resource "aws_redshift_cluster" "delivery-archive-stage" {
  #checkov:skip=CKV_AWS_321: Ensure Redshift clusters use enhanced VPC routing
  allow_version_upgrade                = true
  apply_immediately                    = null
  aqua_configuration_status            = "auto"
  automated_snapshot_retention_period  = 7
  availability_zone                    = "eu-central-1a"
  availability_zone_relocation_enabled = false
  cluster_identifier                   = "delivery-archive-stage"
  cluster_parameter_group_name         = "del-s2-rs-cpg"
  cluster_public_key                   = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLgUaepoz26hQGEvxsaWSTBBzHtIcwg1umxwqxkS+h6Bny1WNNOkYnyGB2edY2JmCfu/i55QmWlo5ZoAVVl1tzREUT6kJbz4Um4fxFPksAciB+OXrBafSMln1U4YavsH6UlDbQPpkyisgE186TTdeXduCa5Vdn8wEw4e206ex6nXweWosEC/3hOnbpQNaWflr22ObeD+H6dn5/Iyh5WJHHTKkgrXbBqisB83nKTbiSFd5dDhBglH1skHORy9hhhixdwCv7oKfxrFdcy3si4DbCqQ0b3Ebs59ZF+lPYJHJ43Nh4p+6I8a4apgsZI5LKirPYPF4Bjmot2uBB2LZihqvD Amazon-Redshift\n"
  cluster_revision_number              = "314775"
  cluster_subnet_group_name            = "del-s2-redshift-sng"
  cluster_type                         = "single-node"
  cluster_version                      = "1.0"
  database_name                        = "delivery_archive"
  default_iam_role_arn                 = null
  elastic_ip                           = null
  encrypted                            = true
  endpoint                             = "delivery-archive-stage.cbqdanywia6g.eu-central-1.redshift.amazonaws.com:5439"
  enhanced_vpc_routing                 = false
  final_snapshot_identifier            = null
  iam_roles                            = []
  kms_key_id                           = "arn:aws:kms:eu-central-1:058029036333:key/8189ea4d-39cd-43fc-a3a9-d4e336f49ca4"
  maintenance_track_name               = "current"
  manual_snapshot_retention_period     = -1
  master_password                      = null # sensitive
  master_username                      = "master_rds"
  node_type                            = "ra3.large"
  number_of_nodes                      = 1
  owner_account                        = null
  port                                 = 5439
  preferred_maintenance_window         = "tue:07:30-tue:08:00"
  publicly_accessible                  = false
  skip_final_snapshot                  = true
  snapshot_cluster_identifier          = null
  snapshot_identifier                  = null
  tags = {
    Business-Unit = "Delivery-Services"
    Envionment    = "Stage"
    Owner         = "Robert Dewilder"
    Project-Code  = "SME-2000-0306B"
    Project-Name  = "Delivery-Stage"
  }
  tags_all = {
    Business-Unit = "Delivery-Services"
    Envionment    = "Stage"
    Owner         = "Robert Dewilder"
    Project-Code  = "SME-2000-0306B"
    Project-Name  = "Delivery-Stage"
  }
  vpc_security_group_ids = ["sg-ea488981"]
  logging {
    bucket_name          = "sme-deld-redshift-euc1"
    enable               = true
    log_destination_type = null
    log_exports          = []
    s3_key_prefix        = "/"
  }
}


resource "aws_redshift_parameter_group" "del-s2-rs-cpg" {
  description = "DEL-S2-RS-CPG"
  family      = "redshift-1.0"
  name        = "del-s2-rs-cpg"
  tags        = {}
  tags_all    = {}
  parameter {
    name  = "require_ssl"
    value = "true"
  }
  parameter {
    name  = "search_path"
    value = "$user,public,delivery_archive"
  }
  parameter {
    name  = "wlm_json_configuration"
    value = "[{\"query_concurrency\":5,\"memory_percent_to_use\":90,\"query_group\":[\"delievry_app\"],\"query_group_wild_card\":0,\"user_group\":[\"Delivery_archive_app\"],\"user_group_wild_card\":0},{\"query_concurrency\":5,\"query_group\":[],\"query_group_wild_card\":0,\"user_group\":[],\"user_group_wild_card\":0},{\"short_query_queue\":true}]"
  }
}


resource "aws_redshift_subnet_group" "del-s2-redshift-sng" {
  description = "DEL-S2-RedShift-SNG"
  name        = "del-s2-redshift-sng"
  subnet_ids  = ["subnet-4913d733", "subnet-f4b2039c"]
  tags        = {}
  tags_all    = {}
}
