data "aws_iam_policy_document" "AmazonEKSLoadBalancerControllerRole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:aud" values = ["sts.amazonaws.com"] } condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:kube-system:aws-load-balancer-controller"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "ameba-prod-ns-aoma3-sa-aoma-talent-service-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-talent-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "ameba-prod-ns-digital-archive-sa-amp-asset-preview-service-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:digital-archive:amp-asset-preview-service"] } condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:aud" values = ["sts.amazonaws.com"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "AnsibleAWSServiceAccess-AOMA-P-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::476717493283:role/clshrd-p-clshrd-tower01", "arn:aws:iam::476717493283:role/ccshr-cip-portal01", "arn:aws:iam::943540511943:role/AnsibleDevCrossAccountAccess", "arn:aws:iam::476717493283:role/ccshr-cip-reports01", ] } } } data "aws_iam_policy_document" "aoma-core-prod-readonly-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hedg001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hinz001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vitk001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kuma011", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/prag008", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/stef003", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vleung1", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bsahoo1", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/spag001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/zeki001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/niko001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mham001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/shar051", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bari002", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/maha005", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/abhy001", ] } } } data "aws_iam_policy_document" "aoma-RDS_snapshot_lambda-role-trust-policy" { statement { sid = "VisualEditor0" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } statement { sid = "VisualEditor1" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["rds-export.aws.internal"] } } statement { sid = "VisualEditor2" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["export.rds.amazonaws.com"] } } } data "aws_iam_policy_document" "AomaDevelopersProd-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mham001", "arn:aws:iam::358364484590:root", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish003", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/spag001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/redd001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/zeki001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bsahoo1", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vleung1", ] } } } data "aws_iam_policy_document" "aomap-ameba-eks-developer-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbmonitor01"] } } } data "aws_iam_policy_document" "aomap-ameba-kafkahq-monitor-ecs-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aoma-eks-developer-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"] } } } data "aws_iam_policy_document" "aomap-aomap-ampcntpv01-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aomap-txmgr01-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aomap-txmgr02-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aomap-txmgr03-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aomap1-asputil01-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aomap1-metadata-import-service-ecs-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aomap1-popbe01-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-aomap1-popfe01-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ccshr-awaxd-dbutils01-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::943540511943:role/clopsd-awaxd-dbutils01", "arn:aws:iam::476717493283:role/clshrd-p-clshrd-pven01", "arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbutils02", ] } } } data "aws_iam_policy_document" "aomap-cloudops_ses-key-rotation-function-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-CloudTrail_CloudWatchLogs_Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["cloudtrail.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ec2-aomap1-prodsrvc01-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap-ameba-event-consumer-taskdef-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap-ameba-message-bridge-taskdef-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap-ameba-schema-registry-taskdef-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap-gql-registry-taskdef-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap-gras-graphql-taskdef-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap-txmgr-taskdef-task-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::635220336377:role/globaldsp-aoma-txmgr-role"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap-ust-taskdef-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ecs-aomap1-mdimport-taskdef-task-role-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ECS-Instance-Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-ameba-private-sa-agql-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-private:agql"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ameba-graphql-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-ns-ameba-private-sa-agql-role"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-ameba-private-sa-ec-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-private:ec"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ec"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-ns-ameba-private-sa-ec-role"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-ameba-private-sa-gw-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-private:gw"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:gw-prod:gw-int"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:gw-prod:gw-ext"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-ameba-sa-mb-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba:mb"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:mb"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-private:mb"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:mb-nojms"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V" ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-ns-ameba-sa-mb-role" ] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-sa-ars-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ars"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-sa-ars"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::505950216627:role/promop-quicksight-prog"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-ns-aoma3-sa-aoma-sas-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:aoma-sas"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-sas"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-ns-aoma3-sa-aoma-ust-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:aoma-ust"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-ust"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER" ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-aomap-ms-ns-aoma3-sa-aoma-ust-role"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-ns-aoma3-sa-ust-be-service-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:ust-be-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:ust-be-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "ameba-prod-ns-aoma3-sa-aoma-envelope-service-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-envelope-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "12343" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::${var.account_id}:role/ameba-prod-ns-aoma3-sa-aoma-envelope-service-role"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-sa-aoma-data-service-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:aoma-data-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-data-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-sa-aoma-mail-service-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:aoma-mail-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-mail-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-sa-aoma-product-service-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:aoma-product-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-sa-gras-ws-proxy-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:gras-ws-proxy"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:gras-ws-proxy"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-sa-product-graphql-service-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:product-graphql-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:product-graphql-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-aomap-ms-sa-user-management-service-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:user-management-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-ingress-controller-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:aud" values = ["sts.amazonaws.com"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } } data "aws_iam_policy_document" "aomap-eks-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["eks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-EKS-Service-Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["eks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-EKS-worker-node-Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-github-actions-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "token.actions.githubusercontent.com:aud" values = ["sts.amazonaws.com"] } condition { test = "StringLike" variable = "token.actions.githubusercontent.com:sub" values = [ "repo:SME-AOMA/*", "repo:SME-databases/*", ] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/token.actions.githubusercontent.com"] } } statement { sid = "" effect = "Allow" actions = [ "sts:AssumeRole", "sts:TagSession" ] principals { type = "AWS" identifiers = ["arn:aws:iam::969009837416:role/aomad-aomad2-gitrun02"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-infosec-cwro-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/jais003", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/reed001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/npatel1", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hegd001", ] } } } data "aws_iam_policy_document" "aomap-kibana-ameba-sns-notification-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["es.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-lambda-apigw-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-lambda_elasticsearch_execution-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-ms-ns-aoma3-sa-aoma-export-service-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-export-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0:sub" values = ["system:serviceaccount:aoma3:aoma-export-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/7374A5A6387EF442140FDE883A25A9B0"] } } } data "aws_iam_policy_document" "aomap-ms1-sqs-ses-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-prod-presvc-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-prod-usrmgmt-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-prometheus-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-clshrd-prometheus"] } } } data "aws_iam_policy_document" "aomap1-sftspgbouncer01-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "asset-preview-service-lambda-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "asset-preview-service-mediaconvert-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["mediaconvert.amazonaws.com"] } } } data "aws_iam_policy_document" "aws-quicksight-service-role-v0-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["quicksight.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSBackupDefaultServiceRole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["backup.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForAmazonEKS-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["eks.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForAmazonElasticsearchService-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["es.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForAmazonGuardDuty-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["guardduty.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["inspector.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector2-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["inspector2.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForAmazonSSM-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ssm.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForAutoScaling-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["autoscaling.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForCloudFormationStackSetsOrgMember-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["member.org.stacksets.cloudformation.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForCloudTrail-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["cloudtrail.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForECS-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForElasticLoadBalancing-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["elasticloadbalancing.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForFMS-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["fms.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForGlobalAccelerator-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["globalaccelerator.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForKafka-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["kafka.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForMarketplaceLicenseManagement-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["license-management.marketplace.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForNetworkFirewall-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["network-firewall.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForOrganizations-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["organizations.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForRDS-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["rds.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForRoute53Resolver-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["route53resolver.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForServiceQuotas-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["servicequotas.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForSSO-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["sso.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForSupport-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["support.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForTrustedAdvisor-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["trustedadvisor.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForVPCTransitGateway-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["transitgateway.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForWAFRegionalLogging-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["waf-regional.amazonaws.com"] } } } data "aws_iam_policy_document" "AWSServiceRoleForWAFV2Logging-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["wafv2.amazonaws.com"] } } } data "aws_iam_policy_document" "AWS_Events_Invoke_Inspector_Assessment_Template-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["events.amazonaws.com"] } } } data "aws_iam_policy_document" "Billing-RO-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/shar051", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/roraj01", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/giri004", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/aray001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/suka001", ] } } } data "aws_iam_policy_document" "cloudwarerole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] condition { test = "StringEquals" variable = "sts:ExternalId" values = ["6e194b01-9ace-47eb-8d83-5bf409257419"] } principals { type = "AWS" identifiers = ["arn:aws:iam::814021343637:user/ca-collector"] } } } data "aws_iam_policy_document" "CognitoAccessForAmazonES-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["es.amazonaws.com"] } } } data "aws_iam_policy_document" "Cognito_aomap_kibana_usersAuth_Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "cognito-identity.amazonaws.com:aud" values = ["eu-central-1:82e1a33d-ddea-46a6-a69c-becf86b3247d"] } condition { test = "ForAnyValue:StringLike" variable = "cognito-identity.amazonaws.com:amr" values = ["authenticated"] } principals { type = "Federated" identifiers = ["cognito-identity.amazonaws.com"] } } } data "aws_iam_policy_document" "Cognito_aomap_kibana_usersUnauth_Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "cognito-identity.amazonaws.com:aud" values = ["eu-central-1:82e1a33d-ddea-46a6-a69c-becf86b3247d"] } condition { test = "ForAnyValue:StringLike" variable = "cognito-identity.amazonaws.com:amr" values = ["unauthenticated"] } principals { type = "Federated" identifiers = ["cognito-identity.amazonaws.com"] } } } data "aws_iam_policy_document" "corep-aws-config-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["config.amazonaws.com"] } } } data "aws_iam_policy_document" "corep-portal-Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "AROAVG4BQCPXLTHLQ4CKC", "arn:aws:iam::943540511943:root", "AROAVG4BQCPXEKK3Y5HSA", "arn:aws:iam::476717493283:role/ccshr-cip-portal01", "arn:aws:iam::476717493283:role/ccshr-cip-reports01", "arn:aws:iam::476717493283:role/clshrd-p-clshrd-portal01", "arn:aws:iam::476717493283:role/clshrd-p-clshrd-reports01", ] } } } data "aws_iam_policy_document" "corep-trendmicro_esdomain_role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "CreateEC2-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:sts::358364484590:assumed-role/AWS_SSO/kamt001"] } } } data "aws_iam_policy_document" "Database-RO-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] condition { test = "Bool" variable = "aws:MultiFactorAuthPresent" values = ["true"] } principals { type = "AWS" identifiers = ["arn:aws:iam::358364484590:root"] } } } data "aws_iam_policy_document" "DatadogAWSIntegrationRole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] condition { test = "StringEquals" variable = "sts:ExternalId" values = ["7152937b378c44f0800907bc68e45168"] } principals { type = "AWS" identifiers = ["arn:aws:iam::464622532012:root"] } } } data "aws_iam_policy_document" "DeepSecurity-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] condition { test = "StringEquals" variable = "sts:ExternalId" values = ["4d8ddcc5-1936-451d-a89d-055cc2c27693"] } principals { type = "AWS" identifiers = ["arn:aws:iam::147995105371:root"] } } } data "aws_iam_policy_document" "DeepSecuritySetup-e34d7b100-LambdaExecutionRole-1AVV7OF6E3LU5-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "ECSReadOnly-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/zaku001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/lyse001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/glob002", ] } } } data "aws_iam_policy_document" "flowlogsRole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["vpc-flow-logs.amazonaws.com"] } } } data "aws_iam_policy_document" "GSIRT_AWS_Monitoring_Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::797906716436:role/splunk_ec2_api_server_role"] } } } data "aws_iam_policy_document" "logs_check-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "OrderHistoryCertAccessRole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::019963779799:root"] } } } data "aws_iam_policy_document" "OrganizationAccountAccessRole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::970903126758:root"] } } } data "aws_iam_policy_document" "PostgreSQL-Credentials-Rotation-Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "rds-monitoring-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["monitoring.rds.amazonaws.com"] } } } data "aws_iam_policy_document" "RDS-role-for-lambda-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } statement { sid = "VisualEditor2" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["scheduler.amazonaws.com"] } } } data "aws_iam_policy_document" "RDSAdmin-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish003", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gvamsik", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sira001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dwenger", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vank001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish008", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sdonipu", ] } } } data "aws_iam_policy_document" "RDSProxyIAMRole-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["rds.amazonaws.com"] } } } data "aws_iam_policy_document" "RDSReadOnly-Role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vank001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish008", ] } } } data "aws_iam_policy_document" "ReadOnlyExtern-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gunt001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/thom027", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/veru005", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/npatel1", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hont002", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/frie010", "arn:aws:iam::943540511943:role/ReadOnlyInfoSec", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sasi001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sinh001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kukk001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish003", "arn:aws:iam::943540511943:role/AnsibleDevCrossAccountAccess", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hedg001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/liou001", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/raj0006", "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kuma039", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"] } } } data "aws_iam_policy_document" "sme-aoma-core-prod-gen-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ec2.amazonaws.com"] } } } data "aws_iam_policy_document" "sme-aoma-core-prod-waf-logging-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] condition { test = "StringEquals" variable = "sts:ExternalId" values = ["${var.account_id}"] } principals { type = "Service" identifiers = ["firehose.amazonaws.com"] } } } data "aws_iam_policy_document" "stacksets-exec-681219392bfdde9951179cb20ffea4ef-trust-policy" { statement { sid = "1" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::970903126758:role/aws-service-role/stacksets.cloudformation.amazonaws.com/AWSServiceRoleForCloudFormationStackSetsOrgAdmin"] } } } data "aws_iam_policy_document" "ustPreFlightCheckProd-role-jlsp1y9s-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["lambda.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-aoma3-sa-aoma-batch-service-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-batch-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::${var.account_id}:role/aomap-eks-ameba-prod-ns-aoma3-sa-aoma-batch-service-role"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-sa-dbzm-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:dbzm"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-sa-dbzm-role"] } } } data "aws_iam_policy_document" "aomap-ameba-link-service-prod-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ameba-link-service"] } principals { type = "Federated" identifiers = [ "arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226" ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-ameba-link-service-prod-role"] } } } data "aws_iam_policy_document" "aomap-ameba-evnt-hist-prod-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ameba-evnt-hist"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-ameba-evnt-hist-prod-role"] } } } data "aws_iam_policy_document" "aomap-ameba-labelcopy-loader-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ameba-labelcopy-loader"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } } data "aws_iam_policy_document" "ameba-prod-ns-digital-archive-sa-amp-aspera-util-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:digital-archive:amp-aspera-util"] } condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:aud" values = ["sts.amazonaws.com"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "amp-digital-archive-amp-cloudnative-task-progress-verifier-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:digital-archive:amp-cloudnative-task-progress-verifier"] } condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:aud" values = ["sts.amazonaws.com"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "KubeCostFederatedRole-ameba-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:kubecost:kubecost-s3-access-sa"] } principals { type = "Federated" identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "ameba-prod-eks-sonyci-uti-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:sonyci-util"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-sa-kafka-utils-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:kafka-utils"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-sa-kafka-utils-role"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-ameba-prod-sa-ameba-gql-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ameba-gql"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-ns-ameba-prod-sa-ameba-gql-role"] } } } data "aws_iam_policy_document" "aomap-ameba-sa-ks-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:ameba-prod:ks"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::613871678587:role/ameba-prod-eks-ext-worker-node-NodeInstanceRole-AUHR6NH99Z3V", "arn:aws:iam::613871678587:role/ameba-prod-eks-int-worker-node-NodeInstanceRole-1HYFAUCV8IIER", ] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-ns-sa-ks-role"] } } } data "aws_iam_policy_document" "aomap-sa-msk-eom-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::799833541840:role/digsysp-eks-prod-oms-asset-ingest-sa-role"] } } } data "aws_iam_policy_document" "aomap-sa-msk-ampsv-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::554998489284:role/ampp-eks-amp-prod-as-asset-service-sa-role"] } } } data "aws_iam_policy_document" "aomap-sa-msk-mlib-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["AROAQKZNHYHOVFQB6RRRT"] } } statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::023180329437:role/delp-ecs-mlib-prod-task-def-task-role"] } } } data "aws_iam_policy_document" "aomap-sa-msk-delivery-prod-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::023180329437:role/prod-asset-requester-role"] } } } data "aws_iam_policy_document" "ameba-prod-ns-aoma3-sa-aoma-health-metrics-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:aud" values = ["sts.amazonaws.com"] } condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-health-metrics"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "ameba-prod-ns-aoma3-sa-aoma-file-storage-service-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:aud" values = ["sts.amazonaws.com"] } condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma3:aoma-file-storage-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-aoma-ern-service-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A:sub" values = ["system:serviceaccount:txmgr-prod:aoma-ern-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::969009837416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/EB138C3B1EDDA2AEDEED6C5A4184738A"] } } statement { sid = "test2" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:txmgr-prod:aoma-ern-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aomap-eks-ameba-prod-ns-txmgr-digital-assurance-service-role-trust-policy" { statement { effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:txmgr-prod:txmgr-digital-assurance-service"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::635220336377:role/globaldsp-aoma-txmgr-role"] } } } data "aws_iam_policy_document" "aomap-aoma-txmgr-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = [ "arn:aws:iam::476717493283:role/vault-prod-iam-role" ] } } } data "aws_iam_policy_document" "aomap-eks-aoma2-kafka-sa-role-trust-policy" { statement { sid = "" effect = "Allow" actions = [ "sts:AssumeRoleWithWebIdentity", ] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma2-prod:amp-search-sa"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } statement { effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } statement { effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "AWS" identifiers = ["arn:aws:iam::635220336377:role/gdsp-aoma-service-msk-role"] } } } data "aws_iam_policy_document" "ecsTaskDefRole-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "ecsTaskExecutionRole-trust-policy" { statement { sid = "TaskDefinitionPolicy" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-txmgr-kafka-consumer-service-trust-policy" { statement { sid = "ECSTrust" effect = "Allow" actions = [ "sts:AssumeRole", ] principals { type = "Service" identifiers = ["ecs.amazonaws.com"] } } statement { sid = "ECSTaskExecutionTrust" effect = "Allow" actions = ["sts:AssumeRole"] principals { type = "Service" identifiers = ["ecs-tasks.amazonaws.com"] } } } data "aws_iam_policy_document" "aomap-storage-gateway-trust-policy" { statement { effect = "Allow" principals { type = "Service" identifiers = ["storagegateway.amazonaws.com"] } actions = ["sts:AssumeRole"] } } data "aws_iam_policy_document" "ameba-prod-ns-aoma2-prod-sa-aoma-service-timer-role-trust-policy" { statement { sid = "" effect = "Allow" actions = ["sts:AssumeRoleWithWebIdentity"] condition { test = "StringEquals" variable = "oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226:sub" values = ["system:serviceaccount:aoma2-prod:aoma-service-timer"] } principals { type = "Federated" identifiers = ["arn:aws:iam::613871678587:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/60283C022181862633A6B518D8891226"] } } } data "aws_iam_policy_document" "aoma-prod-da-batch-initiator-assume-role-trust-policy" { statement { sid = "" effect = "Allow" actions = [ "sts:AssumeRole", ] principals { type = "AWS" identifiers = ["arn:aws:iam::554998489284:role/da-batch-initiator-prod-role" ] } } } data "aws_iam_policy_document" "aoma-prod-da-asset_importer-assume-role-trust-policy" { statement { sid = "" effect = "Allow" actions = [ "sts:AssumeRole", ] principals { type = "AWS" identifiers = ["arn:aws:iam::554998489284:role/da-s3-importer-prod-role", "arn:aws:iam::554998489284:role/da-asset-importer-prod-role" ] } } } data "aws_iam_policy_document" "aoma-prod-da-cntct-sht-hndlr-assume-role-trust-policy" { statement { sid = "" effect = "Allow" actions = [ "sts:AssumeRole", ] principals { type = "AWS" identifiers = ["arn:aws:iam::554998489284:role/eks-sa-da-cs-handler-prod" ] } } } data "aws_iam_policy_document" "aoma-prod-amp-amino-upldr-assume-role-trust-policy" { statement { sid = "" effect = "Allow" actions = [ "sts:AssumeRole", ] principals { type = "AWS" identifiers = ["arn:aws:iam::554998489284:user/ampp-amino-uploader-p" ] } } }