfer-dev-role-policy.json
}

resource "aws_iam_policy" "sme-ust-ci-transfer-stage-role-policy" {
  description = "sme-ust-ci-transfer-stage-role-policy"
  name        = "sme-ust-ci-transfer-stage-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-ust-ci-transfer-stage-role-policy.json
}

resource "aws_iam_policy" "da-s3-importer-dev-role-policy" {
  description = "da-s3-importer-dev-role-policy"
  name        = "da-s3-importer-dev-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-s3-importer-dev-role-policy.json
}

resource "aws_iam_policy" "da-s3-importer-stage-role-policy" {
  description = "da-s3-importer-stage-role-policy"
  name        = "da-s3-importer-stage-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-s3-importer-stage-role-policy.json
}


resource "aws_iam_policy" "lambda-s3-sqs-access-policy" {
  description = "lambda-s3-sqs-access-policy"
  name        = "lambda-s3-sqs-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda-s3-sqs-access-policy.json
}

resource "aws_iam_policy" "amp-ast-srv-sqs-policy" {
  description = "amp-ast-srv-sqs-policy"
  name        = "amp-ast-srv-sqs-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-ast-srv-sqs-policy.json
}


resource "aws_iam_policy" "KarpenterControllerPolicy-amp-dev-as-eks" {
  name        = "KarpenterControllerPolicy-amp-dev-as-eks"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-amp-dev-as-eks.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-amp-dev-da" {
  name        = "KarpenterControllerPolicy-amp-dev-da"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-amp-dev-da.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "ampd-tusd-policy" {
  description = "ampd-tusd-policy"
  name        = "ampd-tusd-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-tusd-policy.json
}

resource "aws_iam_policy" "ampd-CLOUDOPS-19701-policy" {
  description = "ampd-CLOUDOPS-19701-policy"
  name        = "ampd-CLOUDOPS-19701-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-CLOUDOPS-19701-policy.json
}

resource "aws_iam_policy" "ampdad-tusd-policy" {
  description = "ampdad-tusd-policy"
  name        = "ampdad-tusd-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampdad-tusd-policy.json
}

resource "aws_iam_policy" "ampd-smej-policy" {
  description = "ampd-smej-policy"
  name        = "ampd-smej-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampd-smej-policy.json
}

resource "aws_iam_policy" "amp-da-openobserve-s3-policy" {
  description = "Policy for OpenObserve S3 access"
  name        = "amp-da-openobserve-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-da-openobserve-s3-policy.json
}

resource "aws_iam_policy" "eks-sa-da-cs-handler-dev-policy" {
  description = "Policy for DA CS Handler"
  name        = "eks-sa-da-cs-handler-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.eks-sa-da-cs-handler-dev-policy.json
}

resource "aws_iam_policy" "eks-sa-da-cs-handler-stage-policy" {
  description = "Policy for DA CS Handler"
  name        = "eks-sa-da-cs-handler-stage-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.eks-sa-da-cs-handler-stage-policy.json
}

resource "aws_iam_policy" "da-contact-sheet-app-policy" {
  description = "Access to s3 bucket"
  name        = "da-contact-sheet-app-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-contact-sheet-app-policy.json
}

resource "aws_iam_policy" "AOMA-Dev-Stg-DB-Creds-amino-srvc-Assume-Role-Policy" {
  description = "AOMA-Dev-Stg-DB-Creds-amino-srvc-Assume-Role-Policy"
  name        = "AOMA-Dev-Stg-DB-Creds-amino-srvc-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Dev-Stg-DB-Creds-amino-srvc-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Dev-DB-Creds-asset-imp-Assume-Role-Policy" {
  description = "AOMA-Dev-DB-Creds-asset-imp-Assume-Role-Policy"
  name        = "AOMA-Dev-DB-Creds-asset-imp-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Dev-DB-Creds-asset-imp-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Stg-DB-Creds-asset-imp-Assume-Role-Policy" {
  description = "AOMA-Stg-DB-Creds-asset-imp-Assume-Role-Policy"
  name        = "AOMA-Stg-DB-Creds-asset-imp-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Stg-DB-Creds-asset-imp-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Dev-DB-Creds-batch-init-Assume-Role-Policy" {
  description = "AOMA-Dev-DB-Creds-batch-init-Assume-Role-Policy"
  name        = "AOMA-Dev-DB-Creds-batch-init-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Dev-DB-Creds-batch-init-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Stg-DB-Creds-batch-init-Assume-Role-Policy" {
  description = "AOMA-Stg-DB-Creds-batch-init-Assume-Role-Policy"
  name        = "AOMA-Stg-DB-Creds-batch-init-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Stg-DB-Creds-batch-init-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Dev-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy" {
  description = "AOMA-Dev-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy"
  name        = "AOMA-Dev-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Dev-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Stg-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy" {
  description = "AOMA-Stg-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy"
  name        = "AOMA-Stg-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Stg-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy.json
}