module "aomad-ameba-admin-group-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-ameba-admin-group.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/s3-policy",
    "arn:aws:iam::${var.account_id}:policy/eks_fullaccess",
    "arn:aws:iam::${var.account_id}:policy/globaldsd-ameba-kafkahq-admin-role-assume-policy",
    "arn:aws:iam::${var.account_id}:policy/global-ds-dev-msk",
    "arn:aws:iam::${var.account_id}:policy/rds-db-policy",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser",
    "arn:aws:iam::aws:policy/AWSCertificateManagerFullAccess",
    "arn:aws:iam::aws:policy/SecretsManagerReadWrite",
    "arn:aws:iam::${var.account_id}:policy/ameba-dev-msk-policy",
    aws_iam_policy.aomad-ameba-db-athena-policy.arn
  ]
}

module "aomad-arvato-ecr-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-arvato-ecr.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/CloudWatchFullAccess",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly",
  ]
}

module "aomad-developers-prog-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-developers-prog.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-developers-01-policy",
  ]
}

module "aomad-jenkins-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-jenkins-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-jenkins-s3",
    "arn:aws:iam::${var.account_id}:policy/eks_fullaccess",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/CloudFrontFullAccess",
    "arn:aws:iam::aws:policy/SecretsManagerReadWrite",
    "arn:aws:iam::aws:policy/AmazonECS_FullAccess",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
  ]
}

module "aomad-niko001-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-niko001.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/sme-aoma-ust-dev_s3bucket",
    "arn:aws:iam::aws:policy/CloudFrontFullAccess",
  ]
}

module "aomad-quicksight-prog-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-quicksight-prog.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-quicksight-prog-policy-v2",
    "arn:aws:iam::aws:policy/AWSQuickSightAssetBundleExportPolicy",
    "arn:aws:iam::aws:policy/AWSQuickSightAssetBundleImportPolicy",
    aws_iam_policy.aomad-ameba-db-athena-policy.arn
  ]
}

module "aomad-secrets-manager-group-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-secrets-manager-group.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-secrets-manager-policy",
  ]
}

module "aomad-shar051-prog-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-shar051-prog.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-shar051-prog-policy",
  ]
}

module "aomad-ust-assetupload-sqs-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-ust-assetupload-sqs.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-ust-assetupload-sqs",
    "arn:aws:iam::${var.account_id}:policy/aomad-eks-aomad-acars-dev-sqs-policy",
  ]
}

module "aomad-vleung1-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-vleung1.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-vleung1-policy",
  ]
}

module "aomas-secrets-manager-group-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomas-secrets-manager-group.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomas-secrets-manager-policy",
  ]
}

module "aomas-txmgr-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomas-txmgr.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/AOMA-SQS-Policy",
    "arn:aws:iam::${var.account_id}:policy/aomas-txmgr-s3-access-policy",
    "arn:aws:iam::${var.account_id}:policy/txmgr-stage-secrets-access",
    "arn:aws:iam::aws:policy/AWSLambda_ReadOnlyAccess",
    "arn:aws:iam::aws:policy/service-role/AWSLambdaRole",
  ]
}
module "aomad-secretsmgr-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-secrets-manager-group-temp.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aoma-dev-secrets-mgr-policy",
  ]
}
module "aoma_txmgr-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aoma_txmgr.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/AOMA-SQS-Policy",
    "arn:aws:iam::${var.account_id}:policy/txmgr-secrets-access-policy",
    "arn:aws:iam::${var.account_id}:policy/AOMA-TXMGR-S3-Policy",
    "arn:aws:iam::${var.account_id}:policy/aomas-txmgr-s3-access-policy",
    "arn:aws:iam::aws:policy/AWSLambda_ReadOnlyAccess",
    "arn:aws:iam::aws:policy/service-role/AWSLambdaRole",
  ]
}

module "aomad-del-mlib-msk-usr-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-del-mlib-msk-usr.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-del-mlib-msk-usr-policy",
  ]
}

module "aomad-arvato-es-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-arvato-es.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess",
    "arn:aws:iam::${var.account_id}:policy/aomad-arvato-es-policy",
  ]
}

module "aomad-msk-ampsv-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-msk-ampsv.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-msk-ampsv-policy",
  ]
}

module "aomad-msk-eom-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-msk-eom.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-msk-eom-policy",
  ]
}

module "aomad-ust-stage-s3-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-ust-stage-s3.name
  custom_group_policy_arns = [
    aws_iam_policy.aomad-ust-stage-s3-policy.arn,
  ]
}

module "aomad-workbench-test-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aomad-workbench-test.name
  custom_group_policy_arns = [
    aws_iam_policy.aomad-workbench-test-policy.arn,
  ]
}

module "sme-aoma-da-test-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-aoma-da-test.name
  custom_group_policy_arns = [
    aws_iam_policy.sme-aoma-da-test-policy.arn,
  ]
}

module "aoma2-kafka-sa-user-group-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.aoma2-kafka-sa-user-group.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/aomad-eks-aoma2-kafka-sa-policy",
  ]
}