resource "aws_instance" "ampaasp-tusd01" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances. Migrated existing instance as-is.
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.large"
  iam_instance_profile        = "ampp-ampaasp-aspera02"
  vpc_security_group_ids      = [aws_security_group.AMP-AAS-P2-TUSD-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-012dfc8203c46d9cb.id
  associate_public_ip_address = "false"
  key_name                    = "ampp-Sep2020"
  tags = {
    "CLOPS_APPROVED" = "YES",
    "Environment"    = "Prod",
    "Name"           = "ampaasp-tusd01",
    "OS"             = "AL3",
    "SERVER_TYPE"    = "EC2",
    "Project-Code"   = "SME-AMP",
    "Project-Name"   = "AMP",
    "Business-Unit"  = "SME-AMP",
    "DATA"           = "NORMAL",
    "OPS"            = "STND",
    "Owner"          = "nathaniel.lovett@sonymusic.com",
    "Terraform"      = "True",
    "CLOPS_APPROVED" = "YES",
    "CLOPS_FW"       = "NO",
    "ME-Joined"      = "NO"
  }
  lifecycle { ignore_changes = [user_data] }
}

resource "aws_network_interface" "ampaasp-s3syncer01" {
  subnet_id       = aws_subnet.subnet-012dfc8203c46d9cb.id
  private_ips     = ["10.11.186.231"]
  security_groups = [aws_security_group.AMP-AAS-P2-TUSD-SG.id]
}

resource "aws_instance" "ampaasp-s3syncer01" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances. Migrated existing instance as-is.
  ami                     = "ami-064fb38547b9d7724"
  instance_type           = "r5.2xlarge"
  iam_instance_profile    = "ampp-cloudops-22565"
  disable_api_termination = "true"
  key_name                = "ampp-Sep2020"
  tags = {
    "CLOPS_APPROVED" = "YES",
    "Environment"    = "Prod",
    "Name"           = "ampaasp-s3syncer01",
    "OS"             = "AL3",
    "SERVER_TYPE"    = "EC2",
    "Project-Code"   = "SME-AMP",
    "Project-Name"   = "AMP",
    "Business-Unit"  = "SME-AMP",
    "DATA"           = "NORMAL",
    "OPS"            = "STND",
    "Owner"          = "nathaniel.lovett@sonymusic.com",
    "Terraform"      = "True",
    "CLOPS_FW"       = "NO",
    "ME-Joined"      = "NO"
  }
  network_interface {
    network_interface_id = aws_network_interface.ampaasp-s3syncer01.id
    device_index         = 0
  }
  lifecycle { ignore_changes = [user_data] }
}

resource "aws_instance" "ampaasp-aspera03" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances. Migrated existing instance as-is.
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "m5.large"
  iam_instance_profile        = "ampp-ampaasp-aspera02"
  vpc_security_group_ids      = [aws_security_group.AMP-AAS-P2-ASPERA1-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-08b875b2ce4695488.id
  associate_public_ip_address = "false"
  key_name                    = "ampp-Sep2020"
  tags = {
    "Name"           = "ampaasp-aspera03",
    "Environment"    = "Prod",
    "SERVER_TYPE"    = "EC2",
    "OS"             = "AL3",
    "Patch Group"    = "General",
    "Business-Unit"  = "SME-AMP",
    "Project-Code"   = "SME-AMP"
    "Project-Name"   = "AMP"
    "CLOPS_APPROVED" = "YES",
    "ME-Joined"      = "NO",
    "OPS"            = "STND",
    "DATA"           = "NORMAL",
    "Owner"          = "nathaniel.lovett@sonymusic.com",
    "Terraform"      = "True",
    "CLOPS_FW"       = "YES",
  }
  lifecycle { ignore_changes = [user_data] }
}

resource "aws_instance" "ampaasp-aspconsole03" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled. Migrated existing instance as-is.
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances. Migrated existing instance as-is.
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.large"
  iam_instance_profile        = "ampp-ampaasp2-aspconsole01"
  vpc_security_group_ids      = [aws_security_group.sg-0a000b63ba6679a38.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.subnet-0f75b5ff077d58921.id
  associate_public_ip_address = "false"
  key_name                    = "ampp-Sep2020"
  tags = {
    "Name"           = "ampaasp-aspconsole03",
    "Business-Unit"  = "SME-AMP",
    "CLOPS_APPROVED" = "True",
    "DATA"           = "NORMAL",
    "Environment"    = "Prod",
    "OPS"            = "STND",
    "OS"             = "AL3",
    "Owner"          = "nathaniel.lovett@sonymusic.com",
    "Patch Group"    = "General",
    "Project-Code"   = "SME-AMP",
    "Project-Name"   = "AMP",
    "SERVER_TYPE"    = "EC2",
    "Terraform"      = "True",
    "CLOPS_FW"       = "NO",
    "ME-Joined"      = "NO"
  }
  lifecycle { ignore_changes = [user_data] }
}