resource "aws_db_instance" "del-rds-dev" {
  #checkov:skip=CKV2_AWS_30: Ensure Postgres RDS as aws_db_instance has Query Logging enabled
  #checkov:skip=CKV_AWS_161: Ensure RDS database has IAM authentication enabled
  #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled
  allocated_storage          = 65
  auto_minor_version_upgrade = true
  availability_zone          = "eu-central-1b"
  backup_retention_period    = 7
  backup_window              = "07:00-07:30"
  ca_cert_identifier         = "rds-ca-rsa2048-g1"
  copy_tags_to_snapshot      = true
  customer_owned_ip_enabled  = false
  db_name                    = "delivery"
  db_subnet_group_name       = "del-d-rds-sng"
  delete_automated_backups   = true
  deletion_protection        = true
  enabled_cloudwatch_logs_exports = [
    "postgresql",
    "upgrade",
  ]
  engine                                = "postgres"
  engine_version                        = "18.3"
  iam_database_authentication_enabled   = false
  identifier                            = "del-rds-dev"
  instance_class                        = "db.t4g.small"
  iops                                  = 3000
  kms_key_id                            = "arn:aws:kms:eu-central-1:058029036333:key/8189ea4d-39cd-43fc-a3a9-d4e336f49ca4"
  license_model                         = "postgresql-license"
  maintenance_window                    = "sun:08:00-sun:08:30"
  max_allocated_storage                 = 90
  monitoring_interval                   = 60
  monitoring_role_arn                   = "arn:aws:iam::058029036333:role/rds-monitoring-role"
  multi_az                              = false
  network_type                          = "IPV4"
  parameter_group_name                  = "del-rds-dev-config-pg18"
  #performance_insights_enabled          = true
  #performance_insights_kms_key_id       = "arn:aws:kms:eu-central-1:058029036333:key/8189ea4d-39cd-43fc-a3a9-d4e336f49ca4"
  #performance_insights_retention_period = 7
  port                                  = 5432
  publicly_accessible                   = false
  skip_final_snapshot                   = true
  storage_encrypted                     = true
  storage_throughput                    = 125
  storage_type                          = "gp3"
  apply_immediately                     = true
  allow_major_version_upgrade           = true
  tags = {
    "workload-type" = "other"
    "map-migrated"  = "migKNBMDMW06I"
  }
  tags_all = {
    "workload-type" = "other"
    "map-migrated"  = "migKNBMDMW06I"
  }
  username = "master_rds"
  vpc_security_group_ids = [
    "sg-3db3e756",
  ]

}

resource "aws_db_instance" "mlib-rds-dev" {
  #checkov:skip=CKV2_AWS_30: Ensure Postgres RDS as aws_db_instance has Query Logging enabled
  #checkov:skip=CKV_AWS_161: Ensure RDS database has IAM authentication enabled
  #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled
  allocated_storage          = 50
  auto_minor_version_upgrade = true
  availability_zone          = "eu-central-1a"
  backup_retention_period    = 7
  backup_window              = "07:00-07:30"
  ca_cert_identifier         = "rds-ca-rsa2048-g1"
  copy_tags_to_snapshot      = true
  customer_owned_ip_enabled  = false
  db_name                    = "media_library"
  db_subnet_group_name       = "del-d-rds-sng"
  delete_automated_backups   = true
  deletion_protection        = true
  enabled_cloudwatch_logs_exports = [
    "postgresql",
    "upgrade",
  ]
  engine                                = "postgres"
  engine_version                        = "18.3"
  iam_database_authentication_enabled   = false
  identifier                            = "mlib-rds-dev"
  instance_class                        = "db.t4g.small"
  iops                                  = 3000
  kms_key_id                            = "arn:aws:kms:eu-central-1:058029036333:key/8189ea4d-39cd-43fc-a3a9-d4e336f49ca4"
  license_model                         = "postgresql-license"
  maintenance_window                    = "sun:08:00-sun:08:30"
  max_allocated_storage                 = 70
  monitoring_interval                   = 60
  monitoring_role_arn                   = "arn:aws:iam::058029036333:role/rds-monitoring-role"
  multi_az                              = false
  network_type                          = "IPV4"
  parameter_group_name                  = "mlib-dev-pg18-parameters"
  #performance_insights_enabled          = true
  #performance_insights_kms_key_id       = "arn:aws:kms:eu-central-1:058029036333:key/8189ea4d-39cd-43fc-a3a9-d4e336f49ca4"
  #performance_insights_retention_period = 7
  port                                  = 5432
  publicly_accessible                   = false
  skip_final_snapshot                   = true
  storage_encrypted                     = true
  storage_throughput                    = 125
  storage_type                          = "gp3"
  apply_immediately                     = true
  allow_major_version_upgrade           = true
  tags = {
    "Business-unit"            = "SME AOMA Core"
    "Environment"              = "dev"
    "Owner"                    = "Nathaniel Lovett"
    "Project-code"             = "SME - 2000-0306A"
    "Project-name"             = "AOMA Core"
    "SSS"                      = "IGNORE"
    "aws-migration-project-id" = "MPE22602"
    "map-migrated"             = "d-server-03ir9bbljmr9p8"
  }
  tags_all = {
    "Business-unit"            = "SME AOMA Core"
    "Environment"              = "dev"
    "Owner"                    = "Nathaniel Lovett"
    "Project-code"             = "SME - 2000-0306A"
    "Project-name"             = "AOMA Core"
    "SSS"                      = "IGNORE"
    "aws-migration-project-id" = "MPE22602"
    "map-migrated"             = "d-server-03ir9bbljmr9p8"
  }
  username = "master_rds"
  vpc_security_group_ids = [
    "sg-3db3e756",
  ]

}