data "aws_iam_policy_document" "AmazonEKS_EFS_CSI_DriverRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringLike"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:kube-system:efs-csi-*"]
    }

    condition {
      test     = "StringLike"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-mc-sql-installer-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:mc-sql-installer"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ext-worker-nodes-NodeInstanceRole-LI2MSZ472ALZ-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma3-dev-sa-aoma-talent-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-talent-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-talent-service"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:aoma-talent-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-eks-sonyci-uti-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:sonyci-util"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:sonyci-util"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma3-dev-sa-aoma-talent-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-talent-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma3-stage-sa-aoma-export-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-export-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:aoma-export-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-digital-archive-dev-sa-amp-asset-preview-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-dev:amp-asset-preview-service"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-digital-archive-dev-sa-amp-cloudnative-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-dev:amp-cloudnative-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-digital-archive-stage-sa-amp-asset-preview-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-stage:amp-asset-preview-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ameba-sandbox-ext-worker-NodeInstanceRole-SVGAFVIYUKMO-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-stage-corp-workers-NodeInstanceRole-1JZDH5EZ7X5PQ-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-stage-int-workers-NodeInstanceRole-11PYOT7D8TZF4-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-stage-private-workers-NodeInstanceRole-1JMV52QK0SL47-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-stage-workers-ext-NodeInstanceRole-CNR4IGKSMSHH-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-stage-workers-int-NodeInstanceRole-T2ZFJRSXN7N3-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-stage01-eks-worker-node-NodeInstanceRole-ZEICZY0OYW06-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AnsibleAWSServiceAccess-AOMA-D-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::943540511943:role/AnsibleDevCrossAccountAccess",
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::476717493283:user/ccshr-eks-admin",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-tower01",
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-core-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett"]
    }
  }
}

data "aws_iam_policy_document" "aoma-core-dev-admin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/alul001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/redd001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sdonipu",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bari002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bsahoo1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/stef003",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gvamsik",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vitk001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/zeki001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/raj0006",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vank001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dwenger",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kuma011",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mham001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sinh001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/spag001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/poty002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vleung1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kukk001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gunt001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/moha006",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/prag008",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bali001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hedg001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/shar051",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hinz001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/abhy001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kuma039",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/giri004",
      ]
    }
  }
}

data "aws_iam_policy_document" "AOMA-D2-ALB-COntroller-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aoma-data-service-eks-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aoma-gras-export_eks_service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-dev:gras-export-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aoma-RDS_snapshot_lambda-role-trust-policy" {
  statement {
    sid     = "VisualEditor0"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }

  statement {
    sid     = "VisualEditor1"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds-export.aws.internal"]
    }
  }

  statement {
    sid     = "VisualEditor2"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["export.rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-amazonEKSIngresscontrollerrole-ameba-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:kube-system:alb-ingress-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-amazonEKSIngresscontrollerrole-runner-eks-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/F3D9FB5ABC2FAE81D5E1A3FE5FF0A3C8:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/F3D9FB5ABC2FAE81D5E1A3FE5FF0A3C8"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-eks-developer-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr",
        "AROA6DHL4WVUOUW7ANAVE",
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-event-consumer-ecs-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-kafkahq-monitor-ecs-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-msg-bridge-ecs-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aoma-eks-developer-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aoma3-actions-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "token.actions.githubusercontent.com:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringLike"
      variable = "token.actions.githubusercontent.com:sub"

      values = [
        "repo:SME-AOMA/aoma-mail-service:*",
        "repo:SME-AOMA/product-graphql-service:*",
        "repo:SME-AOMA/user-management-service:*",
        "repo:SME-AOMA/aoma-data-service:*",
        "repo:SME-AOMA/aoma-export-service:*",
        "repo:SME-AOMA/gras-ws-proxy:*",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/token.actions.githubusercontent.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-ampcntpv01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-asputil01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-bastion01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-db-gitrun01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-gitrun01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-gitrun02-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
      "sts:TagSession",
    ]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
      "sts:TagSession",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/aomad-aomad2-gitrun02"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-gitrun03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-gitrun04-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-gitven01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-gras-graphql-ecs-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-mdimport-ecs-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-popbe01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-popfe01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-txmgr-ecs-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-txmgr-ecs-01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-txmgr-ecs-02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-webapp01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:sts::358364484590:assumed-role/AWS_SSO/niko001"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-ampcntpv01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-aomapgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomad2-aspera01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-asputil01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-bastion01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-mailsvc01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-metadata-import-service-ecs-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-mlibpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-ora-txmgr01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-ora-txmgr02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-ora-txmgr03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-ora-txmgr04-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-pg-txmgr01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-pg-txmgr02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-pg-txmgr03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-pg-txmgr04-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-txmgr01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-txmgr02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-txmgr03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-txmgr04-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aomas-usrmgmt01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-clopsd-awaxd-dbutils01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-pven01",
        "arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbutils02",
        "arn:aws:iam::943540511943:role/clopsd-awaxd-dbutils01",
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-cloudops_ses-key-rotation-function-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-database-admin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-dev2-mailsvc-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-dev2-prodsrvc-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-dev2-usrmgmt-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ec-ecs-instance-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ec2-aomas-ameba-utils-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-admin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::358364484590:root"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomad-ameba-auth-server-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomad-ameba-schema-registry-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomad-eureka-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomad-gateway-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomad-txmgr-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomad2-mdimport-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomad2-txmgr-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-dev:metadata-import-service"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::107577002119:role/globaldsd-aoma-txmgr-dev-role",
        "arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-aomas-mdimport-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ecs-autoscale-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.application-autoscaling.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ECS-Instance-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-ameba-private-sa-agql-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ameba-graphql-service"]

    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-private:agql"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-ns-ameba-private-sa-agql-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-ameba-private-sa-hq-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-private:hq"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-export-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:aoma-data-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-export-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-ars-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ars"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::662765073744:role/promod-ameba-ars-quicksight-role"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-sa-ars"]
    }
  }
}
data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-auth-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:aoma3-dev"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}
data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-ec-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ec"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-private:ec"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-sa-ec-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-gw-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-private:gw"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3-dev:gw"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:gw-dev:gw-int"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:gw-stage:gw-int"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-mb-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:mb"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:mb-nojms"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:mb"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:mb-nojms"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-sa-mb-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-stage-ns-ameba-private-sa-agql-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ameba-graphql-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-stage-ns-ameba-private-sa-agql-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-stage-ns-ameba-private-sa-ec-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137:sub"
      values   = ["system:serviceaccount:ameba-private:ec"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ec"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-stage-ns-ameba-private-sa-ec-role"]
    }
  }
}


data "aws_iam_policy_document" "aomad-eks-ameba-stage-ns-ameba-private-sa-gw-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137:sub"
      values   = ["system:serviceaccount:ameba-private:gw"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:gw"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:gw-stage:gw-int"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:gw-stage:gw-ext"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-stage-ns-ameba-sa-mb-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137:sub"
      values   = ["system:serviceaccount:ameba:mb"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:mb"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:mb"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:mb-nojms"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/aomad-eks-ameba-stage-ns-ameba-sa-mb-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-stage-sa-ars-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137:sub"
      values   = ["system:serviceaccount:ameba-stage:ars"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/E8E51CF9ADF6DF0BE3FD6516601D1137"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ars"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::662765073744:role/promod-ameba-ars-quicksight-role"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-stage-sa-ars"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-data-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:aoma-data-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-data-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-sas-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:aoma-sas"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-sas"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-ust-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:aoma-ust"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-ust"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-aomad-ms-eks-ns-aoma3-sa-aoma-ust-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-eks-ns-aoma3-sa-ust-be-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:ust-be-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-eks-sa-ust-be-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:ust-be-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:ust-be-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-sa-aoma-mail-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-mail-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:aoma-mail-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-sa-aoma-product-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:aoma-product-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-sa-gras-ws-proxy-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:gras-ws-proxy"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:gras-ws-proxy"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-sa-product-graphql-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:product-graphql-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:product-graphql-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomad-ms-sa-user-management-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:sub"
      values   = ["system:serviceaccount:aoma3:user-management-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:user-management-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-data-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:aoma-data-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-data-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-data-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:aoma-data-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-sas-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:aoma-sas"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-sas"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-sas"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:aoma-sas"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-ns-aoma3-sa-aoma-ust-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:aoma-ust"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-ust"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-ust"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:aoma-ust"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-aomas-ms-ns-aoma3-sa-aoma-ust-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-ns-aoma3-sa-ust-be-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:ust-be-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:ust-be-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:ust-be-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:ust-be-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-sa-aoma-mail-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:aoma-mail-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-mail-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-mail-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:aoma-mail-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-sa-aoma-product-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:aoma-product-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-product-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-sa-gras-ws-proxy-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:gras-ws-proxy"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:gras-ws-proxy"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:gras-ws-proxy"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:gras-ws-proxy"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-sa-product-graphql-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:product-graphql-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:product-graphql-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:product-graphql-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:product-graphql-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-aomas-ms-sa-user-management-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:sub"
      values   = ["system:serviceaccount:aoma3:user-management-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:user-management-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:user-management-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-uat:user-management-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-eorker-node-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ingress-controller-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/0145077E61813906501E7D3799A03E27"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/02011698AEE6CDE18FE6387561D2819D"]
    }
  }
}

data "aws_iam_policy_document" "aomad-EKS-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-EKS-Service-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-EKS-worker-node-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-es-cognito-access-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["es.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-github-actions-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "token.actions.githubusercontent.com:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringLike"
      variable = "token.actions.githubusercontent.com:sub"
      values = [
        "repo:SME-AOMA/*",
        "repo:SME-databases/*",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/token.actions.githubusercontent.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
      "sts:TagSession",
    ]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::${var.account_id}:role/aomad-aomad2-gitrun02",
        "arn:aws:iam::969009837416:role/aomad-aomad2-db-gitrun01"
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-infosec-cwro-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/jais003",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/npatel1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hegd001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/reed001",
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-kibana-ameba-sns-notification-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["es.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-lambda-apigw-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-lambda-esDeleteIndex-dev-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-lambda-esDeleteIndex-stage-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-mb-ecs-instance-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-metadata-import-actions-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringLike"
      variable = "token.actions.githubusercontent.com:sub"

      values = [
        "repo:SME-AOMA/aoma-transactionmanager:*",
        "repo:SME-AOMA/gras_graphql:*",
        "repo:SME-AOMA/metadata-import-service:*",
        "repo:SME-AOMA/raas.export:*",
      ]
    }

    condition {
      test     = "StringEquals"
      variable = "token.actions.githubusercontent.com:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/token.actions.githubusercontent.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ms-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ms-eks-worker-node-NodeInstanceRole-X06K3LSP7X28-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-msk-ameba-sandbox-admin-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbutils02",
        "arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr",
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-msk-ameba-sandbox-consumer-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbutils02"]
    }
  }
}

data "aws_iam_policy_document" "aomad-msk-ameba-sandbox-producer-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbutils02"]
    }
  }
}

data "aws_iam_policy_document" "aomad-prometheus-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:root"]
    }
  }
}

data "aws_iam_policy_document" "aomad-quicksight-migrator-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::613871678587:user/aomap-quicksight-prog",
        "arn:aws:iam::613871678587:root",
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-sme-global-msk-dev-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-stage-mailsvc-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-stage-prodsrvc-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-stage-usrmgmt-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-txmgr-ecs-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-txmgr-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-dev2-usrmgmt-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-ecs-aomad2-ast-gql-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-ecs-aomad2-gateway-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-ecs-aomad2-gql-gateway-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-ecs-aomad2-mdimport-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-ecs-aomad2-txmgr-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-ECS-Instance-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas2-ECS-Instance-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-gras-graphql-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-sftspgbouncer01-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ameba-kafkahq-monitor-ecs-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ameba-schema-registry-ecs-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-aomad-ameba-schema-registry-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-aomad-metadata-import-service-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-aomas-ameba-event-consumer-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-aomas-ameba-message-bridge-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-aomas-gql-gateway-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-aomas-mdimport-taskdef-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-aomas-ust-gql-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ECS-Instance-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ecs-txmgr-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-dev:metadata-import-service"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::107577002119:role/globaldsd-aoma-txmgr-uat-role"]
    }
  }
}

data "aws_iam_policy_document" "aomas-gras-graphql-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-lambda-apigw-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ms-eks-1-worker-nodes-NodeInstanceRole-1Q9SM5Z3Q6YC0-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-ora-txmgr-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-pg-txmgr-taskdef-task-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-sftspgbouncer01-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-stage-usrmgmt-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aps-mc-output-acl-lambda-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "asset-preview-service-ec2-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "asset-preview-service-lambda-dev2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "asset-preview-service-lambda-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "asset-preview-service-mediaconvert-dev2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["mediaconvert.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "asset-preview-service-mediaconvert-lambda-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "asset-preview-service-mediaconvert-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["mediaconvert.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "asset-preview-service-mediaconvert-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["mediaconvert.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "Athena-s3-Glue-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["glue.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aws-quicksight-s3-consumers-role-v0-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["quicksight.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aws-quicksight-service-role-v0-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["quicksight.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSBackupDefaultServiceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["backup.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSDataSyncS3BucketAccess-sme-aoma-core-dev-quicksight-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["datasync.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAccessAnalyzer-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["access-analyzer.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonEKS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonEKSNodegroup-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks-nodegroup.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonElasticFileSystem-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticfilesystem.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonElasticsearchService-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["es.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonGuardDuty-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["guardduty.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonSSM-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ssm.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAPIGateway-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ops.apigateway.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAutoScaling-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["autoscaling.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForBackup-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["backup.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudFormationStackSetsOrgMember-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["member.org.stacksets.cloudformation.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudFrontLogger-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["logger.cloudfront.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudTrail-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["cloudtrail.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudWatchEvents-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["events.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForECRReplication-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["replication.ecr.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForECS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForElastiCache-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticache.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForElasticLoadBalancing-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticloadbalancing.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForFMS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["fms.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForGlobalAccelerator-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["globalaccelerator.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForKafka-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["kafka.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForLambdaReplicator-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["replicator.lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForMarketplaceLicenseManagement-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["license-management.marketplace.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForNetworkFirewall-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["network-firewall.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForOrganizations-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["organizations.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForRDS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForRoute53Resolver-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["route53resolver.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForServiceQuotas-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["servicequotas.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForSSO-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["sso.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForSupport-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["support.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForTrustedAdvisor-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["trustedadvisor.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForVPCTransitGateway-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["transitgateway.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForWAFV2Logging-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["wafv2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWS_Events_Invoke_Inspector_Assessment_Template-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["events.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "Billing-RO-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/poly006",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/shar051",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/roraj01",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/aray001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/giri004",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/suka001",
      ]
    }
  }
}

data "aws_iam_policy_document" "CloudabilityRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["88d98df5-4bcb-4ab5-8f6f-4cbb3878e26d"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::165736516723:user/cloudability"]
    }
  }
}

data "aws_iam_policy_document" "cloudops-Budget-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["budgets.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "cloudops-cloudwatchlogs-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["apigateway.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "CloudOpsECR-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}





data "aws_iam_policy_document" "CloudTrail_CloudWatchLogs_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["cloudtrail.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "cloudwarerole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["6e194b01-9ace-47eb-8d83-5bf409257419"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::814021343637:user/ca-collector"]
    }
  }
}

data "aws_iam_policy_document" "CognitoAccessForAmazonES-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["es.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "Cognito_aomad_kibana_usersAuth_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "cognito-identity.amazonaws.com:aud"
      values   = ["eu-central-1:6d96e3d8-d995-44d1-a88e-a4fd4f8391d2"]
    }

    condition {
      test     = "ForAnyValue:StringLike"
      variable = "cognito-identity.amazonaws.com:amr"
      values   = ["authenticated"]
    }

    principals {
      type        = "Federated"
      identifiers = ["cognito-identity.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "Cognito_aomad_kibana_usersUnauth_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "cognito-identity.amazonaws.com:aud"
      values   = ["eu-central-1:6d96e3d8-d995-44d1-a88e-a4fd4f8391d2"]
    }

    condition {
      test     = "ForAnyValue:StringLike"
      variable = "cognito-identity.amazonaws.com:amr"
      values   = ["unauthenticated"]
    }

    principals {
      type        = "Federated"
      identifiers = ["cognito-identity.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "cored-aws-config-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["config.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "cored-portal-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-reports01",
        "arn:aws:iam::943540511943:root",
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-portal01"
      ]
    }
  }
}

data "aws_iam_policy_document" "cored-trendmicro_esdomain_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "DatadogAWSIntegrationRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["0207b7da1543466d8945815d75814661"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::464622532012:root"]
    }
  }
}

data "aws_iam_policy_document" "DeepSecurity-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["925e07d8-ba0d-4091-8160-8d402633278d"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::147995105371:root"]
    }
  }
}

data "aws_iam_policy_document" "DeepSecuritySetup-8d1cec619-LambdaExecutionRole-HDDFC4P514D9-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "dms-vpc-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["dms.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "dspFileUpload-role-dwymht2l-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ECSAdmin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::358364484590:root"]
    }
  }
}

data "aws_iam_policy_document" "ecsTaskDefRole-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "eks_assume_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::358364484590:root"]
    }
  }
}

data "aws_iam_policy_document" "flowlogsRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["vpc-flow-logs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "GSIRT_AWS_Monitoring_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:role/splunk_ec2_api_server_role"]
    }
  }
}

data "aws_iam_policy_document" "k8s-alb-controller-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/aomad-EKS-role"]
    }
  }
}

data "aws_iam_policy_document" "lambda_elasticsearch_execution_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lamda_to_s3_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "logs_check-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "OrchCertAccess-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::662302927201:root"]
    }
  }
}

data "aws_iam_policy_document" "OrganizationAccountAccessRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::970903126758:root"]
    }
  }
}

data "aws_iam_policy_document" "PostgreSQL-Credentials-Rotation-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "PostgreSQL-Credentials-Rotation-Role-V2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "postgres_to_s3_migration-role-qjr35okn-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "PrismaCloudReadWriteRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["5365b833-4dbe-42f0-9a1a-5392220af763"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::188619942792:root"]
    }
  }
}

data "aws_iam_policy_document" "prvsvc-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "rds-monitoring-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["monitoring.rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "RDS-role-for-lambda-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com", "rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "rough-cuts-data-export-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "RDSAdmin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gvamsik",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sing101",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sira001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dwenger",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vank001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish008",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/prag008",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/davi020",
      ]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["export.rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "RDSProxyIAMRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "RDSReadOnly-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vank001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish008",
      ]
    }
  }
}

data "aws_iam_policy_document" "RDS_Quicksight_lambda-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ReadOnlyExtern-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/manu002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/spag001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/maha005",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/higg003",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hedg001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/home001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/svid001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sinh001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hont002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/npatel1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/frie010",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bond001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/jaga001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bari002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bsahoo1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/thom027",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sasi001",
        "arn:aws:iam::943540511943:role/ReadOnlyInfoSec",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/ashetgao",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dara001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/stan004",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/osto001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dewi002",
      ]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }
}

data "aws_iam_policy_document" "SecretsManagerRDSPostgreS-SecretsManagerRDSPostgre-1WATR5G8LXI0R-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "smart-check-ecr-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::358364484590:root"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-core-dev-gen-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-core-dev-waf-logging-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["${var.account_id}"]
    }

    principals {
      type        = "Service"
      identifiers = ["firehose.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-dev-ust-team-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/niko001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mcarpent",
      ]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-ust-dev-lambdaedge-role-9z37v404-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "Service"

      identifiers = [
        "edgelambda.amazonaws.com",
        "lambda.amazonaws.com",
      ]
    }
  }
}

data "aws_iam_policy_document" "stacksets-exec-681219392bfdde9951179cb20ffea4ef-trust-policy" {
  statement {
    sid     = "1"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::970903126758:role/aws-service-role/stacksets.cloudformation.amazonaws.com/AWSServiceRoleForCloudFormationStackSetsOrgAdmin"]
    }
  }
}

data "aws_iam_policy_document" "ustPreFlightCheck-role-qafyrsp2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-batch-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-batch-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-batch-service-role"]
    }
  }

}

data "aws_iam_policy_document" "aomad-ameba-link-service-dev-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ameba-link-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-ameba-link-service-dev-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-batch-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-batch-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-batch-service-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-link-service-stage-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ameba-link-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-ameba-link-service-stage-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-labelcopy-loader-dev-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ameba-labelcopy-loader"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

}

data "aws_iam_policy_document" "aomad-ameba-labelcopy-loader-stage-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ameba-labelcopy-loader"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

}

data "aws_iam_policy_document" "aomad-ameba-evnt-hist-dev-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ameba-evnt-hist"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-ameba-evnt-hist-dev-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-evnt-hist-stage-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ameba-evnt-hist"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-ameba-evnt-hist-stage-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-cloudwatch-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sing056",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/jamm001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/khan020",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kord001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/moha006",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nanj001",
      ]
    }
  }
}

data "aws_iam_policy_document" "dlm_lifecycle_role-trust-policy" {
  statement {
    effect = "Allow"

    principals {
      type        = "Service"
      identifiers = ["dlm.amazonaws.com"]
    }

    actions = ["sts:AssumeRole"]
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-sr-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:sr"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-sa-sr-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-dbzm-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:dbzm"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/aomad-eks-ameba-dev-sa-dbzm-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-stage-sa-dbzm-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:dbzm"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/aomad-eks-ameba-stage-sa-dbzm-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-ks-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ks"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-sa-ks-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-stage-sa-ks-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ks"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-stage-sa-ks-role"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-digital-archive-dev-sa-amp-aspera-util-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-dev:amp-aspera-util"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}
data "aws_iam_policy_document" "ameba-dev-ns-digital-archive-stage-sa-amp-aspera-util-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-stage:amp-aspera-util"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "amd-digital-archive-dev-amp-cloudnative-task-progress-verifier-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-dev:amp-cloudnative-task-progress-verifier"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ams-digital-archive-stage-amp-cloudnative-task-progress-verifier-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-stage:amp-cloudnative-task-progress-verifier"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::887829410671:root"]
    }
  }
}

data "aws_iam_policy_document" "KubeCostFederatedRole-ameba-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:kubecost:kubecost-s3-access-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "betabase-d-ecs-taskdef-task-role-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "betabase-d-ECS-Instance-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-kafka-utils-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:kafka-utils"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-sa-kafka-utils-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-stage-sa-kafka-utils-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:kafka-utils"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-stage-sa-kafka-utils-role"]
    }
  }
}


data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-ameba-dev-sa-ameba-gql-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:ameba-gql"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-ns-ameba-dev-sa-ameba-gql-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-ameba-stage-sa-ameba-gql-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-stage:ameba-gql"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-ns-ameba-stage-sa-ameba-gql-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-mlib-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/deld-deld-mlib01"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::058029036333:role/deld-EKS-worker-node-Role",
        "arn:aws:iam::058029036333:role/deld-dev-asset-requester"
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-delivery-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/deld-dev-asset-requester"]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-mlib-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/deld-ECS-Instance-Role"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::058029036333:role/deld-EKS-worker-node-Role",
        "arn:aws:iam::058029036333:role/deld-util"
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-delivery-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::058029036333:role/deld-stage-asset-requester",
        "arn:aws:iam::058029036333:role/deld-util"
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-eom-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::718729873097:role/digsysd-eks-dev-oms-asset-ingest-sa-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-eom-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::718729873097:role/digsysd-eks-dev-oms-asset-ingest-sa-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-ampsv-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/ampd-eks-amp-dev-as-asset-service-sa-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-sa-msk-ampsv-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/ampd-eks-amp-dev-as-asset-service-sa-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-file-storage-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-file-storage-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-aoma3-stage-sa-aoma-file-storage-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-file-storage-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "KarpenterControllerRole-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:TagSession",
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["pods.eks.amazonaws.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRoleWithWebIdentity"
    ]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:kube-system:karpenter"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aoma-secretsmgr-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::943540511943:role/vault-uat-iam-role",
        "arn:aws:iam::476717493283:role/vault-prod-iam-role",
        "arn:aws:iam::943540511943:role/clopsd-cid-vault01",
        "arn:aws:iam::594705885108:role/service-role/ca-dev-vault-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "aomas-aoma-txmgr-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::943540511943:role/vault-uat-iam-role",
        "arn:aws:iam::476717493283:role/vault-prod-iam-role",
        "arn:aws:iam::943540511943:role/clopsd-cid-vault01",
        "arn:aws:iam::594705885108:role/service-role/ca-dev-vault-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-aoma-txmgr-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::943540511943:role/vault-uat-iam-role",
        "arn:aws:iam::476717493283:role/vault-prod-iam-role",
        "arn:aws:iam::943540511943:role/clopsd-cid-vault01",
        "arn:aws:iam::594705885108:role/service-role/ca-dev-vault-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma3-dev-sa-aoma-envelope-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-envelope-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-ns-aoma3-dev-sa-aoma-envelope-service-role"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma3-dev-sa-aoma-health-metrics-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-dev:aoma-health-metrics"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma3-stage-sa-aoma-health-metrics-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-health-metrics"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-s3-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma3-stage-sa-aoma-envelope-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma3-stage:aoma-envelope-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = "12343"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-ns-aoma3-stage-sa-aoma-envelope-service-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-aoma2-dev-ns-aoma-queue-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-dev:aoma2-apps-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-stage:aoma2-apps-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "AmazonEKS_EBS_CSI_DriverRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:kube-system:ebs-csi-controller-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}


data "aws_iam_policy_document" "aomad-eks-ameba-stage-sa-auth-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:aoma3-stage"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-aoma-ern-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-dev:aoma-ern-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-stage:aoma-ern-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}


data "aws_iam_policy_document" "aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-dev:txmgr-digital-assurance-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-stage:txmgr-digital-assurance-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-ecs-aomad2-txmgr-taskdef-task-role"]
    }
  }
}

data "aws_iam_policy_document" "AmazonEKS_S3_CSI_DriverRole-trust-policy" {
  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:kube-system:s3-csi-driver-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-dev:s3-csi-driver-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-dev:default"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-aoma2-stage-ns-aoma-queue-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-stage:aoma2-apps-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-stage:aoma2-apps-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "da-ui-service-dev-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:digital-archive-dev:da-ui-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/ameba-dev-ns-digital-archive-dev-sa-amp-aspera-util-role"]

    }
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma2-dev-sa-amp-search-role-trust-policy" {
  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringLike"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-dev:aoma2-kafka-sa"]
    }

    condition {
      test     = "StringLike"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::107577002119:role/gdsd-aoma-service-msk-role"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::107577002119:role/gdsd-aoma-service-msk-role"]
    }
  }
}


data "aws_iam_policy_document" "aomad-eks-aoma2-kafka-sa-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-stage:amp-search-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::107577002119:role/gdsd-aoma-service-msk-role"]
    }
  }
}

data "aws_iam_policy_document" "aomad2-txmgr-kafka-consumer-service-trust-policy" {
  statement {
    sid    = "ECSTrust"
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }

  statement {
    sid    = "ECSTaskExecutionTrust"
    effect = "Allow"

    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-txmgr-kafka-consumer-service-trust-policy" {
  statement {
    sid    = "ECSTrust"
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }

  statement {
    sid    = "ECSTaskExecutionTrust"
    effect = "Allow"

    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomad-aoma-txmgr-worker-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-dev:aoma-txmgr-service-worker"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aomad-ameba-txmgr-worker-sa-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:txmgr-dev:aoma-txmgr-service-worker"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "mi-load-comparison-test-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "aomas-storage-gateway-trust-policy" {
  statement {
    effect = "Allow"

    principals {
      type        = "Service"
      identifiers = ["storagegateway.amazonaws.com"]
    }

    actions = ["sts:AssumeRole"]
  }
}

data "aws_iam_policy_document" "aomad-aws-storage-gateway-trust-policy" {
  statement {
    effect = "Allow"

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com", "storagegateway.amazonaws.com"]
    }

    actions = ["sts:AssumeRole"]
  }
}

data "aws_iam_policy_document" "ameba-dev-ns-aoma2-dev-sa-aoma-service-timer-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-dev:aoma-service-timer"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:aoma2-stage:aoma-service-timer"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }
}

data "aws_iam_policy_document" "aoma-dev-da-batch-initiator-assume-role-trust-policy" {

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/da-batch-initiator-dev-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-stg-da-batch-initiator-assume-role-trust-policy" {

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/da-batch-initiator-stage-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-dev-da-asset_importer-assume-role-trust-policy" {

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/da-s3-importer-dev-role",
        "arn:aws:iam::887829410671:role/da-asset-importer-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-stg-da-asset_importer-assume-role-trust-policy" {

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/da-s3-importer-stage-role",
        "arn:aws:iam::887829410671:role/da-asset-importer-stage-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-dev-da-cntct-sht-hndlr-assume-role-trust-policy" {

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/eks-sa-da-cs-handler-dev"
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-stg-da-cntct-sht-hndlr-assume-role-trust-policy" {

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = ["arn:aws:iam::887829410671:role/eks-sa-da-cs-handler-stage"
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-dev-stg-amp-amino-upldr-assume-role-trust-policy" {

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = ["arn:aws:iam::887829410671:user/ampd-amino-uploader-s"
      ]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-aoma-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:aoma"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-aoma-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:aoma-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-aoma-ui-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:aoma-ui-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-amp-search-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:amp-search"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-aoma-api-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:aoma-api"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
}

data "aws_iam_policy_document" "aomad-eks-ameba-dev-sa-remote-export-daemon-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub"
      values   = ["system:serviceaccount:ameba-dev:remote-export-daemon"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-dev-int-worker-node-NodeInstanceRole-LYNM1PK7D6Y5"]
    }
  }
}