resource "aws_iam_policy" "ameba-dev-ns-aoma3-dev-sa-aoma-talent-service" {
  description = "Policy used by the EKS app  aoma-talent-service in aoma3-dev namespace in ameba-dev"
  name        = "ameba-dev-ns-aoma3-dev-sa-aoma-talent-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma3-dev-sa-aoma-talent-service.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1560178415732" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1560178415732"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1560178415732.json
}
resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-mc-sql-installer-policy" {
  description = "aomad-eks-ameba-dev-sa-mc-sql-installer"
  name        = "aomad-eks-ameba-dev-sa-mc-sql-installer-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-mc-sql-installer-policy.json
}

resource "aws_iam_policy" "aomad-ecs-aomad-ameba-schema-registry-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad-ameba-schema-registry-taskdef in aomad-ameba-schema-registry"
  name        = "aomad-ecs-aomad-ameba-schema-registry-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ecs-aomad-ameba-schema-registry-taskdef-task-policy.json
}

resource "aws_iam_policy" "AWSLambdaSNSTopicDestinationExecutionRole-969" {
  name   = "AWSLambdaSNSTopicDestinationExecutionRole-969"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaSNSTopicDestinationExecutionRole-969.json
}

resource "aws_iam_policy" "aomad2-acm-access" {
  description = "ACM Access"
  name        = "aomad2-acm-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad2-acm-access.json
}

resource "aws_iam_policy" "s3-roughcuts" {
  description = "s3"
  name        = "s3-roughcuts"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-rough-cuts-export-policy.json
}

resource "aws_iam_policy" "s3-policy" {
  name   = "s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-ns-ameba-sa-mb-policy" {
  description = "Policy used by the EKS app  mb in ameba namespace in ameba-stage"
  name        = "aomad-eks-ameba-stage-ns-ameba-sa-mb-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-ns-ameba-sa-mb-policy.json
}

resource "aws_iam_policy" "cloudops-Budget-Execution-Policy" {
  description = "cloudops-Budget-Execution-Policy"
  name        = "cloudops-Budget-Execution-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-Budget-Execution-Policy.json
}

resource "aws_iam_policy" "aomas-ecs-aomad-ameba-schema-registry-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad-ameba-schema-registry-taskdef in aomad-ameba-schema-registry"
  name        = "aomas-ecs-aomad-ameba-schema-registry-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ecs-aomad-ameba-schema-registry-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomad-acars-dev-sqs-policy" {
  description = "aomad-eks-aomad-acars-dev-sqs-policy"
  name        = "aomad-eks-aomad-acars-dev-sqs-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-acars-dev-sqs-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-ameba-private-sa-agql-policy" {
  description = "Policy used by the EKS app  agql in ameba-private namespace in ameba-dev"
  name        = "aomad-eks-ameba-dev-ns-ameba-private-sa-agql-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-ameba-private-sa-agql-policy.json
}

resource "aws_iam_policy" "aomad-ecs-aomas-mdimport-taskdef-task-policy" {
  description = "Policy used by the ECS task aomas-mdimport-taskdef in aomas-metadata-import-service-ecs"
  name        = "aomad-ecs-aomas-mdimport-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ecs-aomas-mdimport-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomad-dev2-webapp" {
  description = "Policy for Preview Service"
  name        = "aomad-dev2-webapp"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-dev2-webapp.json
}

resource "aws_iam_policy" "sme-aoma-ust-dev_s3bucket" {
  description = "Full access to sme-aoma-ust-dev s3 bucket"
  name        = "sme-aoma-ust-dev_s3bucket"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-aoma-ust-dev_s3bucket.json
}

resource "aws_iam_policy" "asset-preview-service-mediaconvert-policies" {
  description = "asset-preview-service-mediaconvert-policies"
  name        = "asset-preview-service-mediaconvert-policies"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset-preview-service-mediaconvert-policies.json
}

resource "aws_iam_policy" "PrismaCloud-IAM-ReadOnly-Policy" {
  name   = "PrismaCloud-IAM-ReadOnly-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.PrismaCloud-IAM-ReadOnly-Policy.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-sa-aoma-product-service" {
  description = "aomad-eks-aomas-ms-sa-aoma-product-service"
  name        = "aomad-eks-aomas-ms-sa-aoma-product-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-sa-aoma-product-service.json
}

resource "aws_iam_policy" "aomad-secrets-manager-policy" {
  description = "aomad-secrets-manager-policy"
  name        = "aomad-secrets-manager-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-secrets-manager-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-ust-be-service-policy" {
  description = "Policy used by the EKS app  ust-be-service in aoma3 namespace in aomad-ms-eks"
  name        = "aomad-eks-aomad-ms-eks-ns-aoma3-sa-ust-be-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-eks-ns-aoma3-sa-ust-be-service-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-sa-aoma-mail-service" {
  description = "aomad-eks-aomas-ms-sa-aoma-mail-service"
  name        = "aomad-eks-aomas-ms-sa-aoma-mail-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-sa-aoma-mail-service.json
}

resource "aws_iam_policy" "ALBIngressControllerIAMPolicy" {
  name   = "ALBIngressControllerIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.ALBIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "aomas-ecs-txmgr-taskdef-task-policy" {
  description = "aomas-ecs-txmgr-taskdef-task-policy"
  name        = "aomas-ecs-txmgr-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ecs-txmgr-taskdef-task-policy.json
}

resource "aws_iam_policy" "txmgr-task-secrets-policy" {
  description = "txmgr-task-secrets-policy"
  name        = "txmgr-task-secrets-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.txmgr-task-secrets-policy.json
}

resource "aws_iam_policy" "aomad-email-notification-attachment-s3-RW-policy" {
  description = "aomad-email-notification-attachment-s3-RW-policy"
  name        = "aomad-email-notification-attachment-s3-RW-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-email-notification-attachment-s3-RW-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-sa-user-management-service" {
  description = "aomad-eks-aomad-ms-sa-user-management-service"
  name        = "aomad-eks-aomad-ms-sa-user-management-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-sa-user-management-service.json
}

resource "aws_iam_policy" "AomaUserSecretKeyNotificationDev-sqs-policy" {
  description = "Policy for AomaUserSecretKeyNotificationDev sqs"
  name        = "AomaUserSecretKeyNotificationDev-sqs-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AomaUserSecretKeyNotificationDev-sqs-policy.json
}

resource "aws_iam_policy" "aomas-ecs-aomas-gql-gateway-taskdef-task-policy" {
  description = "aomas-ecs-aomas-gql-gateway-taskdef-task-policy"
  name        = "aomas-ecs-aomas-gql-gateway-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ecs-aomas-gql-gateway-taskdef-task-policy.json
}

resource "aws_iam_policy" "CloudabilityMonitorResourcesPolicy" {
  name   = "CloudabilityMonitorResourcesPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityMonitorResourcesPolicy.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-edd49f8d-1cd4-47a9-af3c-92cc6775f27b" {
  name   = "AWSLambdaBasicExecutionRole-edd49f8d-1cd4-47a9-af3c-92cc6775f27b"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-edd49f8d-1cd4-47a9-af3c-92cc6775f27b.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-sa-product-graphql-service" {
  description = "aomad-eks-aomas-ms-sa-product-graphql-service"
  name        = "aomad-eks-aomas-ms-sa-product-graphql-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-sa-product-graphql-service.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "aomad-dev2-ampcntpv" {
  description = "Policy for ampcntpv"
  name        = "aomad-dev2-ampcntpv"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-dev2-ampcntpv.json
}

resource "aws_iam_policy" "aomad-AOMAEmailNotificationDev-sqs-access-policy" {
  description = "aomad-AOMAEmailNotificationDev-sqs-access-policy"
  name        = "aomad-AOMAEmailNotificationDev-sqs-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-AOMAEmailNotificationDev-sqs-access-policy.json
}

resource "aws_iam_policy" "mediaconvert-amp-source-msrv-dest-dev" {
  name   = "mediaconvert-amp-source-msrv-dest-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.mediaconvert-amp-source-msrv-dest-dev.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-sa-aoma-mail-service" {
  description = "aomad-eks-aomad-ms-sa-aoma-mail-service"
  name        = "aomad-eks-aomad-ms-sa-aoma-mail-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-sa-aoma-mail-service.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-data-service-policy" {
  description = "Policy used by the EKS app  aoma-data-service in aoma3 namespace in aomas-ms"
  name        = "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-data-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-ns-aoma3-sa-aoma-data-service-policy.json
}

resource "aws_iam_policy" "aoma-RDS_snapshot_lambda-policy" {
  description = "CLOUDOPS-9045"
  name        = "aoma-RDS_snapshot_lambda-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-RDS_snapshot_lambda-policy.json
}

resource "aws_iam_policy" "aomad-msk-ameba-sandbox-admin-policy" {
  description = "Policy for admin access on ameba-sandox msk"
  name        = "aomad-msk-ameba-sandbox-admin-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-msk-ameba-sandbox-admin-policy.json
  tags = {
    "Name" = "aomad-msk-ameba-sandbox-admin-policy"
  }
  tags_all = {
    "Name" = "aomad-msk-ameba-sandbox-admin-policy"
  }
}

resource "aws_iam_policy" "aomas-ecs-aomas-ameba-event-consumer-taskdef-task-policy" {
  description = "Policy used by the ECS task aomas-ameba-event-consumer-taskdef in aomas-ameba-event-consumer"
  name        = "aomas-ecs-aomas-ameba-event-consumer-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ecs-aomas-ameba-event-consumer-taskdef-task-policy.json
}

resource "aws_iam_policy" "OrchCertAccess" {
  name   = "OrchCertAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.OrchCertAccess.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "PrismaCloud-ReadOnly-Policy-Compute" {
  name   = "PrismaCloud-ReadOnly-Policy-Compute"
  path   = var.path
  policy = data.aws_iam_policy_document.PrismaCloud-ReadOnly-Policy-Compute.json
}

resource "aws_iam_policy" "aomad-msk-ameba-sandbox-consumer-policy" {
  description = "Policy for consumer on ameba-sandbox msk"
  name        = "aomad-msk-ameba-sandbox-consumer-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-msk-ameba-sandbox-consumer-policy.json
  tags = {
    "Name" = "aomad-msk-ameba-sandbox-consumer-policy"
  }
  tags_all = {
    "Name" = "aomad-msk-ameba-sandbox-consumer-policy"
  }
}

resource "aws_iam_policy" "aomad-ssm-sec-agent-status-upload" {
  name   = "aomad-ssm-sec-agent-status-upload"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-ssm-sec-agent-status-upload.json
}

resource "aws_iam_policy" "aomad-secrets-mgr" {
  name   = "aomad-secrets-mgr"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-secrets-mgr.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-96ce2959-aeed-416b-9a33-972ecc201754" {
  name   = "AWSLambdaBasicExecutionRole-96ce2959-aeed-416b-9a33-972ecc201754"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-96ce2959-aeed-416b-9a33-972ecc201754.json
}

resource "aws_iam_policy" "aomad-msk-ameba-sandbox-producer-policy" {
  description = "Policy for producer in ameba-sandbox msk"
  name        = "aomad-msk-ameba-sandbox-producer-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-msk-ameba-sandbox-producer-policy.json
  tags = {
    "Name" = "aomad-msk-ameba-sandbox-producer-policy"
  }
  tags_all = {
    "Name" = "aomad-msk-ameba-sandbox-producer-policy"
  }
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "prvsvc-stage" {
  description = "Trial-1"
  name        = "prvsvc-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.prvsvc-stage.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-sas-policy" {
  description = "Policy used by the EKS app  aoma-sas in aoma3 namespace in aomas-ms"
  name        = "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-sas-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-ns-aoma3-sa-aoma-sas-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-export-service-policy" {
  description = "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-export-service-policy"
  name        = "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-export-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-export-service-policy.json
}

resource "aws_iam_policy" "aoma-export-service-msk-policy" {
  description = "aoma-export-service-msk-policy"
  name        = "aoma-export-service-msk-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-export-service-msk-policy.json
}

resource "aws_iam_policy" "AOMA-SQS-Policy" {
  name   = "AOMA-SQS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.AOMA-SQS-Policy.json
}

resource "aws_iam_policy" "aomad-kibana-ameba-sns-notification" {
  description = "aomad-kibana-ameba-sns-notification"
  name        = "aomad-kibana-ameba-sns-notification"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-kibana-ameba-sns-notification.json
}

resource "aws_iam_policy" "DMS-Policy" {
  name   = "DMS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.DMS-Policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1590309501462" {
  name   = "oneClick_flowlogsRole_1590309501462"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1590309501462.json
}

resource "aws_iam_policy" "aomad-ecs-aomad-txmgr-taskdef-task-policy" {
  name   = "aomad-ecs-aomad-txmgr-taskdef-task-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-ecs-aomad-txmgr-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomad-ecs-aomad-eureka-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad-eureka-taskdef in aomad-eureka"
  name        = "aomad-ecs-aomad-eureka-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ecs-aomad-eureka-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomad-dev2-prodsrvc" {
  description = "Policy for Product Service"
  name        = "aomad-dev2-prodsrvc"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-dev2-prodsrvc.json
}

resource "aws_iam_policy" "msrv-origin-amp-acl-dev" {
  name   = "msrv-origin-amp-acl-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.msrv-origin-amp-acl-dev.json
}

resource "aws_iam_policy" "CWLogs-Put" {
  name   = "CWLogs-Put"
  path   = var.path
  policy = data.aws_iam_policy_document.CWLogs-Put.json
}

resource "aws_iam_policy" "AssumeRoleWebIdentity" {
  name   = "AssumeRoleWebIdentity"
  path   = var.path
  policy = data.aws_iam_policy_document.AssumeRoleWebIdentity.json
}

resource "aws_iam_policy" "global-ds-dev-msk" {
  name   = "global-ds-dev-msk"
  path   = var.path
  policy = data.aws_iam_policy_document.global-ds-dev-msk.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585139016427" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585139016427"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585139016427.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-sa-aoma-product-service" {
  description = "aomad-eks-aomad-ms-sa-aoma-product-service"
  name        = "aomad-eks-aomad-ms-sa-aoma-product-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-sa-aoma-product-service.json
}

resource "aws_iam_policy" "cored-trendmicro_esdomain_policy" {
  description = "Policy for accessing centralized tmds es domain"
  name        = "cored-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cored-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "AmazonEKS_EFS_CSI_Driver_Policy" {
  description = "AmazonEKS_EFS_CSI_Driver_Policy"
  name        = "AmazonEKS_EFS_CSI_Driver_Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AmazonEKS_EFS_CSI_Driver_Policy.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "iam-read-only-access" {
  description = "iam-read-only"
  name        = "iam-read-only-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.iam-read-only-access.json
}

resource "aws_iam_policy" "ALB-Ingress-Ploicy" {
  name   = "ALB-Ingress-Ploicy"
  path   = var.path
  policy = data.aws_iam_policy_document.ALB-Ingress-Ploicy.json
}

resource "aws_iam_policy" "dev-health_sr_app" {
  description = "Policy for accessing secret manager dev-health_sr_app "
  name        = "dev-health_sr_app"
  path        = var.path
  policy      = data.aws_iam_policy_document.dev-health_sr_app.json
}

resource "aws_iam_policy" "aoma-grasexport-dev-eks-service-account-policy" {
  description = "EKS service account permissions for gras export in ameba-dev cluster"
  name        = "aoma-grasexport-dev-eks-service-account-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-grasexport-dev-eks-service-account-policy.json
}

resource "aws_iam_policy" "PostgreSQL-Credentials-Rotation-Policy-V2" {
  name   = "PostgreSQL-Credentials-Rotation-Policy-V2"
  path   = var.path
  policy = data.aws_iam_policy_document.PostgreSQL-Credentials-Rotation-Policy-V2.json
}

resource "aws_iam_policy" "aomad-ust-assetupload-sqs" {
  name   = "aomad-ust-assetupload-sqs"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-ust-assetupload-sqs.json
}

resource "aws_iam_policy" "aomad-stage-usrmgmt" {
  description = "Policy for User Management"
  name        = "aomad-stage-usrmgmt"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-stage-usrmgmt.json
}

resource "aws_iam_policy" "Billing-RO" {
  description = "Billing-RO"
  name        = "Billing-RO"
  path        = var.path
  policy      = data.aws_iam_policy_document.Billing-RO.json
}

resource "aws_iam_policy" "AWSQuickSightIAMPolicy" {
  description = "Grants Amazon QuickSight list permissions to AWS IAM resources"
  name        = "AWSQuickSightIAMPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightIAMPolicy.json
}

resource "aws_iam_policy" "aomad-ecs-aomad2-mdimport-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad2-mdimport-taskdef in aomad2-metadata-import-service"
  name        = "aomad-ecs-aomad2-mdimport-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ecs-aomad2-mdimport-taskdef-task-policy.json
}

resource "aws_iam_policy" "sme-aoma-core-dev-historical-data-policy" {
  name   = "sme-aoma-core-dev-historical-data-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-aoma-core-dev-historical-data-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-ns-aoma3-sa-ust-be-service-policy" {
  description = "Policy used by the EKS app  ust-be-service in aoma3 namespace in aomas-ms"
  name        = "aomad-eks-aomas-ms-ns-aoma3-sa-ust-be-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-ns-aoma3-sa-ust-be-service-policy.json
}

resource "aws_iam_policy" "LambdaToS3Connect" {
  name   = "LambdaToS3Connect"
  path   = var.path
  policy = data.aws_iam_policy_document.LambdaToS3Connect.json
}

resource "aws_iam_policy" "RDS-SecretManager-Rotation-Lambda" {
  name   = "RDS-SecretManager-Rotation-Lambda"
  path   = var.path
  policy = data.aws_iam_policy_document.RDS-SecretManager-Rotation-Lambda.json
}

resource "aws_iam_policy" "aomad-developers-01-policy" {
  description = "aomad-developers-01-policy"
  name        = "aomad-developers-01-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-developers-01-policy.json
}

resource "aws_iam_policy" "rds-db-policy" {
  name   = "rds-db-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.rds-db-policy.json
}

resource "aws_iam_policy" "aomad-shar051-prog-policy" {
  description = "aomad-shar051-prog-policy"
  name        = "aomad-shar051-prog-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-shar051-prog-policy.json
}

resource "aws_iam_policy" "aomad-dev2-usrmgmt" {
  description = "Policy for User Management"
  name        = "aomad-dev2-usrmgmt"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-dev2-usrmgmt.json
}

resource "aws_iam_policy" "globaldsd-ameba-kafkahq-admin-role-assume-policy" {
  description = "globaldsd-ameba-kafkahq-admin-role-assume-policy"
  name        = "globaldsd-ameba-kafkahq-admin-role-assume-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.globaldsd-ameba-kafkahq-admin-role-assume-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-ust-policy" {
  description = "Policy used by the EKS app  aoma-ust in aoma3 namespace in aomas-ms"
  name        = "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-ust-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-ns-aoma3-sa-aoma-ust-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-amp-search-policy" {
  description = "aomad-eks-ameba-dev-sa-amp-search"
  name        = "aomad-eks-ameba-dev-sa-amp-search-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-amp-search-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-ars-s3-policy" {
  description = "aomad-eks-ameba-dev-sa-ars-s3-policy"
  name        = "aomad-eks-ameba-dev-sa-ars-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-ars-s3-policy.json
}

resource "aws_iam_policy" "acl-lambda-mediaconvert-dev" {
  name   = "acl-lambda-mediaconvert-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.acl-lambda-mediaconvert-dev.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "aomad-ecs-aomad-metadata-import-service-taskdef-task-policy" {
  name   = "aomad-ecs-aomad-metadata-import-service-taskdef-task-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-ecs-aomad-metadata-import-service-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-data-service-policy" {
  description = "Policy used by the EKS app  aoma-data-service in aoma3 namespace in aomad-ms-eks"
  name        = "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-data-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-data-service-policy.json
}

resource "aws_iam_policy" "CloudabilityVerificationPolicy" {
  name   = "CloudabilityVerificationPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityVerificationPolicy.json
}

resource "aws_iam_policy" "aomad-ecs-aomad-gateway-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad-gateway-taskdef in aomad-gateway"
  name        = "aomad-ecs-aomad-gateway-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ecs-aomad-gateway-taskdef-task-policy.json
}

resource "aws_iam_policy" "ameba-dev-ns-aoma3-stage-sa-aoma-export-service-policy" {
  description = "Policy used by the EKS app  aoma-export-service in aoma3-stage namespace in ameba-dev"
  name        = "ameba-dev-ns-aoma3-stage-sa-aoma-export-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma3-stage-sa-aoma-export-service-policy.json
}

resource "aws_iam_policy" "aomad-aomad2-bastion01-policy" {
  description = "aomad-aomad2-bastion01-policy"
  name        = "aomad-aomad2-bastion01-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-aomad2-bastion01-policy.json
}

resource "aws_iam_policy" "eks-access" {
  name   = "eks-access"
  path   = var.path
  policy = data.aws_iam_policy_document.eks-access.json
}

resource "aws_iam_policy" "quicksightfull" {
  name   = "quicksightfull"
  path   = var.path
  policy = data.aws_iam_policy_document.quicksightfull.json
}

resource "aws_iam_policy" "aomas-txmgr-s3-access-policy" {
  description = "aomas-txmgr-s3-access-policy"
  name        = "aomas-txmgr-s3-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-txmgr-s3-access-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-ns-ameba-private-sa-gw-policy" {
  description = "Policy used by the EKS app  gw in ameba-private namespace in ameba-stage"
  name        = "aomad-eks-ameba-stage-ns-ameba-private-sa-gw-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-ns-ameba-private-sa-gw-policy.json
}

resource "aws_iam_policy" "amebad-eks-secrets-access" {
  description = "amebad-eks-secrets-access"
  name        = "amebad-eks-secrets-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.amebad-eks-secrets-access.json
  tags = {
    "JIRA" = "CLOUDOPS-10076"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-10076"
  }
}

resource "aws_iam_policy" "amebad-sqs-send-message" {
  description = "amebad-sqs-send-message"
  name        = "amebad-sqs-send-message"
  path        = var.path
  policy      = data.aws_iam_policy_document.amebad-sqs-send-message.json
  tags = {
    "JIRA" = "CLOUDOPS-14692"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-14692"
  }
}

resource "aws_iam_policy" "lambda_elasticsearch_execution_policy" {
  name   = "lambda_elasticsearch_execution_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda_elasticsearch_execution_policy.json
}

resource "aws_iam_policy" "aomad-vleung1-policy" {
  description = "aomad-vleung1-policy"
  name        = "aomad-vleung1-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-vleung1-policy.json
}

resource "aws_iam_policy" "AssetPreviewServiceMediaConvertPolicy" {
  name   = "AssetPreviewServiceMediaConvertPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.AssetPreviewServiceMediaConvertPolicy.json
}

resource "aws_iam_policy" "aomad-app-autoscale-policy" {
  description = "aomad-app-autoscale-policy"
  name        = "aomad-app-autoscale-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-app-autoscale-policy.json
}

resource "aws_iam_policy" "iam_policy_v1_to_v2_additional" {
  name   = "iam_policy_v1_to_v2_additional"
  path   = var.path
  policy = data.aws_iam_policy_document.iam_policy_v1_to_v2_additional.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-sa-product-graphql-service" {
  description = "EKS service account permissions for product-graphql-service in aomad-ms cluster"
  name        = "aomad-eks-aomad-ms-sa-product-graphql-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-sa-product-graphql-service.json
}

resource "aws_iam_policy" "mediaconvert-amp-source-msrv-dest-dev2" {
  description = "Policy for Media Convert in AMP-Source and MSRV-Dest"
  name        = "mediaconvert-amp-source-msrv-dest-dev2"
  path        = var.path
  policy      = data.aws_iam_policy_document.mediaconvert-amp-source-msrv-dest-dev2.json
}

resource "aws_iam_policy" "AWSQuickSightRDSPolicy" {
  description = "Grants Amazon QuickSight describe permissions to AWS RDS resources"
  name        = "AWSQuickSightRDSPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightRDSPolicy.json
}

resource "aws_iam_policy" "AWSQuickSightS3ConsumersPolicy" {
  description = "Grants Amazon QuickSight read permission to Amazon S3 resources"
  name        = "AWSQuickSightS3ConsumersPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightS3ConsumersPolicy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-ec-policy" {
  description = "aomad-eks-ameba-dev-sa-ec-policy"
  name        = "aomad-eks-ameba-dev-sa-ec-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-ec-policy.json
  tags = {
    "Name" = "aomad-eks-ameba-dev-sa-ec-policy"
  }
  tags_all = {
    "Name" = "aomad-eks-ameba-dev-sa-ec-policy"
  }
}

resource "aws_iam_policy" "ameba-dev-ns-digital-archive-stage-sa-amp-asset-preview-service-policy" {
  description = "ameba-dev-ns-digital-archive-stage-sa-amp-asset-preview-service-policy"
  name        = "ameba-dev-ns-digital-archive-stage-sa-amp-asset-preview-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-digital-archive-stage-sa-amp-asset-preview-service-policy.json
}

resource "aws_iam_policy" "amebas-eks-secrets-access" {
  description = "amebas-eks-secrets-access"
  name        = "amebas-eks-secrets-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.amebas-eks-secrets-access.json
}

resource "aws_iam_policy" "aomad-aomad2-gitrun-ECR-policy" {
  description = "aomad-aomad2-gitrun-ECR-policy"
  name        = "aomad-aomad2-gitrun-ECR-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-aomad2-gitrun-ECR-policy.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-7f1b1193-b9bf-46d6-bb3e-0bf0fe4cd04b" {
  name   = "AWSLambdaBasicExecutionRole-7f1b1193-b9bf-46d6-bb3e-0bf0fe4cd04b"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-7f1b1193-b9bf-46d6-bb3e-0bf0fe4cd04b.json
}

resource "aws_iam_policy" "PrismaCloud-Remediation-Policy-Compute" {
  name   = "PrismaCloud-Remediation-Policy-Compute"
  path   = var.path
  policy = data.aws_iam_policy_document.PrismaCloud-Remediation-Policy-Compute.json
}

resource "aws_iam_policy" "aomas-ecs-aomas-mdimport-taskdef-task-policy" {
  description = "Policy used by the ECS task aomas-mdimport-taskdef in aomas-metadata-import-service"
  name        = "aomas-ecs-aomas-mdimport-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ecs-aomas-mdimport-taskdef-task-policy.json
}

resource "aws_iam_policy" "lambda-invokefunction" {
  description = "lambda-invokefunction"
  name        = "lambda-invokefunction"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda-invokefunction.json
}

resource "aws_iam_policy" "aomad-stage-ampcntpv" {
  description = "Policy for ampcntpv"
  name        = "aomad-stage-ampcntpv"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-stage-ampcntpv.json
}

resource "aws_iam_policy" "aomad-stage-prodsrvc" {
  description = "Policy for Product Service"
  name        = "aomad-stage-prodsrvc"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-stage-prodsrvc.json
}

resource "aws_iam_policy" "ks8-alb-controller-policy" {
  description = "ks8-alb-controller-policy"
  name        = "ks8-alb-controller-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ks8-alb-controller-policy.json
}

resource "aws_iam_policy" "aomas-ameba-kafkahq-monitor-ecs-task-policy" {
  description = "Policy used by the ECS task aomas-ameba-kafkahq-monitor in aomas-ameba-kafkahq-monitor"
  name        = "aomas-ameba-kafkahq-monitor-ecs-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ameba-kafkahq-monitor-ecs-task-policy.json
}

resource "aws_iam_policy" "RDS_Quicksight_lambda_policy" {
  name   = "RDS_Quicksight_lambda_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.RDS_Quicksight_lambda_policy.json
}

resource "aws_iam_policy" "amp-graphics-metadata-extract-stage" {
  description = "amp-graphics-metadata-extract-stage"
  name        = "amp-graphics-metadata-extract-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-graphics-metadata-extract-stage.json
}

resource "aws_iam_policy" "aomas-ecs-aomas-ust-gql-taskdef-task-policy" {
  description = "aomas-ecs-aomas-ust-gql-taskdef-task-policy"
  name        = "aomas-ecs-aomas-ust-gql-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ecs-aomas-ust-gql-taskdef-task-policy.json
}

resource "aws_iam_policy" "asset-preview-service-lambda-policy-stage" {
  description = "asset-preview-service-lambda-policy-stage"
  name        = "asset-preview-service-lambda-policy-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset-preview-service-lambda-policy-stage.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "aomas-secrets-manager-policy" {
  name   = "aomas-secrets-manager-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomas-secrets-manager-policy.json
}

resource "aws_iam_policy" "aomad-aomas-ameba-utils-ec2-policy" {
  description = "Policy for aomas-ameba-utils-ec2-role"
  name        = "aomad-aomas-ameba-utils-ec2-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-aomas-ameba-utils-ec2-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-gw-policy" {
  description = "EKS Policy for aomad-eks-ameba-dev-sa-gw-role"
  name        = "aomad-eks-ameba-dev-sa-gw-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-gw-policy.json
  tags = {
    "Name" = "aomad-eks-ameba-dev-sa-gw-policy"
  }
  tags_all = {
    "Name" = "aomad-eks-ameba-dev-sa-gw-policy"
  }
}

resource "aws_iam_policy" "aomad-ssm-patch-policy" {
  description = "Policy to be attached to every ec2 instance for patching"
  name        = "aomad-ssm-patch-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ssm-patch-policy.json
}

resource "aws_iam_policy" "specificbucketpolicy" {
  name   = "specificbucketpolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.specificbucketpolicy.json
}

resource "aws_iam_policy" "asset-preview-service-lambda-policy-dev2" {
  description = "Policy for Media Convert in AMP-Source and MSRV-Dest"
  name        = "asset-preview-service-lambda-policy-dev2"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset-preview-service-lambda-policy-dev2.json
}

resource "aws_iam_policy" "oneClick_Cognito_aomad_kibana_usersUnauth_Role_1575964138885" {
  name   = "oneClick_Cognito_aomad_kibana_usersUnauth_Role_1575964138885"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_aomad_kibana_usersUnauth_Role_1575964138885.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-ns-ameba-private-sa-agql-policy" {
  description = "Policy used by the EKS app  agql in ameba-private namespace in ameba-stage"
  name        = "aomad-eks-ameba-stage-ns-ameba-private-sa-agql-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-ns-ameba-private-sa-agql-policy.json
}

resource "aws_iam_policy" "sme-aoma-core-dev-waf-logging-policy" {
  description = "sme-aoma-core-dev-waf-logging-policy"
  name        = "sme-aoma-core-dev-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-aoma-core-dev-waf-logging-policy.json
}

resource "aws_iam_policy" "aomad2-ecs-aomad2-gql-gateway-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad2-gql-gateway-taskdef in aomad2-gql-gateway"
  name        = "aomad2-ecs-aomad2-gql-gateway-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad2-ecs-aomad2-gql-gateway-taskdef-task-policy.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  name   = "CloudOpsDenyIAM"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "aomad2-ast-gql-policy" {
  description = "aomad2-ast-gql-policy"
  name        = "aomad2-ast-gql-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad2-ast-gql-policy.json
}

resource "aws_iam_policy" "aoma-graphics-metadata-extract-dev" {
  name   = "aoma-graphics-metadata-extract-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.aoma-graphics-metadata-extract-dev.json
}

resource "aws_iam_policy" "aomas-ora-txmgr-taskdef-task-policy" {
  name   = "aomas-ora-txmgr-taskdef-task-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomas-ora-txmgr-taskdef-task-policy.json
}

resource "aws_iam_policy" "eks_access" {
  name   = "eks_access"
  path   = var.path
  policy = data.aws_iam_policy_document.eks_access.json
}

resource "aws_iam_policy" "txmgr-secrets-access-policy" {
  description = "txmgr-secrest-access"
  name        = "txmgr-secrets-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.txmgr-secrets-access-policy.json
}
resource "aws_iam_policy" "aoma-dev-secrets-mgr-policy" {
  description = "aoma-dev-secrets-mgr-policy"
  name        = "aoma-dev-secrets-mgr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-secretsmanager-policy.json
}
resource "aws_iam_policy" "aomad-eks-ameba-stage-sa-ars-s3-policy" {
  description = "aomad-eks-ameba-stage-sa-ars-s3-policy"
  name        = "aomad-eks-ameba-stage-sa-ars-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-sa-ars-s3-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-ameba-private-sa-hq-policy" {
  description = "Policy used by the EKS app  hq in ameba-private namespace in ameba-dev"
  name        = "aomad-eks-ameba-dev-ns-ameba-private-sa-hq-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-ameba-private-sa-hq-policy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-ns-ameba-private-sa-ec-policy" {
  description = "Policy used by the EKS app  ec in ameba-private namespace in ameba-stage"
  name        = "aomad-eks-ameba-stage-ns-ameba-private-sa-ec-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-ns-ameba-private-sa-ec-policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "aomad-ecs-aomad-ameba-auth-server-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad-ameba-auth-server-taskdef in aomad-ameba-auth-server"
  name        = "aomad-ecs-aomad-ameba-auth-server-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ecs-aomad-ameba-auth-server-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomad2-ecs-aomad2-mdimport-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad2-mdimport-taskdef in aomad2-metadata-import-service"
  name        = "aomad2-ecs-aomad2-mdimport-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad2-ecs-aomad2-mdimport-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomas-stage-presvc" {
  description = "Policy for Preview Service"
  name        = "aomas-stage-presvc"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-stage-presvc.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-ust-policy" {
  description = "Policy used by the EKS app  aoma-ust in aoma3 namespace in aomad-ms-eks"
  name        = "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-ust-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-ust-policy.json
}

resource "aws_iam_policy" "aomad-metadata-import-actions-ecr-policy" {
  description = "aomad-metadata-import-actions-ecr-policy"
  name        = "aomad-metadata-import-actions-ecr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-metadata-import-actions-ecr-policy.json
}

resource "aws_iam_policy" "cored-aws-config-policy" {
  description = "cored-aws-config-policy"
  name        = "cored-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cored-aws-config-policy.json
}

resource "aws_iam_policy" "niko001-policy" {
  description = "CloudFront  Read Access "
  name        = "niko001-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.niko001-policy.json
}

resource "aws_iam_policy" "aomad-stage-mailsvc" {
  description = "Policy for Mail Service"
  name        = "aomad-stage-mailsvc"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-stage-mailsvc.json
}

resource "aws_iam_policy" "aomad-jenkins-s3" {
  description = "aomad-jenkins-s3"
  name        = "aomad-jenkins-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-jenkins-s3.json
  tags = {
    "Name" = "aomad-jenkins-s3"
  }
  tags_all = {
    "Name" = "aomad-jenkins-s3"
  }
}

resource "aws_iam_policy" "Modify_SG" {
  name   = "Modify_SG"
  path   = var.path
  policy = data.aws_iam_policy_document.Modify_SG.json
}

resource "aws_iam_policy" "aomad-aoma3-actions-ecr-policy" {
  description = "aomad-aoma3-actions-ecr-policy"
  name        = "aomad-aoma3-actions-ecr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-aoma3-actions-ecr-policy.json
}

resource "aws_iam_policy" "PrismaCloud-IAM-ReadOnly-Policy-ElasticBeanstalk" {
  name   = "PrismaCloud-IAM-ReadOnly-Policy-ElasticBeanstalk"
  path   = var.path
  policy = data.aws_iam_policy_document.PrismaCloud-IAM-ReadOnly-Policy-ElasticBeanstalk.json
}

resource "aws_iam_policy" "aomad-dev2-mailsvc" {
  description = "Policy for Mail Service"
  name        = "aomad-dev2-mailsvc"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-dev2-mailsvc.json
}

resource "aws_iam_policy" "aomad-ameba-kafkahq-monitor-ecs-task-policy" {
  description = "Policy used by the ECS task aomad-ameba-kafkahq-monitor in aomad-ameba-kafkahq-monitor"
  name        = "aomad-ameba-kafkahq-monitor-ecs-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-kafkahq-monitor-ecs-task-policy.json
}

resource "aws_iam_policy" "eks_fullaccess" {
  name   = "eks_fullaccess"
  path   = var.path
  policy = data.aws_iam_policy_document.eks_fullaccess.json
}

resource "aws_iam_policy" "AOMARetrieveSecret" {
  name   = "AOMARetrieveSecret"
  path   = var.path
  policy = data.aws_iam_policy_document.AOMARetrieveSecret.json
}

resource "aws_iam_policy" "Invokelambda_ECS-Instance-Role" {
  description = "To provide access to action on Aoma-Gras-Stage lambda function."
  name        = "Invokelambda_ECS-Instance-Role"
  path        = var.path
  policy      = data.aws_iam_policy_document.Invokelambda_ECS-Instance-Role.json
}

resource "aws_iam_policy" "ecr_fullaccess" {
  name   = "ecr_fullaccess"
  path   = var.path
  policy = data.aws_iam_policy_document.ecr_fullaccess.json
}

resource "aws_iam_policy" "oneClick_Cognito_aomad_kibana_usersAuth_Role_1575964138883" {
  name   = "oneClick_Cognito_aomad_kibana_usersAuth_Role_1575964138883"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_aomad_kibana_usersAuth_Role_1575964138883.json
}

resource "aws_iam_policy" "aomas-ecs-aomas-ameba-message-bridge-taskdef-task-policy" {
  description = "Policy used by the ECS task aomas-ameba-message-bridge-taskdef in aomas-ameba-message-bridge"
  name        = "aomas-ecs-aomas-ameba-message-bridge-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-ecs-aomas-ameba-message-bridge-taskdef-task-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1558949169345" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1558949169345"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1558949169345.json
}

resource "aws_iam_policy" "lambda-creation" {
  name   = "lambda-creation"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda-creation.json
}

resource "aws_iam_policy" "RDSProxyIAMPolicy" {
  name   = "RDSProxyIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.RDSProxyIAMPolicy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-mb-policy" {
  description = "aomad-eks-ameba-dev-sa-mb-policy"
  name        = "aomad-eks-ameba-dev-sa-mb-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-mb-policy.json
  tags = {
    "Name" = "aomad-eks-ameba-dev-sa-mb-policy"
  }
  tags_all = {
    "Name" = "aomad-eks-ameba-dev-sa-mb-policy"
  }
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "asset-preview-service-ec2" {
  description = "asset-preview-service-ec2"
  name        = "asset-preview-service-ec2"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset-preview-service-ec2.json
}

resource "aws_iam_policy" "RDS-EC2" {
  name   = "RDS-EC2"
  path   = var.path
  policy = data.aws_iam_policy_document.RDS-EC2.json
}

resource "aws_iam_policy" "AWSDataSyncS3BucketAccess-sme-aoma-core-dev-quicksight" {
  name   = "AWSDataSyncS3BucketAccess-sme-aoma-core-dev-quicksight"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSDataSyncS3BucketAccess-sme-aoma-core-dev-quicksight.json
}

resource "aws_iam_policy" "ses-send-email" {
  name   = "ses-send-email"
  path   = var.path
  policy = data.aws_iam_policy_document.ses-send-email.json
}

resource "aws_iam_policy" "SendRawEmail" {
  description = "Policy for user smtp to send emails"
  name        = "SendRawEmail"
  path        = var.path
  policy      = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-sas-policy" {
  description = "Policy used by the EKS app  aoma-sas in aoma3 namespace in aomad-ms-eks"
  name        = "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-sas-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-sas-policy.json
}

resource "aws_iam_policy" "ameba-dev-ns-aoma3-dev-sa-aoma-talent-service-policy" {
  description = "Policy used by the EKS app  aoma-talent-service in aoma3-dev namespace in ameba-dev"
  name        = "ameba-dev-ns-aoma3-dev-sa-aoma-talent-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma3-dev-sa-aoma-talent-service-policy.json
}

resource "aws_iam_policy" "ameba-dev-ns-digital-archive-dev-sa-amp-cloudnative-service" {
  description = "Policy used by the EKS app  amp-cloudnative-service in digital-archive-dev namespace in ameba-dev"
  name        = "ameba-dev-ns-digital-archive-dev-sa-amp-cloudnative-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-digital-archive-dev-sa-amp-cloudnative-service.json
}

resource "aws_iam_policy" "PrismaCloud-IAM-Remediation-Policy" {
  name   = "PrismaCloud-IAM-Remediation-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.PrismaCloud-IAM-Remediation-Policy.json
}

resource "aws_iam_policy" "aomad-ust-bulkRegistration-sqs" {
  description = "aomad-ust-bulkRegistration-sqs"
  name        = "aomad-ust-bulkRegistration-sqs"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ust-bulkRegistration-sqs.json
}

resource "aws_iam_policy" "SecretsManager-Read-Access" {
  name   = "SecretsManager-Read-Access"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManager-Read-Access.json
}

resource "aws_iam_policy" "lambda_to_s3_role" {
  name   = "lambda_to_s3_role"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda_to_s3_role.json
}

resource "aws_iam_policy" "ameba-dev-ns-digital-archive-dev-sa-amp-asset-preview-service-policy" {
  description = "Policy used by the EKS app  amp-asset-preview-service in digital-archive-dev namespace in ameba-dev"
  name        = "ameba-dev-ns-digital-archive-dev-sa-amp-asset-preview-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-digital-archive-dev-sa-amp-asset-preview-service-policy.json
}

resource "aws_iam_policy" "aomad2-ecs-aomad2-ast-gql-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad2-ast-gql-taskdef in aomad2-ast-gql"
  name        = "aomad2-ecs-aomad2-ast-gql-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad2-ecs-aomad2-ast-gql-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomad-lambda-esDeleteIndex-dev-policy" {
  description = "Policy for aomad-lambda-esDeleteIndex-dev-role"
  name        = "aomad-lambda-esDeleteIndex-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-lambda-esDeleteIndex-dev-policy.json
}

resource "aws_iam_policy" "aomad-sqs-policy" {
  description = "aomad-sqs-policy"
  name        = "aomad-sqs-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-sqs-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-eks-sa-ust-be-service-policy" {
  description = "Policy used by the EKS app  ust-be-service in aomad-ms-eks"
  name        = "aomad-eks-aomad-ms-eks-sa-ust-be-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-eks-sa-ust-be-service-policy.json
}

resource "aws_iam_policy" "cored-portal-policy" {
  description = "cored-portal-policy"
  name        = "cored-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cored-portal-policy.json
}

resource "aws_iam_policy" "AOMA-D2-ALB-Controller-Policy" {
  description = "AOMA-D2-ALB-Controller-Policy"
  name        = "AOMA-D2-ALB-Controller-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AOMA-D2-ALB-Controller-Policy.json
}

resource "aws_iam_policy" "aomad2-ecs-aomad2-txmgr-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad2-txmgr-taskdef in aomad2-txmgr-ecs"
  name        = "aomad2-ecs-aomad2-txmgr-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad2-ecs-aomad2-txmgr-taskdef-task-policy.json
}

resource "aws_iam_policy" "mediaconvert-amp-source-msrv-dest-stage" {
  description = "mediaconvert-amp-source-msrv-dest-stage"
  name        = "mediaconvert-amp-source-msrv-dest-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.mediaconvert-amp-source-msrv-dest-stage.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-sa-user-management-service" {
  description = "aomad-eks-aomas-ms-sa-user-management-service"
  name        = "aomad-eks-aomas-ms-sa-user-management-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-sa-user-management-service.json
}

resource "aws_iam_policy" "txmgr-stage-secrets-access" {
  description = "txmgr-stage-secrets-access"
  name        = "txmgr-stage-secrets-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.txmgr-stage-secrets-access.json
}

resource "aws_iam_policy" "aomad-ecs-aomad2-txmgr-taskdef-task-policy" {
  description = "Policy used by the ECS task aomad2-txmgr-taskdef in aomad2-txmgr-ecs"
  name        = "aomad-ecs-aomad2-txmgr-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ecs-aomad2-txmgr-taskdef-task-policy.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-de5be765-2cc5-4f73-8e95-b0070c65d613" {
  name   = "AWSLambdaBasicExecutionRole-de5be765-2cc5-4f73-8e95-b0070c65d613"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-de5be765-2cc5-4f73-8e95-b0070c65d613.json
}

resource "aws_iam_policy" "aomad-cloudops_ses-key-rotation-function-policy" {
  name   = "aomad-cloudops_ses-key-rotation-function-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-cloudops_ses-key-rotation-function-policy.json
}

resource "aws_iam_policy" "aomad-quicksight-migrator-policy" {
  name   = "aomad-quicksight-migrator-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-quicksight-migrator-policy.json
}

resource "aws_iam_policy" "AOMA-TXMGR-S3-Policy" {
  name   = "AOMA-TXMGR-S3-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.AOMA-TXMGR-S3-Policy.json
}

resource "aws_iam_policy" "aomas-pg-txmgr-taskdef-task-policy" {
  name   = "aomas-pg-txmgr-taskdef-task-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomas-pg-txmgr-taskdef-task-policy.json
}



resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-batch-service-policy" {
  description = "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-batch-service-policy"
  name        = "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-batch-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-batch-service-policy.json
}

resource "aws_iam_policy" "aomad-ameba-link-service-dev-policy" {
  description = "aomad-ameba-link-service-dev-policy"
  name        = "aomad-ameba-link-service-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-link-service-dev-policy.json
}

resource "aws_iam_policy" "ameba-dev-msk-policy" {
  name   = "ameba-dev-msk-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ameba-dev-msk-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-batch-service-policy" {
  name   = "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-batch-service-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-batch-service-policy.json
}

resource "aws_iam_policy" "aomad-ameba-link-service-stage-policy" {
  description = "aomad-ameba-link-service-stage-policy"
  name        = "aomad-ameba-link-service-stage-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-link-service-stage-policy.json
}

resource "aws_iam_policy" "aomad-ameba-labelcopy-loader-dev-policy" {
  description = "aomad-ameba-labelcopy-loader-dev-policy"
  name        = "aomad-ameba-labelcopy-loader-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-labelcopy-loader-dev-policy.json
}

resource "aws_iam_policy" "aomad-ameba-labelcopy-loader-stage-policy" {
  description = "aomad-ameba-labelcopy-loader-stage-policy"
  name        = "aomad-ameba-labelcopy-loader-stage-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-labelcopy-loader-stage-policy.json
}

resource "aws_iam_policy" "aomad-ameba-evnt-hist-dev-policy" {
  description = "aomad-ameba-evnt-hist-dev-policy"
  name        = "aomad-ameba-evnt-hist-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-evnt-hist-dev-policy.json
}

resource "aws_iam_policy" "aomad-ameba-glue-schema-registry-read-policy" {
  description = "aomad-ameba-glue-schema-registry-read-policy"
  name        = "aomad-ameba-glue-schema-registry-read-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-glue-schema-registry-read-policy.json
}

resource "aws_iam_policy" "aomad-ameba-glue-sr-dev-policy" {
  description = "aomad-ameba-glue-sr-dev-policy"
  name        = "aomad-ameba-glue-sr-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-glue-sr-dev-policy.json
}

resource "aws_iam_policy" "aomad-ameba-evnt-hist-stage-policy" {
  description = "aomad-ameba-evnt-hist-stage-policy"
  name        = "aomad-ameba-evnt-hist-stage-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-evnt-hist-stage-policy.json
}

resource "aws_iam_policy" "ccshr-aoma-sts-assume-policy" {
  description = "ccshr-aoma-sts-assume-policy"
  name        = "ccshr-aoma-sts-assume-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ccshr-aoma-sts-assume-policy.json
}

resource "aws_iam_policy" "aomad-cloudwatch-role-policy" {
  description = "aomad-cloudwatch-role-policy"
  name        = "aomad-cloudwatch-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-cloudwatch-role-policy.json
}

resource "aws_iam_policy" "dlm_lifecycle_role-policy" {
  description = "dlm_lifecycle_role-policy"
  name        = "dlm_lifecycle_role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.dlm_lifecycle_role-policy.json
}

resource "aws_iam_policy" "aomad-del-mlib-msk-usr-policy" {
  description = "aomad-del-mlib-msk-usr-policy"
  name        = "aomad-del-mlib-msk-usr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-del-mlib-msk-usr-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-sr-role-policy" {
  description = "aomad-eks-ameba-dev-sa-sr-role-policy"
  name        = "aomad-eks-ameba-dev-sa-sr-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-sr-role-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-dbzm-role-policy" {
  description = "aomad-eks-ameba-dev-sa-dbzm-role-policy"
  name        = "aomad-eks-ameba-dev-sa-dbzm-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-dbzm-role-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-sa-dbzm-role-policy" {
  description = "aomad-eks-ameba-stage-sa-dbzm-role-policy"
  name        = "aomad-eks-ameba-stage-sa-dbzm-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-dbzm-role-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-ks-role-policy" {
  description = "aomad-eks-ameba-dev-sa-ks-role-policy"
  name        = "aomad-eks-ameba-dev-sa-ks-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-ks-role-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-sa-ks-role-policy" {
  description = "aomad-eks-ameba-stage-sa-ks-role-policy"
  name        = "aomad-eks-ameba-stage-sa-ks-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-sa-ks-role-policy.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}


resource "aws_iam_policy" "ameba-dev-ns-digital-archive-dev-sa-amp-aspera-util-policy" {
  description = "Policy used by the amp-aspera-util app in digital-archive-dev namespace in ameba-dev"
  name        = "ameba-dev-ns-digital-archive-dev-sa-amp-aspera-util-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-digital-archive-dev-sa-amp-aspera-util-policy.json
}

resource "aws_iam_policy" "ameba-dev-ns-digital-archive-stage-sa-amp-aspera-util-policy" {
  description = "Policy used by the amp-aspera-util app in digital-archive-dev namespace in ameba-dev"
  name        = "ameba-dev-ns-digital-archive-stage-sa-amp-aspera-util-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-digital-archive-stage-sa-amp-aspera-util-policy.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "aomad-eks-aomad-ms-eks-sa-ust-be-kafka-policy" {
  description = "kafka cluster access"
  name        = "aomad-eks-aomad-ms-eks-sa-ust-be-kafka-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomad-ms-eks-sa-ust-be-kafka-policy.json
}

resource "aws_iam_policy" "aomad-eks-aomas-ms-sa-aoma-mail-service-kafka-policy" {
  description = "kafka cluster access"
  name        = "aomad-eks-aomas-ms-sa-aoma-mail-service-kafka-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aomas-ms-sa-aoma-mail-service-kafka-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-ns-ameba-private-sa-agql-kafka-policy" {
  description = "kafka cluster access"
  name        = "aomad-eks-ameba-stage-ns-ameba-private-sa-agql-kafka-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-ns-ameba-private-sa-agql-kafka-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-sa-kafka-utils-role-policy" {
  description = "aomad-eks-ameba-dev-sa-kafka-utils-role-policy"
  name        = "aomad-eks-ameba-dev-sa-kafka-utils-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-sa-kafka-utils-role-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-stage-sa-kafka-utils-role-policy" {
  description = "aomad-eks-ameba-stage-sa-kafka-utils-role-policy"
  name        = "aomad-eks-ameba-stage-sa-kafka-utils-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-stage-sa-kafka-utils-role-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-ameba-dev-sa-ameba-gql-role-policy" {
  description = "aomad-eks-ameba-dev-ns-ameba-dev-sa-ameba-gql-role-policy"
  name        = "aomad-eks-ameba-dev-ns-ameba-dev-sa-ameba-gql-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-ameba-dev-sa-ameba-gql-role-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-ameba-stage-sa-ameba-gql-role-policy" {
  description = "aomad-eks-ameba-dev-ns-ameba-stage-sa-ameba-gql-role-policy"
  name        = "aomad-eks-ameba-dev-ns-ameba-stage-sa-ameba-gql-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-ameba-stage-sa-ameba-gql-role-policy.json
}

resource "aws_iam_policy" "aomad-arvato-es-policy" {
  description = "aomad-arvato-es-policy"
  name        = "aomad-arvato-es-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.arvatok8s-dev-elasticsearch.json
}

resource "aws_iam_policy" "aomad-sa-msk-mlib-dev-policy" {
  description = "aomad-sa-msk-mlib-dev-policy"
  name        = "aomad-sa-msk-mlib-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-sa-msk-mlib-dev-policy.json
}

resource "aws_iam_policy" "aomad-sa-msk-delivery-dev-policy" {
  description = "aomad-sa-msk-delivery-dev-policy"
  name        = "aomad-sa-msk-delivery-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-sa-msk-delivery-dev-policy.json
}

resource "aws_iam_policy" "aomad-sa-msk-mlib-stage-policy" {
  description = "aomad-sa-msk-mlib-stage-policy"
  name        = "aomad-sa-msk-mlib-stage-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-sa-msk-mlib-stage-policy.json
}

resource "aws_iam_policy" "aomad-sa-msk-delivery-stage-policy" {
  description = "aomad-sa-msk-delivery-stage-policy"
  name        = "aomad-sa-msk-delivery-stage-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-sa-msk-delivery-stage-policy.json
}

resource "aws_iam_policy" "aomad-sa-msk-eom-dev-policy" {
  name   = "aomad-sa-msk-eom-dev-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-sa-msk-eom-dev-policy.json
}

resource "aws_iam_policy" "aomad-sa-msk-eom-stage-policy" {
  name   = "aomad-sa-msk-eom-stage-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-sa-msk-eom-stage-policy.json
}

resource "aws_iam_policy" "aomad-sa-msk-ampsv-dev-policy" {
  name   = "aomad-sa-msk-ampsv-dev-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-sa-msk-ampsv-dev-policy.json
}

resource "aws_iam_policy" "aomad-sa-msk-ampsv-stage-policy" {
  name   = "aomad-sa-msk-ampsv-stage-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-sa-msk-ampsv-stage-policy.json
}

resource "aws_iam_policy" "aomad-msk-ampsv-policy" {
  name   = "aomad-msk-ampsv-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-msk-ampsv-policy.json
}

resource "aws_iam_policy" "aomad-msk-eom-policy" {
  name   = "aomad-msk-eom-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-msk-eom-policy.json
}

resource "aws_iam_policy" "aomad-ust-stage-s3-policy" {
  name   = "aomad-ust-stage-s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-ust-stage-s3-policy.json
}

resource "aws_iam_policy" "aomad-workbench-test-policy" {
  name   = "aomad-workbench-test-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-workbench-test-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-file-storage-policy" {
  name   = "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-file-storage-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-file-storage-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-file-storage-policy" {
  name   = "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-file-storage-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-file-storage-policy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy" {
  name        = "KarpenterControllerPolicy"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy.json
}

resource "aws_iam_policy" "ameba-dev-ns-aoma3-dev-sa-aoma-envelope-service-policy" {
  description = "ameba-dev-ns-aoma3-dev-sa-aoma-envelope-service-policy"
  name        = "ameba-dev-ns-aoma3-dev-sa-aoma-envelope-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma3-dev-sa-aoma-envelope-service-policy.json
}
resource "aws_iam_policy" "ameba-dev-ns-aoma3-stage-sa-aoma-envelope-service-policy" {
  description = "ameba stage sa-aoma-envelope-service-policy"
  name        = "ameba-dev-ns-aoma3-stage-sa-aoma-envelope-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-stage-sa-aoma-envelope-service-policy.json
}

resource "aws_iam_policy" "ameba-dev-ns-aoma3-dev-sa-aoma-health-metrics-role-policy" {
  description = "ameba-dev-ns-aoma3-dev-sa-aoma-health-metrics-role-policy"
  name        = "ameba-dev-ns-aoma3-dev-sa-aoma-health-metrics-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma3-dev-sa-aoma-health-metrics-role-policy.json
}

resource "aws_iam_policy" "ameba-dev-ns-aoma3-stage-sa-aoma-health-metrics-role-policy" {
  description = "ameba-dev-ns-aoma3-stage-sa-aoma-health-metrics-role-policy"
  name        = "ameba-dev-ns-aoma3-stage-sa-aoma-health-metrics-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma3-stage-sa-aoma-health-metrics-role-policy.json
}

resource "aws_iam_policy" "aomad-s3-policy" {
  name        = "aomad-s3-policy"
  description = "s3 IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-s3-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-aoma2-dev-ns-aoma-queue-service" {
  name        = "aomad-eks-ameba-dev-aoma2-dev-ns-aoma-queue-service"
  description = "Policy for AWS Secrets"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-aoma2-dev-ns-aoma-queue-service.json
}

resource "aws_iam_policy" "AmazonEKS_EBS_CSI_Driver_Policy" {
  name   = "AmazonEKS_EBS_CSI_Driver_Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.AmazonEKS_EBS_CSI_Driver_Policy.json
}

resource "aws_iam_policy" "aomad-quicksight-prog-policy-v2" {
  name   = "aomad-quicksight-prog-policy-v2"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-quicksight-prog-policy-v2.json
}

resource "aws_iam_policy" "aomad-ameba-db-athena-policy" {
  name   = "aomad-ameba-db-athena-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-ameba-db-athena-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-auth-service-policy" {
  name   = "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-auth-service-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-auth-service-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma-ern-service-policy" {
  name   = "aomad-eks-ameba-dev-ns-aoma-ern-service-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma-ern-service-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-policy" {
  name   = "aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-policy.json
}

resource "aws_iam_policy" "AmazonS3CSIDriverPolicy" {
  name        = "AmazonS3CSIDriverPolicy"
  description = "Policy used to Mount S3 Bucket on a EKS Pod"
  path        = var.path
  policy      = data.aws_iam_policy_document.AmazonS3CSIDriverPolicy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-aoma2-stage-ns-aoma-queue-service" {
  name        = "aomad-eks-ameba-dev-aoma2-stage-ns-aoma-queue-service"
  description = "Policy for AWS Secrets"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-aoma2-stage-ns-aoma-queue-service.json
}

# AOMARegistrationPostProcessingDev SQS queue
resource "aws_iam_policy" "aomad-sqs-registration-post-processing-read" {
  name        = "aomad-sqs-registration-post-processing-read"
  description = "Policy for AOMARegistrationPostProcessingDev SQS queue"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-sqs-registration-post-processing-read.json
}

resource "aws_iam_policy" "aomad-sqs-registration-post-processing-create" {
  name        = "aomad-sqs-registration-post-processing-create"
  description = "Policy for AOMARegistrationPostProcessingDev SQS queue"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-sqs-registration-post-processing-create.json
}

# AOMARegistrationPostProcessingStage SQS queue
resource "aws_iam_policy" "aomas-sqs-registration-post-processing-read" {
  name        = "aomas-sqs-registration-post-processing-read"
  description = "Policy for AOMARegistrationPostProcessingStage SQS queue"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-sqs-registration-post-processing-read.json
}

resource "aws_iam_policy" "aomas-sqs-registration-post-processing-create" {
  name        = "aomas-sqs-registration-post-processing-create"
  description = "Policy for AOMARegistrationPostProcessingStage SQS queue"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-sqs-registration-post-processing-create.json
}

resource "aws_iam_policy" "sme-aoma-da-test-policy" {
  name        = "sme-aoma-da-test-policy"
  description = "Policy for AOMARegistrationPostProcessingStage SQS queue"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-aoma-da-test-policy.json
}

resource "aws_iam_policy" "da-ui-service-dev-policy" {
  description = "da-ui-service-dev-policy"
  name        = "da-ui-service-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.da-ui-service-dev-policy.json
}

resource "aws_iam_policy" "full-rds-proxy-access" {
  description = "full-rds-proxy-access"
  name        = "full-rds-proxy-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.full-rds-proxy-access.json
}


resource "aws_iam_policy" "ameba-dev-ns-aoma2-dev-sa-amp-search-policy" {
  description = "ameba-dev-ns-aoma2-dev-sa-amp-search-policy"
  name        = "ameba-dev-ns-aoma2-dev-sa-amp-search-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma2-dev-sa-amp-search-policy.json
}

resource "aws_iam_policy" "aomad-eks-aoma2-kafka-sa-policy" {
  description = "aomad-eks-aoma2-kafka-sa-policy"
  name        = "aomad-eks-aoma2-kafka-sa-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-aoma2-kafka-sa-policy.json
}

resource "aws_iam_policy" "aomad2-txmgr-kafka-consumer-service-policy" {
  description = "aomad2-txmgr-kafka-consumer-service-policy"
  name        = "aomad2-txmgr-kafka-consumer-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad2-txmgr-kafka-consumer-service-policy.json
}

resource "aws_iam_policy" "aomas-txmgr-kafka-consumer-service-policy" {
  description = "aomas-txmgr-kafka-consumer-service-policy"
  name        = "aomas-txmgr-kafka-consumer-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-txmgr-kafka-consumer-service-policy.json
}

resource "aws_iam_policy" "aomad-aoma-txmgr-worker-policy" {
  description = "aomad-aoma-txmgr-worker-policy"
  name        = "aomad-aoma-txmgr-worker-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-aoma-txmgr-worker-policy.json
}

resource "aws_iam_policy" "aomad-kafka-cluster-read-policy" {
  description = "aomad-kafka-cluster-read-policy"
  name        = "aomad-kafka-cluster-read-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-kafka-cluster-read-policy.json
}

resource "aws_iam_policy" "aomad-ameba-txmgr-worker-sa-role-policy" {
  description = "aomad-ameba-txmgr-worker-sa-role-policy"
  name        = "aomad-ameba-txmgr-worker-sa-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-ameba-txmgr-worker-sa-role-policy.json
}

resource "aws_iam_policy" "aomad-mi-load-comparison-secretsmanager-access" {
  description = "aomad-mi-load-comparison-secretsmanager-access"
  name        = "aomad-mi-load-comparison-secretsmanager-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-mi-load-comparison-secretsmanager-access.json
}

resource "aws_iam_policy" "aomad-mi-load-comparison-s3-access" {
  description = "aomad-mi-load-comparison-s3-access"
  name        = "aomad-mi-load-comparison-s3-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-mi-load-comparison-s3-access.json
}

resource "aws_iam_policy" "aomad-mi-load-comparison-ec2-access" {
  description = "aomad-mi-load-comparison-ec2-access"
  name        = "aomad-mi-load-comparison-ec2-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-mi-load-comparison-ec2-access.json
}

resource "aws_iam_policy" "aomad-mi-load-comparison-sqs-access" {
  description = "aomad-mi-load-comparison-sqs-access"
  name        = "aomad-mi-load-comparison-sqs-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-mi-load-comparison-sqs-access.json
}

resource "aws_iam_policy" "aomad-mi-load-comparison-kms-access" {
  description = "aomad-mi-load-comparison-kms-access"
  name        = "aomad-mi-load-comparison-kms-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-mi-load-comparison-kms-access.json
}

resource "aws_iam_policy" "aomas-storage-gateway-policy" {
  description = "aomas-storage-gateway-policy"
  name        = "aomas-storage-gateway-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomas-storage-gateway-policy.json
}

resource "aws_iam_policy" "aomad-deployment-eventbridge-policy" {
  description = "aomad-deployment-eventbridge-policy"
  name        = "aomad-deployment-eventbridge-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-deployment-eventbridge-policy.json
}

resource "aws_iam_policy" "aomad-aws-storage-gateway-policy" {
  description = "aomad-aws-storage-gateway-policy"
  name        = "aomad-aws-storage-gateway-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-aws-storage-gateway-policy.json
}

resource "aws_iam_policy" "ameba-dev-ns-aoma2-dev-sa-aoma-service-timer-policy" {
  description = "ameba-dev-ns-aoma2-dev-sa-aoma-service-timer-policy"
  name        = "ameba-dev-ns-aoma2-dev-sa-aoma-service-timer-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-dev-ns-aoma2-dev-sa-aoma-service-timer-policy.json
}

resource "aws_iam_policy" "sme-ust-ci-transfer-stage-role-policy" {
  description = "sme-ust-ci-transfer-stage-role-policy"
  name        = "sme-ust-ci-transfer-stage-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-ust-ci-transfer-stage-role-policy.json
}
resource "aws_iam_policy" "sme-ust-ci-transfer-dev-role-policy" {
  description = "sme-ust-ci-transfer-dev-role-policy"
  name        = "sme-ust-ci-transfer-dev-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-ust-ci-transfer-dev-role-policy.json
}

resource "aws_iam_policy" "aoma-dev-stg-rds-proxy-kms-policy" {
  description = "aoma-dev-stg-rds-proxy-kms-policy"
  name        = "aoma-dev-stg-rds-proxy-kms-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-stg-rds-proxy-kms-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-cldntv-policy" {
  description = "aoma-dev-rds-proxy-secret-cldntv-policy"
  name        = "aoma-dev-rds-proxy-secret-cldntv-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-cldntv-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-cldntv-policy" {
  description = "aoma-stg-rds-proxy-secret-cldntv-policy"
  name        = "aoma-stg-rds-proxy-secret-cldntv-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-cldntv-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-prvw_srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_amp_asset_preview_service"
  name        = "aoma-dev-rds-proxy-secret-prvw_srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-prvw_srvc-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-prvw_srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_amp_asset_preview_service"
  name        = "aoma-stg-rds-proxy-secret-prvw_srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-prvw_srvc-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-aspra_utl-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_amp_aspera_util"
  name        = "aoma-dev-rds-proxy-secret-aspra_utl-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-aspra_utl-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-aspra_utl-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_amp_aspera_util"
  name        = "aoma-stg-rds-proxy-secret-aspra_utl-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-aspra_utl-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-batch-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_aoma_batch_srvc"
  name        = "aoma-dev-rds-proxy-secret-batch-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-batch-srvc-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-batch-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_aoma_batch_srvc"
  name        = "aoma-stg-rds-proxy-secret-batch-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-batch-srvc-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-amp-exp-clnt-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_amp_asset_export_client"
  name        = "aoma-dev-rds-proxy-secret-amp-exp-clnt-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-amp-exp-clnt-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-exp-clnt-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_amp_asset_export_client"
  name        = "aoma-stg-rds-proxy-secret-exp-clnt-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-exp-clnt-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-envlp-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_envelope_srvc"
  name        = "aoma-dev-rds-proxy-secret-envlp-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-envlp-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-envlp-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_envelope_srvc"
  name        = "aoma-stg-rds-proxy-secret-envlp-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-envlp-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-ust-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ust_srvc"
  name        = "aoma-dev-rds-proxy-secret-ust-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-ust-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-ust-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ust_srvc"
  name        = "aoma-stg-rds-proxy-secret-ust-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-ust-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-ust-be-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ust_be_srvc"
  name        = "aoma-dev-rds-proxy-secret-ust-be-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-ust-be-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-ust-be-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ust_be_srvc"
  name        = "aoma-stg-rds-proxy-secret-ust-be-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-ust-be-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-da-batch-init-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_da_batch_initiator"
  name        = "aoma-dev-rds-proxy-secret-da-batch-init-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-da-batch-init-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-da-batch-init-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_da_batch_initiator"
  name        = "aoma-stg-rds-proxy-secret-da-batch-init-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-da-batch-init-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-da-asset-imp-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret da_asset_importer"
  name        = "aoma-dev-rds-proxy-secret-da-asset-imp-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-da-asset-imp-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-da-asset-imp-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret da_asset_importer"
  name        = "aoma-stg-rds-proxy-secret-da-asset-imp-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-da-asset-imp-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-da-cntct-sht-hndlr-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_amp_contactsheet_handler"
  name        = "aoma-dev-rds-proxy-secret-da-cntct-sht-hndlr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-da-cntct-sht-hndlr-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-da-cntct-sht-hndlr-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_amp_contactsheet_handler"
  name        = "aoma-stg-rds-proxy-secret-da-cntct-sht-hndlr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-da-cntct-sht-hndlr-policy.json
}

resource "aws_iam_policy" "aoma-dev-stg-rds-proxy-secret-amino-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev,Stage DB login credential secret amino_srvc"
  name        = "aoma-dev-stg-rds-proxy-secret-amino-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-stg-rds-proxy-secret-amino-srvc-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-txn-mgr-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret aoma_trnsctn_mngr"
  name        = "aoma-dev-rds-proxy-secret-txn-mgr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-txn-mgr-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-txn-mgr-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret aoma_trnsctn_mngr"
  name        = "aoma-stg-rds-proxy-secret-txn-mgr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-txn-mgr-policy.json
}

resource "aws_iam_policy" "aoma-dev-rds-proxy-secret-tlnt-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Dev DB login credential secret ms_aoma_talent_srvc"
  name        = "aoma-dev-rds-proxy-secret-tlnt-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-dev-rds-proxy-secret-tlnt-srvc-policy.json
}

resource "aws_iam_policy" "aoma-stg-rds-proxy-secret-tlnt-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Stage DB login credential secret ms_aoma_talent_srvc"
  name        = "aoma-stg-rds-proxy-secret-tlnt-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-stg-rds-proxy-secret-tlnt-srvc-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-aoma-sb4-secrets-policy" {
  description = "Policy to allow the SB4 aoma-core dev pods to read their Secrets Manager secrets (dev/AOMA/*, dev/da/*)"
  name        = "aomad-eks-ameba-dev-aoma-sb4-secrets-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-aoma-sb4-secrets.json

  tags = {
    "Name" = "aomad-eks-ameba-dev-aoma-sb4-secrets-policy"
  }
}