data "aws_iam_policy_document" "amp-asset-repo-vid-0014-p-use1_policy_doc" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0014-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0014-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0014-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0014-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0014-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0014-p_policy_doc" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0014-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0014-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0014-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0014-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role"
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0014-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0014-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-archive-export-request-payloads-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-archive-export-request-payloads-prod/*",
      "arn:aws:s3:::amp-archive-export-request-payloads-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1606927450505"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-archive-export-request-payloads-prod/*",
      "arn:aws:s3:::amp-archive-export-request-payloads-prod",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp2-app01-role",
        "arn:aws:iam::554998489284:role/ampp-ampdap-exporter01",
        "arn:aws:iam::554998489284:role/ampp-aoma-da-user-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-archive-exports-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-archive-exports-prod/*",
      "arn:aws:s3:::amp-archive-exports-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1534407269508"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-archive-exports-prod/*",
      "arn:aws:s3:::amp-archive-exports-prod",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amp-export-prod",
        "arn:aws:iam::554998489284:role/ampp-ampdap-exporter01",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
        "arn:aws:iam::554998489284:role/ampp-ampdap-aspera01",
        "arn:aws:iam::554998489284:role/ampp-ampdap-aspera02",
        "arn:aws:iam::554998489284:role/ampp-aoma-da-user-role",
        "arn:aws:iam::613871678587:user/aomap-amp-archive-exports-prod",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-archive-exports-prod/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}
data "aws_iam_policy_document" "amp-archives-uslatin" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-archives-uslatin/*",
      "arn:aws:s3:::amp-archives-uslatin",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1534407269508"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-archives-uslatin",
      "arn:aws:s3:::amp-archives-uslatin/*",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/da-s3-importer-prod-role",
        "arn:aws:iam::554998489284:user/amp-archives-uslatin-uploader",
        "arn:aws:iam::554998489284:user/amp-archives-uslatin-admin",
      ]
    }
  }
}
#data "aws_iam_policy_document" "amp-asset-catalog-transfer" {
#
#  statement {
#    sid    = "Stmt15344072508"
#    effect = "Allow"
#
#    resources = [
#      "arn:aws:s3:::amp-asset-catalog-transfer",
#      "arn:aws:s3:::amp-asset-catalog-transfer/*",
#    ]
#
#    actions = ["s3:*"]
#
#    principals {
#      type = "AWS"
#
#      identifiers = [
#        "arn:aws:iam::554998489284:user/amp-asset-catalog-transfer",
#        "arn:aws:iam::554998489284:role/ampp-cloudops-22565",
#      ]
#    }
#  }
#}

data "aws_iam_policy_document" "celinedion-iamceline" {
  statement {
    sid    = "Stmt1534407269508"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::celinedion-iamceline",
      "arn:aws:s3:::celinedion-iamceline/*",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/da-s3-importer-prod",
        "arn:aws:iam::554998489284:user/CelineDion-IAmCeline-admin",
        "arn:aws:iam::554998489284:role/da-s3-importer-prod-role"

      ]
    }
  }
}
data "aws_iam_policy_document" "amp-archive-ColumbiaRecords" {
  statement {
    sid    = "Stmt1534407269508"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-archive-columbiarecords",
      "arn:aws:s3:::amp-archive-columbiarecords/*",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/amp-archive-ColumbiaRecords-admin",
        "arn:aws:iam::554998489284:user/amp-archive-ColumbiaRecords-uploader"

      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-amb-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-amb-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-amb-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-amb-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-amb-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-amb-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-amb-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-amb-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-amb-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-amb-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-amb-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-amb-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-amb-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-cloudops-22565",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-aud-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-aud-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-aud-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0002-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0002-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0002-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-cloudops-22565",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0002-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0002-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-aud-0002-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-aud-0002-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-aud-0002-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0003-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0003-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0003-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0003-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0003-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-cloudops-22565",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0003-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0003-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0003-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0003-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-aud-0003-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0003-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-aud-0003-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-aud-0003-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0004-p" {
  statement {
    sid    = "Maintenance"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role"
      ]
    }

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0004-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0004-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
      ]
    }

    actions = [
      "s3:List*",
      "s3:Get*"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0004-p/*",
      "arn:aws:s3:::amp-asset-repo-aud-0004-p"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-aud-0004-p-use1" {
  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator"
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::amp-asset-repo-aud-0004-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-aud-0004-p-use1"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-digb-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-digb-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-digb-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-digb-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-digb-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-digb-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-digb-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-digb-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-digb-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-digb-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-digb-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-digb-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-digb-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-doc-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-doc-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-doc-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-doc-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-doc-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-doc-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-doc-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-doc-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-doc-0002-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-doc-0002-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-doc-0002-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-doc-0002-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-doc-0002-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-doc-0002-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-doc-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-doc-0002-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-doc-0002-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-dod-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-dod-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-dod-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-dod-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-dod-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-dod-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-dod-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-dod-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-dod-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-dod-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-dod-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-dod-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-dod-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-gra-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-gra-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-gra-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-gra-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-gra-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-gra-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-gra-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-gra-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-gra-0002-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-gra-0002-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-gra-0002-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-gra-0002-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-gra-0002-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-gra-0002-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-gra-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-gra-0002-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-gra-0002-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-lfv-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-lfv-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-logs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-logs/*",
      "arn:aws:s3:::amp-asset-repo-logs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-logs/*",
      "arn:aws:s3:::amp-asset-repo-logs",
    ]

    actions = ["s3:*"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::554998489284:user/ampp-asset-retrieve"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::amp-asset-repo-logs/amp-asset-storage-metrics/StorageLens/554998489284/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:eu-central-1:554998489284:storage-lens/amp-asset-service"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["storage-lens.s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1670389888012"
    effect    = "Allow"
    resources = ["arn:aws:s3:::amp-asset-repo-logs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-packg-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-packg-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-packg-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-packg-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-packg-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-packg-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-packg-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-packg-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-packg-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-packg-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-packg-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-packg-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-packg-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0001-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0001-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0001-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0001-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0001-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0001-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0001-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0001-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0002-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0002-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0002-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0002-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0002-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0002-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0002-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0002-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0003-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0003-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0003-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0003-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0003-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0003-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0003-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0003-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0003-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0003-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0003-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0003-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0003-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0004-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0004-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0004-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0004-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0004-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0004-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0004-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0004-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0004-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0004-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0004-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0004-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/service-role/AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p-use1",
        "arn:aws:iam::554998489284:role/service-role/AWSDataSyncS3BucketAccess-amp-asset-repo-vid-0004-p",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0004-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0005-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0005-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0005-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0005-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0005-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0005-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0005-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0005-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0005-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0005-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0005-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0005-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0005-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0006-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0006-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0006-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0006-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0006-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0006-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0006-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0006-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0006-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0006-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0006-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0006-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0006-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0007-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0007-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0007-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0007-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0007-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0007-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0007-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0007-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0007-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0007-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0007-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0007-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0007-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0008-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0008-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0008-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0008-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0008-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0008-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0008-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0008-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0008-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0008-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0008-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0008-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0008-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0009-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0009-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0009-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0009-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0009-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0009-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0009-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0009-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0009-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0009-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0009-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0009-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0009-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0010-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0010-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0010-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0010-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0010-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0010-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0010-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0010-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0010-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0010-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0010-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0010-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0010-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0011-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0011-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0011-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0011-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0011-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0011-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0011-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0011-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0011-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0011-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0011-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0011-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0011-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0012-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0012-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0012-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0012-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0012-p",
    ]

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
      ]
    }
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0012-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0012-p",
    ]

    actions = [
      "s3:List*",
      "s3:Get*",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0012-p-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0012-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0012-p-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0012-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0012-p-use1",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-asset-repo-vid-0012-p-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-service-lambda-code-source-prod-eu" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-service-lambda-code-source-prod-eu/*",
      "arn:aws:s3:::amp-asset-service-lambda-code-source-prod-eu",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-transfer-sqs-payloads-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-transfer-sqs-payloads-prod/*",
      "arn:aws:s3:::amp-asset-transfer-sqs-payloads-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1606928305751"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-transfer-sqs-payloads-prod/*",
      "arn:aws:s3:::amp-asset-transfer-sqs-payloads-prod",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ampdap-transferor01",
        "arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01",
        "arn:aws:iam::554998489284:role/ampp2-app02-role",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-usr-amino-export-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-usr-amino-export-p/*",
      "arn:aws:s3:::amp-asset-usr-amino-export-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1636468864216"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-usr-amino-export-p/*",
      "arn:aws:s3:::amp-asset-usr-amino-export-p",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::638682502729:user/mconp-amp-s3",
        "arn:aws:iam::638682502729:user/mconp-vantage-delivery-prod-s3-access",
        "arn:aws:iam::554998489284:user/ampp-tusd"
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-usr-aoma-core-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-usr-aoma-core-p/*",
      "arn:aws:s3:::amp-asset-usr-aoma-core-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-usr-aoma-core-p/*",
      "arn:aws:s3:::amp-asset-usr-aoma-core-p",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/AnsibleAWSServiceAccess-AMP-P",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:user/ampp-tusd"
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-usr-processor-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-usr-processor-p/*",
      "arn:aws:s3:::amp-asset-usr-processor-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-usr-processor-p/*",
      "arn:aws:s3:::amp-asset-usr-processor-p",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-asset-app",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera01",
        "arn:aws:iam::554998489284:user/ampp-tusd",
        "arn:aws:iam::554998489284:role/ampp-cloudops-22565",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-usr-ust-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-usr-ust-p/*",
      "arn:aws:s3:::amp-asset-usr-ust-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-usr-ust-p/*",
      "arn:aws:s3:::amp-asset-usr-ust-p",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:user/ampp-mcon-ust-prod",
        "arn:aws:iam::023180329437:user/media-conversion-aws-prod",
        "arn:aws:iam::554998489284:user/ampp-asset-usr-ust",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera01",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-audio-archives-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-audio-archives-prod/*",
      "arn:aws:s3:::amp-audio-archives-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1511845814120"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-audio-archives-prod/*",
      "arn:aws:s3:::amp-audio-archives-prod",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
        "arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01",
        "arn:aws:iam::554998489284:role/ampp-ampdap-transferor01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::613871678587:role/ameba-prod-ns-digital-archive-sa-amp-asset-preview-service",
        "arn:aws:iam::554998489284:role/ampp-ampdap-exporter01",
        "arn:aws:iam::554998489284:role/s3crr_role_for_amp-audio-archive-prd_to_amp-audio-archive-prd-eu",
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::613871678587:role/aomap-prod-presvc",
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::505950216627:role/ecsInstanceRole",
        "arn:aws:iam::505950216627:role/ecs-service-role",
        "arn:aws:iam::554998489284:role/ampp-amazon-rekognition-access-role",
        "arn:aws:iam::554998489284:role/ampp-aoma-da-user-role",
        "arn:aws:iam::505950216627:role/promop-mcon-s3-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-audio-archives-prod-eu" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-audio-archives-prod-eu/*",
      "arn:aws:s3:::amp-audio-archives-prod-eu",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1511845814120"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-audio-archives-prod-eu/*",
      "arn:aws:s3:::amp-audio-archives-prod-eu",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-prod-presvc",
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::554998489284:role/s3crr_role_for_amp-audio-archive-prd_to_amp-audio-archive-prd-eu",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-mediaconvert-output-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-mediaconvert-output-prod/*",
      "arn:aws:s3:::amp-mediaconvert-output-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1649080841570"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-mediaconvert-output-prod/*",
      "arn:aws:s3:::amp-mediaconvert-output-prod",
    ]

    actions = [
      "s3:PutObjectAcl",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectAcl",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ampdap-transferor01",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-p2-vpc-flow-logs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-p2-vpc-flow-logs/*",
      "arn:aws:s3:::amp-p2-vpc-flow-logs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::amp-p2-vpc-flow-logs/AWSLogs/554998489284/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::amp-p2-vpc-flow-logs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1648576315500"
    effect    = "Allow"
    resources = ["arn:aws:s3:::amp-p2-vpc-flow-logs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "amp-photo-archives-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-photo-archives-prod/*",
      "arn:aws:s3:::amp-photo-archives-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1511845814120"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-photo-archives-prod/*",
      "arn:aws:s3:::amp-photo-archives-prod",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01",
        "arn:aws:iam::613871678587:role/ameba-prod-ns-digital-archive-sa-amp-asset-preview-service",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::554998489284:role/ampp-aoma-da-user-role",
        "arn:aws:iam::554998489284:role/service-role/s3crr_role_for_amp-photo-archives-prod_to_amp-photo-archives-pro",
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::505950216627:role/ecs-service-role",
        "arn:aws:iam::554998489284:role/ampp-ampdap-transferor01",
        "arn:aws:iam::505950216627:role/ecsInstanceRole",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ampdap-exporter01",
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::554998489284:role/ampp-amazon-rekognition-access-role",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::505950216627:role/promop-mcon-s3-role",
        "arn:aws:iam::613871678587:role/aomap-prod-presvc",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-photo-archives-prod-eu" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-photo-archives-prod-eu/*",
      "arn:aws:s3:::amp-photo-archives-prod-eu",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1511845814120"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-photo-archives-prod-eu/*",
      "arn:aws:s3:::amp-photo-archives-prod-eu",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::613871678587:role/aomap-prod-presvc",
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::554998489284:role/service-role/s3crr_role_for_amp-photo-archives-prod_to_amp-photo-archives-pro",
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-prod-athena-queries" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-prod-athena-queries/*",
      "arn:aws:s3:::amp-prod-athena-queries",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-prod-vpc-flow-logs-eu" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-prod-vpc-flow-logs-eu/*",
      "arn:aws:s3:::amp-prod-vpc-flow-logs-eu",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::amp-prod-vpc-flow-logs-eu/AWSLogs/554998489284/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::amp-prod-vpc-flow-logs-eu"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "amp-transcribe-response-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-transcribe-response-prod/*",
      "arn:aws:s3:::amp-transcribe-response-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1589788701736"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-transcribe-response-prod/*",
      "arn:aws:s3:::amp-transcribe-response-prod",
    ]

    actions = ["s3:*"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::554998489284:role/ampp-ampdap-transferor01"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::amp-transcribe-response-prod/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp-video-archives-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-video-archives-prod/*",
      "arn:aws:s3:::amp-video-archives-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1511845814120"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-video-archives-prod/*",
      "arn:aws:s3:::amp-video-archives-prod",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::505950216627:role/ecsInstanceRole",
        "arn:aws:iam::505950216627:role/promop-mcon-s3-role",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
        "arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01",
        "arn:aws:iam::554998489284:role/ampp-aoma-da-user-role",
        "arn:aws:iam::554998489284:role/service-role/s3crr_role_for_amp-video-archives-prod_to_amp-video-archives-pro",
        "arn:aws:iam::554998489284:role/ampp-amazon-rekognition-access-role",
        "arn:aws:iam::554998489284:role/ampp-ampdap-exporter01",
        "arn:aws:iam::613871678587:role/aomap-prod-presvc",
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::613871678587:role/ameba-prod-ns-digital-archive-sa-amp-asset-preview-service",
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::505950216627:role/ecs-service-role",
        "arn:aws:iam::554998489284:role/ampp-ampdap-transferor01",
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-video-archives-prod-eu" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-video-archives-prod-eu/*",
      "arn:aws:s3:::amp-video-archives-prod-eu",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1511845814120"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-video-archives-prod-eu/*",
      "arn:aws:s3:::amp-video-archives-prod-eu",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01",
        "arn:aws:iam::554998489284:role/service-role/s3crr_role_for_amp-video-archives-prod_to_amp-video-archives-pro",
        "arn:aws:iam::613871678587:role/aomap-prod-presvc",
        "arn:aws:iam::613871678587:role/asset-preview-service-mediaconvert-prod",
      ]
    }
  }
}

data "aws_iam_policy_document" "ampp-da-s3-exports-test" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::ampp-da-s3-exports-test/*",
      "arn:aws:s3:::ampp-da-s3-exports-test",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1534407269508"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::ampp-da-s3-exports-test/*",
      "arn:aws:s3:::ampp-da-s3-exports-test",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-da-s3-exporter",
        "arn:aws:iam::554998489284:role/da-s3-importer-prod-role"
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::ampp-da-s3-exports-test/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "ampp-os-manualsnapshots" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::ampp-os-manualsnapshots/*",
      "arn:aws:s3:::ampp-os-manualsnapshots",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "aws-athena-query-results-554998489284-us-east-1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::aws-athena-query-results-554998489284-us-east-1/*",
      "arn:aws:s3:::aws-athena-query-results-554998489284-us-east-1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1541175037334"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::aws-athena-query-results-554998489284-us-east-1/*",
      "arn:aws:s3:::aws-athena-query-results-554998489284-us-east-1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "batch-operations-temp-euc1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::batch-operations-temp-euc1/*",
      "arn:aws:s3:::batch-operations-temp-euc1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "batch-operations-temp-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::batch-operations-temp-use1/*",
      "arn:aws:s3:::batch-operations-temp-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "cf-templates-o195cp1madaz-us-east-1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::cf-templates-o195cp1madaz-us-east-1/*",
      "arn:aws:s3:::cf-templates-o195cp1madaz-us-east-1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "Stmt1541175037334"
    effect    = "Deny"
    resources = ["arn:aws:s3:::cf-templates-o195cp1madaz-us-east-1"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "isilon-migration" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::isilon-migration/*",
      "arn:aws:s3:::isilon-migration",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1541175037334"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::isilon-migration/*",
      "arn:aws:s3:::isilon-migration",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1645117769289"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::isilon-migration/*",
      "arn:aws:s3:::isilon-migration",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/AWSDataSyncS3BucketAccess-isilon-migration",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/ampp-ampdap-transferor01",
        "arn:aws:iam::554998489284:role/lambda-s3-sqs-access",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::isilon-migration/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "metadata-extract-request-sqs-payloads-prod" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::metadata-extract-request-sqs-payloads-prod/*",
      "arn:aws:s3:::metadata-extract-request-sqs-payloads-prod",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1511845814120"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::metadata-extract-request-sqs-payloads-prod/*",
      "arn:aws:s3:::metadata-extract-request-sqs-payloads-prod",
    ]

    actions = ["s3:*"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::613871678587:role/aomap-aomap-ampcntpv01"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-aas-p2-vpc-flowlogs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-aas-p2-vpc-flowlogs/*",
      "arn:aws:s3:::sme-amp-aas-p2-vpc-flowlogs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-aas-p2-vpc-flowlogs/AWSLogs/554998489284/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:logs:eu-central-1:554998489284:*"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-aas-p2-vpc-flowlogs"]
    actions   = ["s3:GetBucketAcl"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:logs:eu-central-1:554998489284:*"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-digarch-p-vpc-flowlogs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-digarch-p-vpc-flowlogs/*",
      "arn:aws:s3:::sme-amp-digarch-p-vpc-flowlogs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-digarch-p-vpc-flowlogs/AWSLogs/554998489284/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-digarch-p-vpc-flowlogs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-assets-db-archive" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-assets-db-archive/*",
      "arn:aws:s3:::sme-amp-prod-assets-db-archive",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-awsconfig" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-awsconfig/*",
      "arn:aws:s3:::sme-amp-prod-awsconfig",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-awsconfig/*"]
    actions   = ["s3:GetObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-awsconfig"]
    actions   = ["s3:ListBucket"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-awsconfig/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-db-team-lambda" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-db-team-lambda/*",
      "arn:aws:s3:::sme-amp-prod-db-team-lambda",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "PublicReadGetObject"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-amp-prod-db-team-lambda/*",
      "arn:aws:s3:::sme-amp-prod-db-team-lambda",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/PostgreSQL-Credentials-Rotation-Role",
        "arn:aws:iam::554998489284:role/RDSAdmin",
      ]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-elb-logs-eu-central-1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-elb-logs-eu-central-1/*",
      "arn:aws:s3:::sme-amp-prod-elb-logs-eu-central-1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-eu-central-1/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::054676820928:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-eu-central-1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-eu-central-1"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1676978324409"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-eu-central-1/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-eu-central-1-logs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-eu-central-1-logs/*",
      "arn:aws:s3:::sme-amp-prod-eu-central-1-logs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "Stmt1541175004562"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-eu-central-1-logs"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1639325320975"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-eu-central-1-logs/*"]

    actions = [
      "s3:PutObjectAcl",
      "s3:PutObject",
    ]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-euc1-s3-inventory" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*",
      "arn:aws:s3:::sme-amp-prod-euc1-s3-inventory",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy1"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0002-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy2"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0003-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy3"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0004-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy4"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0005-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy5"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0006-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy6"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-aud-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy7"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-gra-0001-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy8"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-logs"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy9"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy10"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-usr-aoma-core-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy11"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-usr-processor-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy12"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-usr-ust-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryDownloadAccessForIAMUser"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory"]
    actions   = ["s3:ListBucket"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::554998489284:user/ampp-inventory-retrieval"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*",
      "arn:aws:s3:::sme-amp-prod-euc1-s3-inventory",
    ]

    actions = [
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:GetObjectVersion",
      "s3:GetObjectAttributes",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::554998489284:user/ampp-asset-maintenance"]
    }
  }

  statement {
    sid       = "Policy0"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0007-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy13"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-doc-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy14"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0008-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy15"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-lfv-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy16"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-aud-0002-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy17"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-gra-0002-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy18"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0009-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy19"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-digb-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy20"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-digb-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy21"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-packg-0001-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy22"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-amb-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy23"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-dod-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy24"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0010-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy25"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0011-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "Policy26"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0012-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-rds-backups" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-rds-backups/*",
      "arn:aws:s3:::sme-amp-prod-rds-backups",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-rds-backups/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "ExportPolicy"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-amp-prod-rds-backups/*",
      "arn:aws:s3:::sme-amp-prod-rds-backups",
    ]

    actions = [
      "s3:PutObject*",
      "s3:ListBucket",
      "s3:GetObject*",
      "s3:GetBucketLocation",
      "s3:DeleteObject*",
    ]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-RDS_snapshot_lambda-role",
        "arn:aws:iam::613871678587:user/aomap-quicksight-prog",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AOMA-Prod-RDS-Admin_f59242ad373b08d3",
        "arn:aws:iam::613871678587:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AOMA-Prod-RDS-Admin_996831c7ddcc84af",
        "arn:aws:iam::613871678587:role/RDS-role-for-lambda"
      ]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-rds-backups-nv" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-rds-backups-nv/*",
      "arn:aws:s3:::sme-amp-prod-rds-backups-nv",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-rds-backups-nv/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "ExportPolicy"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-amp-prod-rds-backups-nv/*",
      "arn:aws:s3:::sme-amp-prod-rds-backups-nv",
    ]

    actions = [
      "s3:PutObject*",
      "s3:ListBucket",
      "s3:GetObject*",
      "s3:GetBucketLocation",
      "s3:DeleteObject*",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::554998489284:role/amp-RDS_snapshot_lambda-role"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-ssm-out" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-ssm-out/*",
      "arn:aws:s3:::sme-amp-prod-ssm-out",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-storage-class-analysis-logs-euc1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*",
      "arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220595893"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-aud-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220634402"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-gra-0001-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220678052"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220701942"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0002-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220728469"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0003-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220758568"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0004-p"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220783878"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0005-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220809651"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0006-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1639447956343"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-euc1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-doc-0001-p"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-storage-class-analysis-logs-use1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*",
      "arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220899666"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-aud-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220928281"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-gra-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220967367"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0001-p-use1"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635220997079"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0002-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635221021248"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0003-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635221045398"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0004-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635221070531"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0005-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1635221101346"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-storage-class-analysis-logs-use1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0006-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-terraform-state-files" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-terraform-state-files/*",
      "arn:aws:s3:::sme-amp-prod-terraform-state-files",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-us-east-1-logs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-us-east-1-logs/*",
      "arn:aws:s3:::sme-amp-prod-us-east-1-logs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "Stmt1541174940797"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-us-east-1-logs"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-us-east-1-logs/ampsv-storage-lens-metrics/StorageLens/554998489284/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:us-east-1:554998489284:storage-lens/default-account-dashboard"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["storage-lens.s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1638537961742"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-us-east-1-logs/*"]

    actions = [
      "s3:PutObjectAcl",
      "s3:PutObject",
    ]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-use1-alb-logs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-use1-alb-logs/*",
      "arn:aws:s3:::sme-amp-prod-use1-alb-logs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "AWSConsoleStmt-1595320782827"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-alb-logs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::127311923021:root"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-alb-logs/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-alb-logs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-use1-s3-inventory" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*",
      "arn:aws:s3:::sme-amp-prod-use1-s3-inventory",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy1"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0006-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy2"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-aud-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy3"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-gra-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy4"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0001-p-use1"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy5"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0002-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy6"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0003-p-use1"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy7"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0004-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy8"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0005-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryDownloadAccessForIAMUser"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory"]
    actions   = ["s3:ListBucket"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::554998489284:user/ampp-inventory-retrieval"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*",
      "arn:aws:s3:::sme-amp-prod-use1-s3-inventory",
    ]

    actions = [
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:GetObjectVersion",
      "s3:GetObjectAttributes",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::554998489284:user/ampp-asset-maintenance"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy9"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::isilon-migration"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy10"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0007-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy11"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-doc-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy12"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0008-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy13"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-lfv-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy14"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-aud-0002-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy15"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-gra-0002-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy16"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0009-p-use1"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy17"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-digb-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy18"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-packg-0001-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy19"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-vid-0010-p-use1"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "InventoryAndAnalyticsExamplePolicy20"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::amp-asset-repo-dod-0001-p-use1"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["554998489284"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-ust-ci-transfer" {

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-ust-ci-transfer/*",
      "arn:aws:s3:::sme-ust-ci-transfer",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/sme-ust-ci-transfer", "arn:aws:iam::613871678587:role/ameba-prod-eks-ns-aoma3-sa-ust-sonyci-uti-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-archives-cmg" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-archives-cmg/*",
      "arn:aws:s3:::amp-archives-cmg",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-archives-cmg/*",
      "arn:aws:s3:::amp-archives-cmg",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/amp-archives-cmg-admin",
        "arn:aws:iam::887829410671:user/da-s3-importer-stage",
        "arn:aws:iam::554998489284:role/da-s3-importer-prod-role",
        "arn:aws:iam::887829410671:role/da-s3-importer-stage-role",
        "arn:aws:iam::887829410671:role/ampd-EKS-worker-node-Role",
        "arn:aws:iam::887829410671:user/da-s3-importer"
      ]
    }
  }
}

data "aws_iam_policy_document" "amp-asset-usr-smej-p" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::amp-asset-usr-smej-p/*",
      "arn:aws:s3:::amp-asset-usr-smej-p",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-asset-usr-smej-p/*",
      "arn:aws:s3:::amp-asset-usr-smej-p",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:user/ampp-mcon-ust-prod",
        "arn:aws:iam::023180329437:user/media-conversion-aws-prod",
        "arn:aws:iam::554998489284:user/ampp-asset-usr-ust",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::638682502729:role/mconp-del-s3-source-target",
        "arn:aws:iam::638682502729:role/AWSBatchServiceRole",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-smej",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera01",
      ]
    }
  }
}
data "aws_iam_policy_document" "sme_amp_prod_archive_import" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::sme-amp-prod-archive-import/*",
      "arn:aws:s3:::sme-amp-prod-archive-import"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::613871678587:role/ameba-prod-ns-digital-archive-sa-amp-aspera-util-role",
        "arn:aws:iam::554998489284:role/da-asset-importer-prod-role",
        "arn:aws:iam::476717493283:user/ccshr-eks-admin",
        "arn:aws:iam::554998489284:role/da-asset-importer-prod-role"
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::sme-amp-prod-archive-import/*",
      "arn:aws:s3:::sme-amp-prod-archive-import"
    ]
  }
}
data "aws_iam_policy_document" "amp_asset_repo_vid_0013_p_use1" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0013-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0013-p-use1"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282"
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0013-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0013-p-use1"
    ]
  }

  statement {
    effect = "Deny"

    principals {
      type        = "*"
      identifiers = ["*"]
    }

    actions = ["*"]

    resources = ["arn:aws:s3:::amp-asset-repo-vid-0013-p-use1/*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }
  }
}

data "aws_iam_policy_document" "amp_asset_repo_lfv_0002_p_use1" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p-use1"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp_asset_repo_dvdddp_0001_p_use1" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p-use1"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282"
      ]
    }
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p-use1"
    ]
  }

  statement {
    effect = "Deny"
    principals {
      type        = "*"
      identifiers = ["*"]
    }
    actions   = ["*"]
    resources = ["arn:aws:s3:::amp-asset-repo-dvdddp-0001-p-use1/*"]
    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }
  }
}

data "aws_iam_policy_document" "aws_athena_query_result_ampp" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::aws-athena-query-result-ampp/*",
      "arn:aws:s3:::aws-athena-query-result-ampp"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "amp_asset_repo_vid_0013_p" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0013-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0013-p"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::023180329437:role/delp2-packager-role"
      ]
    }
    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]
    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0013-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0013-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
    actions = [
      "s3:List*",
      "s3:Get*"
    ]
    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0013-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0013-p"
    ]
  }
}

data "aws_iam_policy_document" "amp_asset_repo_lfv_0002_p" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance"
      ]
    }
    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]
    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
    actions = [
      "s3:List*",
      "s3:Get*"
    ]
    resources = [
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p/*",
      "arn:aws:s3:::amp-asset-repo-lfv-0002-p"
    ]
  }
}

data "aws_iam_policy_document" "amp_asset_repo_dvdddp_0001_p" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Maintenance"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator"
      ]
    }
    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]
    resources = [
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role",
        "arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-sa-product-graphql-service",
      ]
    }
    actions = [
      "s3:List*",
      "s3:Get*"
    ]
    resources = [
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-dvdddp-0001-p"
    ]
  }
}

data "aws_iam_policy_document" "sme-amp-prod-elb-logs-us-east-1" {
  statement {
    sid     = "denyInsecureTransport"
    effect  = "Deny"
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::sme-amp-prod-elb-logs-us-east-1/*",
      "arn:aws:s3:::sme-amp-prod-elb-logs-us-east-1"
    ]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "AWSConsoleStmt-1559042704139"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-us-east-1/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::127311923021:root"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-us-east-1/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-us-east-1"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-amp-prod-elb-logs-us-east-1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-amp-prod-dw" {
  statement {
    sid    = "Stmt1663685047597"
    effect = "Allow"
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/RDS-role-for-lambda",
        "arn:aws:iam::613871678587:role/RDS-role-for-lambda",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-RDS-Admin_b2aff445e64ebc4f",
        "arn:aws:iam::613871678587:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AOMA-Prod-RDS-Admin_996831c7ddcc84af",
        "arn:aws:iam::554998489284:role/amp-RDS_snapshot_lambda-role",
        "arn:aws:iam::613871678587:user/aomap-quicksight-prog"
      ]
    }
    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::sme-amp-prod-dw/*",
      "arn:aws:s3:::sme-amp-prod-dw"
    ]
  }
}

data "aws_iam_policy_document" "amp-archive-global-podcast" {
  statement {
    sid    = ""
    effect = "Allow"

    resources = [
      "arn:aws:s3:::amp-archive-global-podcast/*",
      "arn:aws:s3:::amp-archive-global-podcast",
    ]

    actions = [
      "s3:ListBucket",
      "s3:GetObject",
      "s3:PutObject",
      "s3:DeleteObject"
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:user/amp-archive-global-podcast-admin",
      ]
    }
  }
}


data "aws_iam_policy_document" "amp-asset-repo-vid-0015-p" {
  statement {
    sid    = "Maintenance"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role"
      ]
    }

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0015-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0015-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role"
      ]
    }

    actions = [
      "s3:List*",
      "s3:Get*"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0015-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0015-p"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0015-p-use1" {
  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282"
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0015-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0015-p-use1"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0016-p" {
  statement {
    sid    = "Maintenance"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role"
      ]
    }

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0016-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0016-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role"
      ]
    }

    actions = [
      "s3:List*",
      "s3:Get*"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0016-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0016-p"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0016-p-use1" {
  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator"
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0016-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0016-p-use1"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0018-p" {
  statement {
    sid    = "Maintenance"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role"
      ]
    }

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0018-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0018-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
      ]
    }

    actions = [
      "s3:List*",
      "s3:Get*"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0018-p/*",
      "arn:aws:s3:::amp-asset-repo-vid-0018-p"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-vid-0018-p-use1" {
  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator"
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::amp-asset-repo-vid-0018-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-vid-0018-p-use1"
    ]
  }
}


data "aws_iam_policy_document" "sme-amp-prod-cs" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    resources = [
      "arn:aws:s3:::sme-amp-prod-cs/*",
      "arn:aws:s3:::sme-amp-prod-cs",
    ]

    actions = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

}

data "aws_iam_policy_document" "amp-asset-repo-blueray-0001-p" {
  statement {
    sid    = "Maintenance"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:user/ampp-asset-maintenance",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp2-packager-role"
      ]
    }

    actions = [
      "s3:PutObjectTagging",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetObjectTagging",
      "s3:GetObject",
      "s3:DeleteObjectVersion",
      "s3:DeleteObjectTagging",
      "s3:DeleteObject"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-blueray-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-blueray-0001-p"
    ]
  }

  statement {
    sid    = "Read-Only"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Processor-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ampaasp-aspera02",
        "arn:aws:iam::023180329437:role/delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-role",
        "arn:aws:iam::554998489284:user/ampp-amino-uploader-p",
        "arn:aws:iam::554998489284:role/ampp-batch-instance-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role"
      ]
    }

    actions = [
      "s3:List*",
      "s3:Get*"
    ]

    resources = [
      "arn:aws:s3:::amp-asset-repo-blueray-0001-p/*",
      "arn:aws:s3:::amp-asset-repo-blueray-0001-p"
    ]
  }
}

data "aws_iam_policy_document" "amp-asset-repo-blueray-0001-p-use1" {
  statement {
    sid    = "Stmt1590675183190"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:role/aws-reserved/sso.amazonaws.com/AWSReservedSSO_AMP-Prod-S3-Replicator_ffbb6f07b5253282",
        "arn:aws:iam::554998489284:user/ampp-asset-retrieve",
        "arn:aws:iam::554998489284:role/amp-prod-s3-replicator"
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::amp-asset-repo-blueray-0001-p-use1/*",
      "arn:aws:s3:::amp-asset-repo-blueray-0001-p-use1"
    ]
  }
}

data "aws_iam_policy_document" "amp-archives-queen" {
  statement {
    sid    = "Stmt15906751890"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::554998489284:user/ampp-queens-user",
      ]
    }

    actions = ["s3:*"]

    resources = [
      "arn:aws:s3:::amp-archives-queen/*",
      "arn:aws:s3:::amp-archives-queen"
    ]
  }
}