resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "s3crr_kms_for_amp-video-archives-prod_to_amp-video-archives-prod-eu" {
  name   = "s3crr_kms_for_amp-video-archives-prod_to_amp-video-archives-prod-eu"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.s3crr_kms_for_amp-video-archives-prod_to_amp-video-archives-prod-eu.json
}

resource "aws_iam_policy" "amp-archive-ColumbiaRecords-admin-policy" {
  name   = "amp-archive-ColumbiaRecords-admin-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-archive-ColumbiaRecords-admin-policy.json
}

resource "aws_iam_policy" "amp-archive-ColumbiaRecords-uploader-policy" {
  name   = "amp-archive-ColumbiaRecords-uploader-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-archive-ColumbiaRecords-uploader-policy.json
}

resource "aws_iam_policy" "ampp-queens-user-policy" {
  name   = "ampp-queens-user-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-queens-user-policy.json
}
resource "aws_iam_policy" "s3crr_for_amp-video-archives-prod_to_amp-video-archives-prod-eu" {
  name   = "s3crr_for_amp-video-archives-prod_to_amp-video-archives-prod-eu"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.s3crr_for_amp-video-archives-prod_to_amp-video-archives-prod-eu.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}
resource "aws_iam_policy" "eks-sa-da-cs-handler-prod-policy" {
  description = "Policy for DA CS Handler"
  name        = "eks-sa-da-cs-handler-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.eks-sa-da-cs-handler-prod-policy.json
}

resource "aws_iam_policy" "config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1" {
  name   = "config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1.json
}

resource "aws_iam_policy" "ampp-tusd-s3" {
  description = "ampp-tusd"
  name        = "ampp-tusd-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-tusd-policy.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "ampp-asset-catalog-transfer-s3" {
  name   = "ampp-asset-catalog-transfer-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-asset-catalog-transfer-s3.json
}

resource "aws_iam_policy" "Billing-Read-Only" {
  description = "Read only permission for Billing Portal"
  name        = "Billing-Read-Only"
  path        = var.path
  policy      = data.aws_iam_policy_document.Billing-Read-Only.json
}

resource "aws_iam_policy" "s3crr_for_amp-photo-archives-prod_to_amp-photo-archives-prod-eu" {
  name   = "s3crr_for_amp-photo-archives-prod_to_amp-photo-archives-prod-eu"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.s3crr_for_amp-photo-archives-prod_to_amp-photo-archives-prod-eu.json
}

resource "aws_iam_policy" "postgres-p" {
  name   = "postgres-p"
  path   = var.path
  policy = data.aws_iam_policy_document.postgres-p.json
}

resource "aws_iam_policy" "SNS-Publish-Policy" {
  name   = "SNS-Publish-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.SNS-Publish-Policy.json
}

resource "aws_iam_policy" "ampp-mcon-ust-prod" {
  name   = "ampp-mcon-ust-prod"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-mcon-ust-prod.json
}

resource "aws_iam_policy" "s3crr_kms_for_amp-audio-archives-prod_to_amp-audio-archives-prod-eu" {
  name   = "s3crr_kms_for_amp-audio-archives-prod_to_amp-audio-archives-prod-eu"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.s3crr_kms_for_amp-audio-archives-prod_to_amp-audio-archives-prod-eu.json
}

resource "aws_iam_policy" "CloudabilityMonitorResourcesPolicy" {
  name   = "CloudabilityMonitorResourcesPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityMonitorResourcesPolicy.json
}

resource "aws_iam_policy" "ampp-amino-uploader-p" {
  description = " providing permission for all S3 actions"
  name        = "ampp-amino-uploader-p"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-amino-uploader-p.json
}

resource "aws_iam_policy" "isilon-migration" {
  name   = "isilon-migration"
  path   = var.path
  policy = data.aws_iam_policy_document.isilon-migration.json
}

resource "aws_iam_policy" "Billing-RO" {
  name   = "Billing-RO"
  path   = var.path
  policy = data.aws_iam_policy_document.Billing-RO.json
}

resource "aws_iam_policy" "amp-prod-s3-replicator" {
  name   = "amp-prod-s3-replicator"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-prod-s3-replicator.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-isilon-migration" {
  name   = "AWSDataSyncS3BucketAccess-isilon-migration"
  path   = var.path
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-isilon-migration.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "amp-RDS_snapshot_lambda-role-policy" {
  name   = "amp-RDS_snapshot_lambda-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-RDS_snapshot_lambda-role-policy.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-photo-archives-prod-eu" {
  name   = "AWSDataSyncS3BucketAccess-amp-photo-archives-prod-eu"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-photo-archives-prod-eu.json
}

resource "aws_iam_policy" "ampp-aas-prod" {
  description = "Policy for Aspera"
  name        = "ampp-aas-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-aas-prod.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "ampp-ecs-ampp-asset-srv-api-taskdef-task-policy" {
  description = "Policy used by the ECS task ampp-asset-srv-api-taskdef in ampp-asset-srv-api"
  name        = "ampp-ecs-ampp-asset-srv-api-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-ecs-ampp-asset-srv-api-taskdef-task-policy.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-test-nl-repl-src-p" {
  name   = "AWSDataSyncS3BucketAccess-test-nl-repl-src-p"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-test-nl-repl-src-p.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1531360123100" {
  name   = "oneClick_flowlogsRole_1531360123100"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1531360123100.json
}

resource "aws_iam_policy" "rdsad" {
  name   = "rdsad"
  path   = var.path
  policy = data.aws_iam_policy_document.rdsad.json
}

resource "aws_iam_policy" "ampp-ecs-ampp-amino-taskdef-task-policy" {
  description = "Policy used by the ECS task ampp-amino-taskdef in ampp-export-wrapper"
  name        = "ampp-ecs-ampp-amino-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-ecs-ampp-amino-taskdef-task-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1513244367522" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1513244367522"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1513244367522.json
}

resource "aws_iam_policy" "amp-prod-data-sync-all-s3" {
  name   = "amp-prod-data-sync-all-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-prod-data-sync-all-s3.json
}

resource "aws_iam_policy" "ampp-trendmicro_esdomain_policy" {
  description = "For TMDS ELK"
  name        = "ampp-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "sqs_batch" {
  name   = "sqs_batch"
  path   = var.path
  policy = data.aws_iam_policy_document.sqs_batch.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-test-nl-repl-dst-p" {
  name   = "AWSDataSyncS3BucketAccess-test-nl-repl-dst-p"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-test-nl-repl-dst-p.json
}

resource "aws_iam_policy" "ampp-digarch-prod-exporter" {
  description = "Policy for exporter"
  name        = "ampp-digarch-prod-exporter"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-digarch-prod-exporter.json
}

resource "aws_iam_policy" "asset-srv-cus-met-pub-policy" {
  description = "asset-srv-cus-met-pub-policy"
  name        = "asset-srv-cus-met-pub-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset-srv-cus-met-pub-policy.json
}

resource "aws_iam_policy" "ampp2-app01-policy" {
  description = "ampp2-app01-policy"
  name        = "ampp2-app01-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp2-app01-policy.json
}

resource "aws_iam_policy" "oneClick_Cognito_ampp_asset_service_kibana_usersAuth_Role_1584701118543" {
  name   = "oneClick_Cognito_ampp_asset_service_kibana_usersAuth_Role_1584701118543"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_ampp_asset_service_kibana_usersAuth_Role_1584701118543.json
}

resource "aws_iam_policy" "ampp-ecs-ampp-asset-srv-processor-taskdef-task-policy" {
  description = "Policy used by the ECS task ampp-asset-srv-processor-taskdef in ampp-asset-srv-processor"
  name        = "ampp-ecs-ampp-asset-srv-processor-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-ecs-ampp-asset-srv-processor-taskdef-task-policy.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-video-archives-prod" {
  name   = "AWSDataSyncS3BucketAccess-amp-video-archives-prod"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-video-archives-prod.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-audio-archives-prod-eu" {
  name   = "AWSDataSyncS3BucketAccess-amp-audio-archives-prod-eu"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-audio-archives-prod-eu.json
}

resource "aws_iam_policy" "ampp-amino-uploader-p-iam-ro" {
  name   = "ampp-amino-uploader-p-iam-ro"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-amino-uploader-p-iam-ro.json
}

resource "aws_iam_policy" "batch_processor" {
  name   = "batch_processor"
  path   = var.path
  policy = data.aws_iam_policy_document.batch_processor.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "CloudabilityVerificationPolicy" {
  name   = "CloudabilityVerificationPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityVerificationPolicy.json
}

resource "aws_iam_policy" "sme-gen-custom" {
  name   = "sme-gen-custom"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-gen-custom.json
}

resource "aws_iam_policy" "SecretsManagerReadOnly" {
  name   = "SecretsManagerReadOnly"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerReadOnly.json
}

resource "aws_iam_policy" "SnowFamilyS3Import-IsilonMigration-1-policy" {
  name   = "SnowFamilyS3Import-IsilonMigration-1-policy"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.SnowFamilyS3Import-IsilonMigration-1-policy.json
}

resource "aws_iam_policy" "ampp-amino-export-app-p-s3-policy" {
  description = "ampp-amino-export-app-p-s3-policy"
  name        = "ampp-amino-export-app-p-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-amino-export-app-p-s3-policy.json
}

resource "aws_iam_policy" "ampp-asset-usr-ust" {
  name   = "ampp-asset-usr-ust"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-asset-usr-ust.json
}

resource "aws_iam_policy" "s3crr_kms_for_amp-photo-archives-prod_to_amp-photo-archives-prod-eu" {
  description = "s3crr_kms_for_amp-photo-archives-prod_to_amp-photo-archives-prod-eu"
  name        = "s3crr_kms_for_amp-photo-archives-prod_to_amp-photo-archives-prod-eu"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3crr_kms_for_amp-photo-archives-prod_to_amp-photo-archives-prod-eu.json
}

resource "aws_iam_policy" "ampp-ecs-ampp-asset-srv-gateway-taskdef-task-policy" {
  description = "Policy used by the ECS task ampp-asset-srv-gateway-taskdef in ampp-asset-srv-gateway"
  name        = "ampp-ecs-ampp-asset-srv-gateway-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-ecs-ampp-asset-srv-gateway-taskdef-task-policy.json
}

resource "aws_iam_policy" "amp-asset-import-request-sqs-prod" {
  description = "amp-asset-import-request-sqs-prod policy"
  name        = "amp-asset-import-request-sqs-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-import-request-sqs-prod.json
}

resource "aws_iam_policy" "ampp-aws-config-policy" {
  description = "ampp-aws-config-policy"
  name        = "ampp-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-aws-config-policy.json
}

resource "aws_iam_policy" "RDS_admin_policy" {
  description = "Policy for RDS admin"
  name        = "RDS_admin_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDS_admin_policy.json
}

resource "aws_iam_policy" "s3crr_for_amp-audio-archives-prod_to_amp-audio-archives-prod-eu" {
  description = "s3 replication policy for audio"
  name        = "s3crr_for_amp-audio-archives-prod_to_amp-audio-archives-prod-eu"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3crr_for_amp-audio-archives-prod_to_amp-audio-archives-prod-eu.json
}

resource "aws_iam_policy" "amp_assets_ecs_task_s3" {
  name   = "amp_assets_ecs_task_s3"
  path   = var.path
  policy = data.aws_iam_policy_document.amp_assets_ecs_task_s3.json
}

resource "aws_iam_policy" "amp-admin-prod-policy" {
  description = "amp-admin-prod-policy"
  name        = "amp-admin-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-admin-prod-policy.json
}

resource "aws_iam_policy" "RDSIamProxy" {
  name   = "RDSIamProxy"
  path   = var.path
  policy = data.aws_iam_policy_document.RDSIamProxy.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "ampp-rekognition-01" {
  name   = "ampp-rekognition-01"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-rekognition-01.json
}

resource "aws_iam_policy" "ampp-inventory-retrieve-policy" {
  name   = "ampp-inventory-retrieve-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-inventory-retrieve-policy.json
}

resource "aws_iam_policy" "MandoManagementPolicyForDesignatedAdministrators" {
  name   = "MandoManagementPolicyForDesignatedAdministrators"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoManagementPolicyForDesignatedAdministrators.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-video-archives-prod-eu" {
  name   = "AWSDataSyncS3BucketAccess-amp-video-archives-prod-eu"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-video-archives-prod-eu.json
}

resource "aws_iam_policy" "ampp-asset-retrieve" {
  name   = "ampp-asset-retrieve"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-asset-retrieve.json
}

resource "aws_iam_policy" "MandoEnablePolicyForManagementAccounts" {
  name   = "MandoEnablePolicyForManagementAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoEnablePolicyForManagementAccounts.json
}

resource "aws_iam_policy" "ampp-ecs-amps-external-event-dispatcher-taskdef-task-policy" {
  description = "ampp-ecs-amps-external-event-dispatcher-taskdef-task-policy"
  name        = "ampp-ecs-amps-external-event-dispatcher-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-ecs-amps-external-event-dispatcher-taskdef-task-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540805615144" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540805615144"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540805615144.json
}

resource "aws_iam_policy" "ampp-nlovett" {
  description = "For Nathaniel.Lovett@sonymusic.com"
  name        = "ampp-nlovett"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-nlovett.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-photo-archives-prod" {
  name   = "AWSDataSyncS3BucketAccess-amp-photo-archives-prod"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-photo-archives-prod.json
}

resource "aws_iam_policy" "AWSGlueServiceRole-s3logs" {
  description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!"
  name        = "AWSGlueServiceRole-s3logs"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSGlueServiceRole-s3logs.json
}

resource "aws_iam_policy" "EventBridge-Policy" {
  name   = "EventBridge-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.EventBridge-Policy.json
}

resource "aws_iam_policy" "sme-amp-prod-waf-logging-policy" {
  description = "sme-amp-prod-waf-logging-policy"
  name        = "sme-amp-prod-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-amp-prod-waf-logging-policy.json
}

resource "aws_iam_policy" "iam-pass-policy" {
  name   = "iam-pass-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.iam-pass-policy.json
}

resource "aws_iam_policy" "Cognito-1584700652383" {
  name   = "Cognito-1584700652383"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.Cognito-1584700652383.json
}

resource "aws_iam_policy" "amp-asset-repo-lfv-0001-p-replication-policy" {
  description = "amp-asset-repo-lfv-0001-p-replication-policy"
  name        = "amp-asset-repo-lfv-0001-p-replication-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-repo-lfv-0001-p-replication-policy.json
}

resource "aws_iam_policy" "ampp2-app02-policy" {
  description = "ampp2-app02-policy"
  name        = "ampp2-app02-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp2-app02-policy.json
}

resource "aws_iam_policy" "MandoServiceLinkedRoleAnalogPolicy" {
  name   = "MandoServiceLinkedRoleAnalogPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoServiceLinkedRoleAnalogPolicy.json
}

resource "aws_iam_policy" "s3_batch_operation_temp_deny_policy" {
  name   = "s3_batch_operation_temp_deny_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.s3_batch_operation_temp_deny_policy.json
}

resource "aws_iam_policy" "oneClick_Cognito_ampp_asset_service_kibana_usersUnauth_Role_1584622302341" {
  name   = "oneClick_Cognito_ampp_asset_service_kibana_usersUnauth_Role_1584622302341"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_ampp_asset_service_kibana_usersUnauth_Role_1584622302341.json
}

resource "aws_iam_policy" "MandoUserPolicyForOrganizationMembers" {
  name   = "MandoUserPolicyForOrganizationMembers"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoUserPolicyForOrganizationMembers.json
}

resource "aws_iam_policy" "TaggingPolicy1" {
  name   = "TaggingPolicy1"
  path   = var.path
  policy = data.aws_iam_policy_document.TaggingPolicy1.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-audio-archives-prod" {
  name   = "AWSDataSyncS3BucketAccess-amp-audio-archives-prod"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-audio-archives-prod.json
}

resource "aws_iam_policy" "EC2Describe" {
  description = "Created for describe EC2 services for the Lambda function"
  name        = "EC2Describe"
  path        = var.path
  policy      = data.aws_iam_policy_document.EC2Describe.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "ampp-digarch-prod-transferor" {
  description = "Policy for transferor"
  name        = "ampp-digarch-prod-transferor"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-digarch-prod-transferor.json
}

resource "aws_iam_policy" "s3_read_write" {
  name   = "s3_read_write"
  path   = var.path
  policy = data.aws_iam_policy_document.s3_read_write.json
}

resource "aws_iam_policy" "MandoFullAccessPolicyForStandaloneAccounts" {
  name   = "MandoFullAccessPolicyForStandaloneAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoFullAccessPolicyForStandaloneAccounts.json
}

resource "aws_iam_policy" "ampp-da-s3-exporter" {
  name   = "ampp-da-s3-exporter"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-da-s3-exporter.json
}

resource "aws_iam_policy" "flowlogsPolicy" {
  description = "For VPC Flow Logs"
  name        = "flowlogsPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.flowlogsPolicy.json
}

resource "aws_iam_policy" "RDS-policy-for-lambda" {
  description = "RDS-policy-for-lambda"
  name        = "RDS-policy-for-lambda"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDS-policy-for-lambda.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p" {
  name   = "AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p-use1" {
  name   = "AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p-use1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p-use1.json
}

resource "aws_iam_policy" "AWSGlueServiceRole-s3-glue-amp-US-copy" {
  description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!"
  name        = "AWSGlueServiceRole-s3-glue-amp-US-copy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSGlueServiceRole-s3-glue-amp-US-copy.json
}

resource "aws_iam_policy" "oneClick_lambda_basic_execution_1535459292315" {
  name   = "oneClick_lambda_basic_execution_1535459292315"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1535459292315.json
}

resource "aws_iam_policy" "oneClick_Cognito_ampp_asset_service_kibana_usersUnauth_Role_1584701118544" {
  name   = "oneClick_Cognito_ampp_asset_service_kibana_usersUnauth_Role_1584701118544"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_ampp_asset_service_kibana_usersUnauth_Role_1584701118544.json
}

resource "aws_iam_policy" "ampp-ecs-ampp-asset-srv-discovery-taskdef-task-policy" {
  description = "Policy used by the ECS task ampp-asset-srv-discovery-taskdef in ampp-asset-srv-discovery"
  name        = "ampp-ecs-ampp-asset-srv-discovery-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-ecs-ampp-asset-srv-discovery-taskdef-task-policy.json
}

resource "aws_iam_policy" "oneClick_Cognito_ampp_asset_service_kibana_usersAuth_Role_1584622363314" {
  name   = "oneClick_Cognito_ampp_asset_service_kibana_usersAuth_Role_1584622363314"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_ampp_asset_service_kibana_usersAuth_Role_1584622363314.json
}

resource "aws_iam_policy" "MandoUserPolicyForStandaloneAccounts" {
  name   = "MandoUserPolicyForStandaloneAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoUserPolicyForStandaloneAccounts.json
}

resource "aws_iam_policy" "amp-export-prod-inline-1" {
  description = "amp-export-prod-inline-1"
  name        = "amp-export-prod-inline-1"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-export-prod-inline-1.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "s3-policy" {
  name   = "s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-policy.json
}

resource "aws_iam_policy" "asset-service-prod-aspera-s3" {
  name   = "asset-service-prod-aspera-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.asset-service-prod-aspera-s3.json
}

resource "aws_iam_policy" "oneClick_lambda_elasticsearch_execution_1513247490708" {
  name   = "oneClick_lambda_elasticsearch_execution_1513247490708"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_elasticsearch_execution_1513247490708.json
}

resource "aws_iam_policy" "amp-admin-prodpolicy" {
  description = "amp-admin-prodpolicy"
  name        = "amp-admin-prodpolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-admin-prodpolicy.json
}

resource "aws_iam_policy" "ampp-asset-app" {
  name   = "ampp-asset-app"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-asset-app.json
}

resource "aws_iam_policy" "For_RDS_Enhanced_Monitoring" {
  name   = "For_RDS_Enhanced_Monitoring"
  path   = var.path
  policy = data.aws_iam_policy_document.For_RDS_Enhanced_Monitoring.json
}

resource "aws_iam_policy" "ampp-digarch-prod" {
  description = "Policy for Aspera"
  name        = "ampp-digarch-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-digarch-prod.json
}

resource "aws_iam_policy" "Amazon_EventBridge_Invoke_Api_Destination_Prod" {
  name   = "Amazon_EventBridge_Invoke_Api_Destination_Prod"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.Amazon_EventBridge_Invoke_Api_Destination_Prod.json
}

resource "aws_iam_policy" "kms-efs-acm-awx" {
  name   = "kms-efs-acm-awx"
  path   = var.path
  policy = data.aws_iam_policy_document.kms-efs-acm-awx.json
}

resource "aws_iam_policy" "amp-asset-sts-policy-s3" {
  name   = "amp-asset-sts-policy-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-asset-sts-policy-s3.json
}

resource "aws_iam_policy" "ampp-portal-policy" {
  description = "ampp-portal-policy"
  name        = "ampp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-portal-policy.json
}

resource "aws_iam_policy" "TaggingPolicy2" {
  name   = "TaggingPolicy2"
  path   = var.path
  policy = data.aws_iam_policy_document.TaggingPolicy2.json
}

resource "aws_iam_policy" "ampp-amazon-rekognition-amp-prod-sns-topic-policy" {
  name   = "ampp-amazon-rekognition-amp-prod-sns-topic-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-amazon-rekognition-amp-prod-sns-topic-policy.json
}

resource "aws_iam_policy" "ampp-iam-passrole-access-policy" {
  name   = "ampp-iam-passrole-access-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-iam-passrole-access-policy.json
}

resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" {
  description = "AWSLoadBalancerControllerIAMPolicy"
  name        = "AWSLoadBalancerControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "ampp-eks-amp-prod-as-asset-service-sa-policy" {
  description = "ampp-eks-amp-prod-as-asset-service-sa-policy"
  name        = "ampp-eks-amp-prod-as-asset-service-sa-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-eks-amp-prod-as-asset-service-sa-policy.json
}

resource "aws_iam_policy" "eks-full-access-policy" {
  description = "eks-full-access-policy"
  name        = "eks-full-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.eks-full-access-policy.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "rdsadmin-lambda-access" {
  description = "Allow RDSAdmin role to access lambda functions"
  name        = "rdsadmin-lambda-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.rdsadmin-lambda-access.json
}

resource "aws_iam_policy" "ampp-asset-maintenance" {
  name   = "ampp-asset-maintenance"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-asset-maintenance.json
}

resource "aws_iam_policy" "ampp-lambda-layers-policy" {
  name   = "ampp-lambda-layers-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-lambda-layers-policy.json
}

resource "aws_iam_policy" "ampp-eventbridge-policy" {
  description = "Policy used to manage tags on EventBridge resources"
  name        = "ampp-eventbridge-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-eventbridge-policy.json
}

resource "aws_iam_policy" "ampp-aoma-da-user-policy" {
  description = "ampp-aoma-da-user-policy"
  name        = "ampp-aoma-da-user-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-aoma-da-user-policy.json
}

resource "aws_iam_policy" "ampp-archives-uslatin-admin" {
  description = "ampp-archives-uslatin-admin"
  name        = "ampp-archives-uslatin-admin"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-archives-uslatin-admin.json
}

resource "aws_iam_policy" "ampp-archives-uslatin-uploader" {
  description = "ampp-archives-uslatin-uploader"
  name        = "ampp-archives-uslatin-uploader"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-archives-uslatin-uploader.json
}

resource "aws_iam_policy" "ampp-assets-db-s3-access" {
  description = "ampp-assets-db-s3-access"
  name        = "ampp-assets-db-s3-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-assets-db-s3-access.json
}

resource "aws_iam_policy" "da-asset-importer-role-policy" {
  description = "da-asset-importer-role-policy"
  name        = "da-asset-importer-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-asset-importer-role-policy.json
}

resource "aws_iam_policy" "da-asset-sonyCiImporter-role-policy" {
  description = "da-asset-sonyCiImporter-role-policy"
  name        = "da-asset-sonyCiImporter-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-asset-sonyCiImporter-role-policy.json
}

resource "aws_iam_policy" "CelineDion-IAmCeline-admin" {
  description = "CelineDion_IAmCeline-admin"
  name        = "CelineDion_IAmCeline-admin"
  path        = var.path
  policy      = data.aws_iam_policy_document.CelineDion-IAmCeline-admin.json
}

resource "aws_iam_policy" "sme-ust-ci-transfer-role-policy" {
  description = "sme-ust-ci-transfer-role-policy"
  name        = "sme-ust-ci-transfer-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-ust-ci-transfer-role-policy.json
}

resource "aws_iam_policy" "lambda-s3-sqs-access-policy" {
  description = "lambda-s3-sqs-access-policy"
  name        = "lambda-s3-sqs-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda-s3-sqs-access-policy.json
}

resource "aws_iam_policy" "amp-ast-srv-sqs-policy" {
  description = "amp-ast-srv-sqs-policy"
  name        = "amp-ast-srv-sqs-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-ast-srv-sqs-policy.json
}

resource "aws_iam_policy" "da-s3-importer-prod-role-policy" {
  description = "da-s3-importer-prod-role-policy"
  name        = "da-s3-importer-prod-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-s3-importer-prod-role-policy.json
}

resource "aws_iam_policy" "amp-archives-cmg-admin-policy" {
  description = "amp-archives-cmg-admin-policy"
  name        = "amp-archives-cmg-admin-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-archives-cmg-admin-policy.json
}

resource "aws_iam_policy" "amp-archives-cmg-uploader-policy" {
  description = "amp-archives-cmg-uploader-policy"
  name        = "amp-archives-cmg-uploader-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-archives-cmg-uploader-policy.json
}

resource "aws_iam_policy" "ampp-smej-policy" {
  description = "ampp-smej-policy"
  name        = "ampp-smej-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ampp-smej-policy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-amp-prod-as-eks" {
  name        = "KarpenterControllerPolicy-amp-prod-as-eks"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-amp-prod-as-eks.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-amp-prod-da" {
  name        = "KarpenterControllerPolicy-amp-prod-da"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-amp-prod-da.json
}

resource "aws_iam_policy" "amp-asset-catalog-transfer-India-policy" {
  name        = "amp-asset-catalog-transfer-India-policy"
  description = "Access for S3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-catalog-transfer-India-policy.json
}

resource "aws_iam_policy" "amp-asset-catalog-transfer-Poland-policy" {
  name        = "amp-asset-catalog-transfer-Poland-policy"
  description = "Access for S3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-catalog-transfer-Poland-policy.json
}

resource "aws_iam_policy" "amp-assets-quicksight-prog" {
  name   = "amp-assets-quicksight-prog"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-assets-quicksight-prog.json
  tags = {
    "JIRA" = "CLOUDOPS-21173"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-21173"
  }
}

resource "aws_iam_policy" "amp-asset-catalog-transfer-China-policy" {
  name        = "amp-asset-catalog-transfer-China-policy"
  description = "Access for S3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-catalog-transfer-China-policy.json
}

resource "aws_iam_policy" "amp-asset-catalog-transfer-Greece-policy" {
  name        = "amp-asset-catalog-transfer-Greece-policy"
  description = "Access for S3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-catalog-transfer-Greece-policy.json
}

resource "aws_iam_policy" "amp-archive-global-podcast-admin-policy" {
  name   = "amp-archive-global-podcast-admin-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-archive-global-podcast-admin-policy.json
}

resource "aws_iam_policy" "amp-archive-global-podcast-uploader-policy" {
  name   = "amp-archive-global-podcast-uploader-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.amp-archive-global-podcast-uploader-policy.json
}

resource "aws_iam_policy" "ampp-ameba-db-athena-policy" {
  name   = "ampp-ameba-db-athena-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-ameba-db-athena-policy.json
}

resource "aws_iam_policy" "ampp-quicksight-prog" {
  name   = "ampp-quicksight-prog"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-quicksight-prog.json
}

resource "aws_iam_policy" "ampp-cloudops-22565" {
  name   = "ampp-cloudops-22565"
  path   = var.path
  policy = data.aws_iam_policy_document.ampp-cloudops-22565.json
}


resource "aws_iam_policy" "amp-asset-catalog-transfer-Malaysia-policy" {
  name        = "amp-asset-catalog-transfer-Malaysia-policy"
  description = "Access for S3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-catalog-transfer-Malaysia-policy.json
}

resource "aws_iam_policy" "amp-asset-catalog-transfer-Spain-policy" {
  name        = "amp-asset-catalog-transfer-Spain-policy"
  description = "Access for S3"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-catalog-transfer-Spain-policy.json
}

resource "aws_iam_policy" "AOMA-Prod-DB-Creds-amino-srvc-Assume-Role-Policy" {
  description = "AOMA-Prod-DB-Creds-amino-srvc-Assume-Role-Policy"
  name        = "AOMA-Prod-DB-Creds-amino-srvc-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Prod-DB-Creds-amino-srvc-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Prod-DB-Creds-asset-imp-Assume-Role-Policy" {
  description = "AOMA-Prod-DB-Creds-asset-imp-Assume-Role-Policy"
  name        = "AOMA-Prod-DB-Creds-asset-imp-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Prod-DB-Creds-asset-imp-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Prod-DB-Creds-batch-init-Assume-Role-Policy" {
  description = "AOMA-Prod-DB-Creds-batch-init-Assume-Role-Policy"
  name        = "AOMA-Prod-DB-Creds-batch-init-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Prod-DB-Creds-batch-init-Assume-Role-Policy.json
}

resource "aws_iam_policy" "AOMA-Prod-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy" {
  description = "AOMA-Prod-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy"
  name        = "AOMA-Prod-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-Prod-DB-Creds-cntct-sht-hndlr-Assume-Role-Policy.json
}