resource "aws_instance" "ampdas-exporter03" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-07ff74ba03f2ea586"
  instance_type               = "t3.large"
  iam_instance_profile        = "ampd-ampdas-exporter01"
  vpc_security_group_ids      = ["sg-0b7bee3eb222b9552"]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-0c2c6c1e04e6c56d9.id
  associate_public_ip_address = "false"
  key_name                    = "ampd-Aug2020"
  tags = merge(
    var.cloudops_firewall_protected_tag,
    {
      "Business-Unit"  = "AMP-Digital-Archive",
      "CLOPS_APPROVED" = "YES",
      "DATA"           = "NORMAL",
      "Environment"    = "Stage",
      "ME-Joined"      = "NO",
      "Name"           = "ampdas-exporter03",
      "OPS"            = "STND",
      "OS"             = "AL3",
      "Owner"          = "nathaniel.lovett@sonymusic.com",
      "Patch Group"    = "General",
      "Project-Code"   = "SME-AMP",
      "Project-Name"   = "AMP",
      "SERVER_TYPE"    = "EC2",
      "Terraform"      = "True",
      "CLOPS_FW"       = "YES"
    },
  )
  lifecycle { ignore_changes = [user_data] }
}

resource "aws_instance" "ampdas-transferor03" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-07ff74ba03f2ea586"
  instance_type               = "t3.xlarge"
  iam_instance_profile        = "ampd-ampdas-transferor01"
  vpc_security_group_ids      = ["sg-0a9099b163ed4c4f3"]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-0c2c6c1e04e6c56d9.id
  associate_public_ip_address = "false"
  key_name                    = "ampd-Aug2020"
  tags = merge(
    var.cloudops_firewall_protected_tag,
    {
      "Name"           = "ampdas-transferor03",
      "Business-Unit"  = "AMP-Digital-Archive",
      "CLOPS_APPROVED" = "YES",
      "DATA"           = "NORMAL",
      "Environment"    = "Stage",
      "ME-Joined"      = "NO",
      "OPS"            = "STND",
      "OS"             = "AL3",
      "Owner"          = "nathaniel.lovett@sonymusic.com",
      "Patch Group"    = "General",
      "Project-Code"   = "SME-AMP",
      "Project-Name"   = "AMP",
      "SERVER_TYPE"    = "EC2",
      "Terraform"      = "True",
      "CLOPS_FW"       = "YES"
    },
  )
  lifecycle { ignore_changes = [user_data] }
}

resource "aws_instance" "ampdas-tusd01" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-07ff74ba03f2ea586"
  instance_type               = "t3.xlarge"
  iam_instance_profile        = "ampd-ampdas-aspera02"
  vpc_security_group_ids      = [aws_security_group.AMP-DIGARCH-S-TUSD-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-0c2c6c1e04e6c56d9.id
  associate_public_ip_address = "false"
  key_name                    = "ampd-Aug2020"
  tags = merge(
    var.cloudops_firewall_protected_tag,
    {
      "Name"           = "ampdas-tusd01",
      "Business-Unit"  = "AMP-Digital-Archive",
      "CLOPS_APPROVED" = "YES",
      "DATA"           = "NORMAL",
      "Environment"    = "Stage",
      "ME-Joined"      = "NO",
      "OPS"            = "STND",
      "OS"             = "AL3",
      "Owner"          = "nathaniel.lovett@sonymusic.com",
      "Patch Group"    = "General",
      "Project-Code"   = "SME-AMP",
      "Project-Name"   = "AMP",
      "SERVER_TYPE"    = "EC2",
      "CLOPS_FW"       = "YES",
      "Terraform"      = "True"
    },
  )
  lifecycle { ignore_changes = [user_data] }
}

resource "aws_instance" "ampdas-aspera03" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-07ff74ba03f2ea586"
  instance_type               = "t3.large"
  iam_instance_profile        = "ampd-ampdas-aspera02"
  vpc_security_group_ids      = [aws_security_group.sg-060850f1c6f39521e.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-0c2c6c1e04e6c56d9.id
  associate_public_ip_address = "false"
  key_name                    = "ampd-Aug2020"
  tags = {
    "Name"           = "ampdas-aspera03",
    "Environment"    = "Stage",
    "SERVER_TYPE"    = "EC2",
    "OS"             = "AL3",
    "Patch Group"    = "General",
    "Business-Unit"  = "SME-AMP",
    "Project-Code"   = "SME-AMP"
    "Project-Name"   = "AMP"
    "CLOPS_APPROVED" = "YES",
    "ME-Joined"      = "NO",
    "OPS"            = "STND",
    "DATA"           = "NORMAL",
    "Owner"          = "nathaniel.lovett@sonymusic.com",
    "Terraform"      = "True",
    "CLOPS_FW"       = "YES",
  }
  lifecycle { ignore_changes = [user_data] }
}