resource "aws_iam_policy" "ecr_full_access" {
  description = "ecr_full_access"
  name        = "ecr_full_access"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecr_full_access.json
}

resource "aws_iam_policy" "sme-aoma-spain-s3-policy" {
  description = "sme-aoma-spain-s3-policy"
  name        = "sme-aoma-spain-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-aoma-spain-s3-policy.json
}

resource "aws_iam_policy" "aomap-ms-eks-worker-node-policy" {
  description = "aomap-ms-eks-worker-node-policy"
  name        = "aomap-ms-eks-worker-node-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ms-eks-worker-node-policy.json
}

resource "aws_iam_policy" "ccshr-aoma-sts-assume-policy" {
  description = "ccshr-aoma-sts-assume-policy"
  name        = "ccshr-aoma-sts-assume-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ccshr-aoma-sts-assume-policy.json
}

resource "aws_iam_policy" "aomap-acm-access" {
  description = "For DB-Utils"
  name        = "aomap-acm-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-acm-access.json
}

resource "aws_iam_policy" "Billing-RO" {
  description = "Billing-RO"
  name        = "Billing-RO"
  path        = var.path
  policy      = data.aws_iam_policy_document.Billing-RO.json
}
resource "aws_iam_policy" "sme-ust-ci-transfer-role-policy" {
  description = "sme-ust-ci-transfer-role-policy"
  name        = "sme-ust-ci-transfer-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-ust-ci-transfer-role-policy.json
}
resource "aws_iam_policy" "ameba-prod-ns-aoma3-sa-aoma-envelope-service-policy" {
  description = "ameba-prod-ns-aoma3-sa-aoma-envelope-service-policy"
  name        = "ameba-prod-ns-aoma3-sa-aoma-envelope-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-prod-ns-aoma3-sa-aoma-envelope-service-policy.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-ns-ameba-private-sa-ec-policy" {
  description = "Policy used by the EKS app  ec in ameba-private namespace in ameba-prod"
  name        = "aomap-eks-ameba-prod-ns-ameba-private-sa-ec-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-ns-ameba-private-sa-ec-policy.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-ns-aoma3-sa-aoma-sas-policy" {
  description = "Policy used by the EKS app  aoma-sas in aoma3 namespace in aomap-ms"
  name        = "aomap-eks-aomap-ms-ns-aoma3-sa-aoma-sas-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-ns-aoma3-sa-aoma-sas-policy.json
}

resource "aws_iam_policy" "aomap-sqs-euc1-policy" {
  name   = "aomap-sqs-euc1-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomap-sqs-euc1-policy.json
}

resource "aws_iam_policy" "mediaconvert-amp-source-msrv-dest-prod" {
  description = "Policy for Media Convert in AMP-Source and MSRV-Dest"
  name        = "mediaconvert-amp-source-msrv-dest-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mediaconvert-amp-source-msrv-dest-prod.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-ns-aoma3-sa-ust-be-service-policy" {
  description = "Policy used by the EKS app  ust-be-service in aoma3 namespace in aomap-ms"
  name        = "aomap-eks-aomap-ms-ns-aoma3-sa-ust-be-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-ns-aoma3-sa-ust-be-service-policy.json
}

resource "aws_iam_policy" "oneClick_Cognito_aomap_kibana_usersUnauth_Role_1583510894429" {
  name   = "oneClick_Cognito_aomap_kibana_usersUnauth_Role_1583510894429"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_aomap_kibana_usersUnauth_Role_1583510894429.json
}

resource "aws_iam_policy" "promop-EC2create" {
  name   = "promop-EC2create"
  path   = var.path
  policy = data.aws_iam_policy_document.promop-EC2create.json
}

resource "aws_iam_policy" "EKSReadOnly" {
  description = "EKS Read Only policy"
  name        = "EKSReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.EKSReadOnly.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  name   = "CloudOpsDenyIAM"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "aomap-ms-ns-aoma3-sa-aoma-export-service-policy" {
  description = "Policy used by the EKS app  aoma-export-service in aoma3 namespace in aomap-ms"
  name        = "aomap-ms-ns-aoma3-sa-aoma-export-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ms-ns-aoma3-sa-aoma-export-service-policy.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-sa-aoma-product-service" {
  description = "aomap-eks-aomap-ms-sa-aoma-product-service"
  name        = "aomap-eks-aomap-ms-sa-aoma-product-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-sa-aoma-product-service.json
}

resource "aws_iam_policy" "aomadevelopers-prod" {
  description = "aomadevelopers-prod"
  name        = "aomadevelopers-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomadevelopers-prod.json
}

resource "aws_iam_policy" "ES-Access" {
  name   = "ES-Access"
  path   = var.path
  policy = data.aws_iam_policy_document.ES-Access.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-sa-gras-ws-proxy" {
  description = "aomap-eks-aomap-ms-sa-gras-ws-proxy"
  name        = "aomap-eks-aomap-ms-sa-gras-ws-proxy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-sa-gras-ws-proxy.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "AWSQuickSightIAMPolicy" {
  description = "Grants Amazon QuickSight list permissions to AWS IAM resources"
  name        = "AWSQuickSightIAMPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightIAMPolicy.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "sme-aoma-core-prod-waf-logging-policy" {
  description = "sme-aoma-core-prod-waf-logging-policy"
  name        = "sme-aoma-core-prod-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-aoma-core-prod-waf-logging-policy.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-sa-aoma-mail-service" {
  description = "aomap-eks-aomap-ms-sa-aoma-mail-service"
  name        = "aomap-eks-aomap-ms-sa-aoma-mail-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-sa-aoma-mail-service.json
}

resource "aws_iam_policy" "aomap-aoma-txmgr-s3" {
  name   = "aomap-aoma-txmgr-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.aomap-aoma-txmgr-s3.json
}

resource "aws_iam_policy" "aomap-cert-policy" {
  description = "aomap-cert-policy"
  name        = "aomap-cert-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-cert-policy.json
}

resource "aws_iam_policy" "corep-portal-policy" {
  description = "corep-portal-policy"
  name        = "corep-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.corep-portal-policy.json
}

resource "aws_iam_policy" "aomap-ecs-aomap-ust-taskdef-task-policy" {
  description = "Policy used by the ECS task aomap-ust-taskdef in aomap-ust"
  name        = "aomap-ecs-aomap-ust-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap-ust-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomap-quicksight-prog" {
  name   = "aomap-quicksight-prog"
  path   = var.path
  policy = data.aws_iam_policy_document.aomap-quicksight-prog.json
  tags = {
    "JIRA" = "CLOUDOPS-9102"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-9102"
  }
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "aoma-RDS_snapshot_lambda-policy" {
  description = "CLOUDOPS-9133"
  name        = "aoma-RDS_snapshot_lambda-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-RDS_snapshot_lambda-policy.json
}

resource "aws_iam_policy" "RDSProxyIAMPolicy" {
  name   = "RDSProxyIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.RDSProxyIAMPolicy.json
}

resource "aws_iam_policy" "amp-asset-import-request-sqs-prod" {
  description = " amp-asset-import-request-sqs-prod and amp-asset-import-status-sqs-prod    Cross account access"
  name        = "amp-asset-import-request-sqs-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-asset-import-request-sqs-prod.json
}

resource "aws_iam_policy" "aomap-prod-presvc" {
  description = "Policy for Preview Service"
  name        = "aomap-prod-presvc"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-prod-presvc.json
}

resource "aws_iam_policy" "aomap-ecs-aomap-ameba-schema-registry-taskdef-task-policy" {
  description = "Policy used by the ECS task aomap-ameba-schema-registry-taskdef in aomap-ameba-schema-registry"
  name        = "aomap-ecs-aomap-ameba-schema-registry-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap-ameba-schema-registry-taskdef-task-policy.json
}

resource "aws_iam_policy" "RDSAdminIAMPassRole" {
  name   = "RDSAdminIAMPassRole"
  path   = var.path
  policy = data.aws_iam_policy_document.RDSAdminIAMPassRole.json
}

resource "aws_iam_policy" "aomap-prod-ampcntpv" {
  description = "Policy for ampcntpv"
  name        = "aomap-prod-ampcntpv"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-prod-ampcntpv.json
}

resource "aws_iam_policy" "PostgreSQL-Credentials-Rotation-Policy" {
  name   = "PostgreSQL-Credentials-Rotation-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.PostgreSQL-Credentials-Rotation-Policy.json
  tags = {
    "Jira" = "CLOUDOPS-7213"
  }
  tags_all = {
    "Jira" = "CLOUDOPS-7213"
  }
}

resource "aws_iam_policy" "aomap-secrets-manager-policy" {
  name   = "aomap-secrets-manager-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomap-secrets-manager-policy.json
}

resource "aws_iam_policy" "aomap-ameba-kafkahq-monitor-ecs-task-policy" {
  description = "Policy used by the ECS task aomap-ameba-kafkahq-monitor in aomap-ameba-kafkahq-monitor"
  name        = "aomap-ameba-kafkahq-monitor-ecs-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ameba-kafkahq-monitor-ecs-task-policy.json
}

resource "aws_iam_policy" "acm-export-cert-policy" {
  name   = "acm-export-cert-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.acm-export-cert-policy.json
}

resource "aws_iam_policy" "corep-trendmicro_esdomain_policy" {
  description = "For TMDS ELK"
  name        = "corep-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.corep-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "waf" {
  description = "waf"
  name        = "waf"
  path        = var.path
  policy      = data.aws_iam_policy_document.waf.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-ns-ameba-sa-mb-policy" {
  description = "Policy used by the EKS app  mb in ameba namespace in ameba-prod"
  name        = "aomap-eks-ameba-prod-ns-ameba-sa-mb-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-ns-ameba-sa-mb-policy.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-sa-product-graphql-service" {
  description = "aomap-eks-aomap-ms-sa-product-graphql-service"
  name        = "aomap-eks-aomap-ms-sa-product-graphql-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-sa-product-graphql-service.json
}

resource "aws_iam_policy" "aomap-jenkins-s3-policy" {
  description = "aomap-jenkins-s3-policy"
  name        = "aomap-jenkins-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-jenkins-s3-policy.json
  tags = {
    "Name" = "aomap-jenkins-s3-policy"
  }
  tags_all = {
    "Name" = "aomap-jenkins-s3-policy"
  }
}

resource "aws_iam_policy" "corep-aws-config-policy" {
  description = "corep-aws-config-policy"
  name        = "corep-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.corep-aws-config-policy.json
}

resource "aws_iam_policy" "ALBIngressControllerIAMPolicy" {
  name   = "ALBIngressControllerIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.ALBIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "sme-gen-custom" {
  name   = "sme-gen-custom"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-gen-custom.json
}

resource "aws_iam_policy" "OrderHistoryCertAccess" {
  description = "OrderHistoryCertAccess"
  name        = "OrderHistoryCertAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.OrderHistoryCertAccess.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-ns-ameba-private-sa-agql-policy" {
  description = "Policy used by the EKS app  agql in ameba-private namespace in ameba-prod"
  name        = "aomap-eks-ameba-prod-ns-ameba-private-sa-agql-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-ns-ameba-private-sa-agql-policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "CWLogs-Put" {
  name   = "CWLogs-Put"
  path   = var.path
  policy = data.aws_iam_policy_document.CWLogs-Put.json
}

resource "aws_iam_policy" "aomap-ECS-Instance-Policy" {
  description = "aomap-ECS-Instance-Policy"
  name        = "aomap-ECS-Instance-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ECS-Instance-Policy.json
}

resource "aws_iam_policy" "aomap-txmgr-gdsp-msk-access-Policy" {
  description = "aomap-txmgr-gdsp-msk-access-Policy"
  name        = "aomap-txmgr-gdsp-msk-access-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-txmgr-gdsp-msk-access-Policy.json
}

resource "aws_iam_policy" "DMS-Policy" {
  name   = "DMS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.DMS-Policy.json
}

resource "aws_iam_policy" "aomap-ecs-aomap1-mdimport-taskdef-task-policy" {
  description = "Policy used by the ECS task aomap1-mdimport-taskdef in aomap1-metadata-import-service"
  name        = "aomap-ecs-aomap1-mdimport-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap1-mdimport-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomap-secrets-manager-access-policy" {
  description = "aomap-secrets-manager-access-policy"
  name        = "aomap-secrets-manager-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-secrets-manager-access-policy.json
}

resource "aws_iam_policy" "KMS-Policy" {
  name   = "KMS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.KMS-Policy.json
}

resource "aws_iam_policy" "aomap-cloudops_ses-key-rotation-function-policy" {
  description = "aomap-cloudops_ses-key-rotation-function-policy"
  name        = "aomap-cloudops_ses-key-rotation-function-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-cloudops_ses-key-rotation-function-policy.json
}

resource "aws_iam_policy" "aomap-kibana-ameba-sns-notification" {
  description = "aomap-kibana-ameba-sns-notification"
  name        = "aomap-kibana-ameba-sns-notification"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-kibana-ameba-sns-notification.json
}

resource "aws_iam_policy" "sme-aoma-core-prod-email-notification-attachment-s3-policy" {
  name   = "sme-aoma-core-prod-email-notification-attachment-s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-aoma-core-prod-email-notification-attachment-s3-policy.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "AWSQuickSightRedshiftPolicy" {
  description = "Grants Amazon QuickSight describe permissions to Amazon Redshift resources"
  name        = "AWSQuickSightRedshiftPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightRedshiftPolicy.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-ns-ameba-private-sa-gw-policy" {
  description = "Policy used by the EKS app  gw in ameba-private namespace in ameba-prod"
  name        = "aomap-eks-ameba-prod-ns-ameba-private-sa-gw-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-ns-ameba-private-sa-gw-policy.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "AWSLambdaSNSTopicDestinationExecutionRole-7b7093b4-7fe5-431c-a3d6-19223c5df2b4" {
  name   = "AWSLambdaSNSTopicDestinationExecutionRole-7b7093b4-7fe5-431c-a3d6-19223c5df2b4"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaSNSTopicDestinationExecutionRole-7b7093b4-7fe5-431c-a3d6-19223c5df2b4.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-sa-aoma-data-service" {
  description = "aomap-eks-aomap-ms-sa-aoma-data-service policy"
  name        = "aomap-eks-aomap-ms-sa-aoma-data-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-sa-aoma-data-service.json
  tags = {
    "Name" = "aomap-eks-aomap-ms-sa-aoma-data-service"
  }
  tags_all = {
    "Name" = "aomap-eks-aomap-ms-sa-aoma-data-service"
  }
}

resource "aws_iam_policy" "AWSQuickSightS3Policy" {
  description = "Grants Amazon QuickSight read permission to Amazon S3 resources"
  name        = "AWSQuickSightS3Policy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightS3Policy.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-sa-user-management-service" {
  description = "aomap-eks-aomap-ms-sa-user-management-service"
  name        = "aomap-eks-aomap-ms-sa-user-management-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-sa-user-management-service.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-sa-ars-s3-policy" {
  description = "aomap-eks-ameba-prod-sa-ars-s3-policy"
  name        = "aomap-eks-ameba-prod-sa-ars-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-sa-ars-s3-policy.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-ns-aoma3-sa-aoma-ust-policy" {
  description = "aomap-eks-aomap-ms-ns-aoma3-sa-aoma-ust-policy"
  name        = "aomap-eks-aomap-ms-ns-aoma3-sa-aoma-ust-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-ns-aoma3-sa-aoma-ust-policy.json
}

resource "aws_iam_policy" "aomap-txmgr-secrets-access-policy" {
  description = "aomap-txmgr-secrets-access-policy"
  name        = "aomap-txmgr-secrets-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-txmgr-secrets-access-policy.json
}

resource "aws_iam_policy" "ameba-prod-ns-digital-archive-sa-amp-asset-preview-service" {
  description = "Policy used by the EKS app  amp-asset-preview-service in digital-archive namespace in ameba-prod"
  name        = "ameba-prod-ns-digital-archive-sa-amp-asset-preview-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-prod-ns-digital-archive-sa-amp-asset-preview-service.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1584515530199" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1584515530199"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1584515530199.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1590311915292" {
  name   = "oneClick_flowlogsRole_1590311915292"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1590311915292.json
}

resource "aws_iam_policy" "ameba-prod-ns-aoma3-sa-aoma-talent-service" {
  description = "Policy used by the EKS app  aoma-talent-service in aoma3 namespace in ameba-prod"
  name        = "ameba-prod-ns-aoma3-sa-aoma-talent-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-prod-ns-aoma3-sa-aoma-talent-service.json
}

resource "aws_iam_policy" "eks-fullaccess" {
  description = "eks-fullaccess"
  name        = "eks-fullaccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.eks-fullaccess.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-6e9d8424-ca57-4655-a163-56795ebfef3e" {
  name   = "AWSLambdaBasicExecutionRole-6e9d8424-ca57-4655-a163-56795ebfef3e"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-6e9d8424-ca57-4655-a163-56795ebfef3e.json
}

resource "aws_iam_policy" "aomap-ecs-aomap-ameba-message-bridge-taskdef-task-policy" {
  description = "Policy used by the ECS task aomap-ameba-message-bridge-taskdef in aomap-ameba-message-bridge"
  name        = "aomap-ecs-aomap-ameba-message-bridge-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap-ameba-message-bridge-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomap-ec2-aomap1-prodsrvc01-policy" {
  description = "Policy for aomap-ec2-aomap1-prodsrvc01-role"
  name        = "aomap-ec2-aomap1-prodsrvc01-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ec2-aomap1-prodsrvc01-policy.json
}

resource "aws_iam_policy" "lambda-create" {
  name   = "lambda-create"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda-create.json
}

resource "aws_iam_policy" "aomap-ecs-aomap-gras-graphql-taskdef-task-policy" {
  description = "Policy used by the ECS task aomap-gras-graphql-taskdef in aomap-gras-graphql-ecs"
  name        = "aomap-ecs-aomap-gras-graphql-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap-gras-graphql-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomap-ssm-sec-agent-status-upload" {
  name   = "aomap-ssm-sec-agent-status-upload"
  path   = var.path
  policy = data.aws_iam_policy_document.aomap-ssm-sec-agent-status-upload.json
}

resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" {
  description = "AWSLoadBalancerControllerIAMPolicy"
  name        = "AWSLoadBalancerControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "AWSQuickSightRDSPolicy" {
  description = "Grants Amazon QuickSight describe permissions to AWS RDS resources"
  name        = "AWSQuickSightRDSPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightRDSPolicy.json
}

resource "aws_iam_policy" "ECSReadOnly" {
  description = "ECSReadOnly"
  name        = "ECSReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.ECSReadOnly.json
}

resource "aws_iam_policy" "aomap-ecs-aomap-txmgr-taskdef-task-policy" {
  description = "aomap-ecs-aomap-txmgr-taskdef-task-policy"
  name        = "aomap-ecs-aomap-txmgr-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap-txmgr-taskdef-task-policy.json
}

resource "aws_iam_policy" "sqs-aomap" {
  name   = "sqs-aomap"
  path   = var.path
  policy = data.aws_iam_policy_document.sqs-aomap.json
}

resource "aws_iam_policy" "aomap-ecs-aomap-gql-registry-taskdef-task-policy" {
  description = "Policy used by the ECS task aomap-gql-registry-taskdef in aomap-graphql-registry"
  name        = "aomap-ecs-aomap-gql-registry-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap-gql-registry-taskdef-task-policy.json
}

resource "aws_iam_policy" "aomap-ecs-aomap-ameba-event-consumer-taskdef-task-policy" {
  description = "Policy used by the ECS task aomap-ameba-event-consumer-taskdef in aomap-ameba-event-consumer"
  name        = "aomap-ecs-aomap-ameba-event-consumer-taskdef-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ecs-aomap-ameba-event-consumer-taskdef-task-policy.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "oneClick_Cognito_aomap_kibana_usersAuth_Role_1583510894429" {
  name   = "oneClick_Cognito_aomap_kibana_usersAuth_Role_1583510894429"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_aomap_kibana_usersAuth_Role_1583510894429.json
}

resource "aws_iam_policy" "aomap-sqs" {
  description = "Access AOMAQcNotesNotificationQueue sqs"
  name        = "aomap-sqs"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-sqs.json
}

resource "aws_iam_policy" "oneClick_lambda_elasticsearch_execution_1583517028477" {
  name   = "oneClick_lambda_elasticsearch_execution_1583517028477"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_elasticsearch_execution_1583517028477.json
}

resource "aws_iam_policy" "RDS-EC2" {
  name   = "RDS-EC2"
  path   = var.path
  policy = data.aws_iam_policy_document.RDS-EC2.json
}

resource "aws_iam_policy" "asset-preview-service-lambda-policy-prod" {
  description = "Policy for Media Convert in AMP-Source and MSRV-Dest"
  name        = "asset-preview-service-lambda-policy-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.asset-preview-service-lambda-policy-prod.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-ns-aoma3-sa-aoma-batch-service-policy" {
  name   = "aomap-eks-ameba-prod-ns-aoma3-sa-aoma-batch-service-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomap-eks-ameba-prod-ns-aoma3-sa-aoma-batch-service-policy.json
}

resource "aws_iam_policy" "aomap-ameba-link-service-prod-role-policy" {
  name   = "aomap-ameba-link-service-prod-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aomap-ameba-link-service-prod-role-policy.json
}

resource "aws_iam_policy" "aomap-ameba-evnt-hist-prod-role-policy" {
  description = "aomap-ameba-evnt-hist-prod-role-policy"
  name        = "aomap-ameba-evnt-hist-prod-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ameba-evnt-hist-prod-role-policy.json
}

resource "aws_iam_policy" "aomap-ameba-labelcopy-loader-role-policy" {
  description = "aomap-ameba-labelcopy-loader-role-policy"
  name        = "aomap-ameba-labelcopy-loader-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ameba-labelcopy-loader-role-policy.json
}

resource "aws_iam_policy" "ameba-prod-sts-assume-policy" {
  description = "ameba-prod-sts-assume-policy"
  name        = "ameba-prod-sts-assume-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-prod-sts-assume-policy.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "aomap-msk-access" {
  description = "aomap-msk-access"
  name        = "aomap-msk-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-msk-access.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-sa-sr-role-policy" {
  description = "aomap-eks-ameba-prod-sa-sr-role-policy"
  name        = "aomap-eks-ameba-prod-sa-sr-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-sa-sr-role-policy.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "aomap-eks-aomap-ms-sa-aoma-mail-service-kafka-policy" {
  description = "kafka cluster access"
  name        = "aomap-eks-aomap-ms-sa-aoma-mail-service-kafka-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aomap-ms-sa-aoma-mail-service-kafka-policy.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-ns-ameba-private-sa-agql-kafka-policy" {
  description = "kafka cluster access"
  name        = "aomap-eks-ameba-prod-ns-ameba-private-sa-agql-kafka-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-ns-ameba-private-sa-agql-kafka-policy.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-sa-kafka-utils-role-policy" {
  description = "aomap-eks-ameba-prod-sa-kafka-utils-role-policy"
  name        = "aomap-eks-ameba-prod-sa-kafka-utils-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-sa-kafka-utils-role-policy.json
}

resource "aws_iam_policy" "aomap-amp-archive-exports-prod-policy" {
  description = "aomap-amp-archive-exports-prod-policy"
  name        = "aomap-amp-archive-exports-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-amp-archive-exports-prod-policy.json
}

resource "aws_iam_policy" "aomap-eks-ameba-prod-ns-ameba-prod-sa-ameba-gql-role-policy" {
  description = "aomap-eks-ameba-prod-ns-ameba-prod-sa-ameba-gql-role-policy"
  name        = "aomap-eks-ameba-prod-ns-ameba-prod-sa-ameba-gql-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-ameba-prod-ns-ameba-prod-sa-ameba-gql-role-policy.json
}

resource "aws_iam_policy" "aomap-arvato-es-policy" {
  description = "aomap-arvato-es-policy"
  name        = "aomap-arvato-es-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.arvatok8s-prod-elasticsearch.json
}

resource "aws_iam_policy" "aomap-ameba-sa-ks-prod-role-policy" {
  description = "aomap-ameba-sa-ks-prod-role-policy"
  name        = "aomap-ameba-sa-ks-prod-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ameba-sa-ks-prod-role-policy.json
}

resource "aws_iam_policy" "aomap-sa-msk-eom-prod-policy" {
  description = "aomap-sa-msk-eom-prod-policy"
  name        = "aomap-sa-msk-eom-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-sa-msk-eom-prod-policy.json
}

resource "aws_iam_policy" "aomap-sa-msk-ampsv-prod-policy" {
  description = "aomap-sa-msk-ampsv-prod-policy"
  name        = "aomap-sa-msk-ampsv-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-sa-msk-ampsv-prod-policy.json
}

resource "aws_iam_policy" "aomap-sa-msk-mlib-prod-policy" {
  description = "aomap-sa-msk-mlib-prod-policy"
  name        = "aomap-sa-msk-mlib-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-sa-msk-mlib-prod-policy.json
}

resource "aws_iam_policy" "aomap-sa-msk-delivery-prod-policy" {
  description = "aomap-sa-msk-delivery-prod-policy"
  name        = "aomap-sa-msk-delivery-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-sa-msk-delivery-prod-policy.json
}

resource "aws_iam_policy" "sme-india-content-s3-policy" {
  description = "sme-india-content-s3-policy"
  name        = "sme-india-content-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-india-content-s3-policy.json
}

resource "aws_iam_policy" "ameba-prod-ns-aoma3-sa-aoma-health-metrics-role-policy" {
  description = "ameba-prod-ns-aoma3-sa-aoma-health-metrics-role-policy"
  name        = "ameba-prod-ns-aoma3-sa-aoma-health-metrics-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-prod-ns-aoma3-sa-aoma-health-metrics-role-policy.json
}

resource "aws_iam_policy" "aomap-ameba-db-athena-policy" {
  description = "aomap-ameba-db-athena-policy"
  name        = "aomap-ameba-db-athena-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-ameba-db-athena-policy.json
}

resource "aws_iam_policy" "ameba-prod-ns-aoma3-sa-aoma-file-storage-service-policy" {
  description = "ameba-prod-ns-aoma3-sa-aoma-file-storage-service-policy"
  name        = "ameba-prod-ns-aoma3-sa-aoma-file-storage-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-prod-ns-aoma3-sa-aoma-file-storage-service-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-aoma-ern-service-policy" {
  description = "aomad-eks-ameba-dev-ns-aoma-ern-service-policy"
  name        = "aomad-eks-ameba-dev-ns-aoma-ern-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-aoma-ern-service-policy.json
}

resource "aws_iam_policy" "aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-policy" {
  description = "aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-policy"
  name        = "aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomad-eks-ameba-dev-ns-txmgr-digital-assurance-service-policy.json
}

resource "aws_iam_policy" "aomap-sqs-registration-post-processing-read" {
  name        = "aomap-sqs-registration-post-processing-read"
  description = "Policy for AOMARegistrationPostProcessing SQS queue"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-sqs-registration-post-processing-read.json
}

resource "aws_iam_policy" "aomap-sqs-registration-post-processing-create" {
  name        = "aomap-sqs-registration-post-processing-create"
  description = "Policy for AOMARegistrationPostProcessing SQS queue"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-sqs-registration-post-processing-create.json
}

resource "aws_iam_policy" "AOMA-SQS-Policy" {
  name   = "AOMA-SQS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.AOMA-SQS-Policy.json
}

resource "aws_iam_policy" "full-rds-proxy-access" {
  name   = "full-rds-proxy-access"
  path   = var.path
  policy = data.aws_iam_policy_document.full-rds-proxy-access.json
}

resource "aws_iam_policy" "aomap-eks-aoma2-kafka-sa-policy" {
  description = "aomap-eks-aoma2-kafka-sa-policy"
  name        = "aomap-eks-aoma2-kafka-sa-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-eks-aoma2-kafka-sa-policy.json
}

resource "aws_iam_policy" "aomap-txmgr-kafka-consumer-service-policy" {
  description = "aomap-txmgr-kafka-consumer-service-policy"
  name        = "aomap-txmgr-kafka-consumer-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-txmgr-kafka-consumer-service-policy.json
}


resource "aws_iam_policy" "aomap-kafka-cluster-read-policy" {
  description = "aomap-kafka-cluster-read-policy"
  name        = "aomap-kafka-cluster-read-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-kafka-cluster-read-policy.json
}

resource "aws_iam_policy" "aomap-storage-gateway-policy" {
  description = "aomap-storage-gateway-policy"
  name        = "aomap-storage-gateway-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-storage-gateway-policy.json
}

resource "aws_iam_policy" "ameba-prod-ns-aoma2-prod-sa-aoma-service-timer-policy" {
  description = "ameba-prod-ns-aoma2-prod-sa-aoma-service-timer-policy"
  name        = "ameba-prod-ns-aoma2-prod-sa-aoma-service-timer-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ameba-prod-ns-aoma2-prod-sa-aoma-service-timer-policy.json
}

resource "aws_iam_policy" "aomap-deployment-eventbridge-policy" {
  description = "aomap-deployment-eventbridge-policy"
  name        = "aomap-deployment-eventbridge-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomap-deployment-eventbridge-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-kms-policy" {
  description = "Owner:DB Team. Policy to allow KMS decrypt Prod DB credential secret."
  name        = "aoma-prod-rds-proxy-kms-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-kms-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-cldntv-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_amp_cldntv_tsk_prgrs_vrfr"
  name        = "aoma-prod-rds-proxy-secret-cldntv-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-cldntv-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-prvw_srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_amp_asset_preview_service"
  name        = "aoma-prod-rds-proxy-secret-prvw_srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-prvw_srvc-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-aspra_utl-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_amp_aspera_util"
  name        = "aoma-prod-rds-proxy-secret-aspra_utl-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-aspra_utl-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-batch-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_aoma_batch_srvc"
  name        = "aoma-prod-rds-proxy-secret-batch-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-batch-srvc-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-exp-clnt-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_amp_asset_export_client"
  name        = "aoma-prod-rds-proxy-secret-exp-clnt-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-exp-clnt-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-envlp-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_envelope_srvc"
  name        = "aoma-prod-rds-proxy-secret-envlp-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-envlp-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-ust-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ust_srvc"
  name        = "aoma-prod-rds-proxy-secret-ust-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-ust-srvc-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-ust-be-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ust_be_srvc"
  name        = "aoma-prod-rds-proxy-secret-ust-be-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-ust-be-srvc-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-da-batch-init-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_da_batch_initiator"
  name        = "aoma-prod-rds-proxy-secret-da-batch-init-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-da-batch-init-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-da-asset-imp-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret da_asset_importer"
  name        = "aoma-prod-rds-proxy-secret-da-asset-imp-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-da-asset-imp-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-da-cntct-sht-hndlr-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_amp_contactsheet_handler"
  name        = "aoma-prod-rds-proxy-secret-da-cntct-sht-hndlr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-da-cntct-sht-hndlr-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-amino-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret amino_srvc"
  name        = "aoma-prod-rds-proxy-secret-amino-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-amino-srvc-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-txn-mgr-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret aoma_trnsctn_mngr"
  name        = "aoma-prod-rds-proxy-secret-txn-mgr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-txn-mgr-policy.json
}

resource "aws_iam_policy" "aoma-prod-rds-proxy-secret-tlnt-srvc-policy" {
  description = "Owner:DB Team. Policy to allow reading Prod DB login credential secret ms_aoma_talent_srvc"
  name        = "aoma-prod-rds-proxy-secret-tlnt-srvc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aoma-prod-rds-proxy-secret-tlnt-srvc-policy.json
}