module "DEL-D-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.DEL-D.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/SES-ALLOW",
    "arn:aws:iam::${var.account_id}:policy/ECS-Policy",
    "arn:aws:iam::${var.account_id}:policy/del-d-api",
    "arn:aws:iam::${var.account_id}:policy/Kinesis-Policy",
    "arn:aws:iam::aws:policy/IAMReadOnlyAccess",
  ]
}

module "deld-jenkins-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.deld-jenkins-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/AWS_ECR_Access",
    "arn:aws:iam::${var.account_id}:policy/RDS_Snapshots_Export_To_S3_lambda",
    "arn:aws:iam::aws:policy/AmazonECS_FullAccess",
    "arn:aws:iam::aws:policy/service-role/AWSConfigRulesExecutionRole",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly",
    "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy",
    "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy",
    "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy",
    "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy"
  ]
}

module "deld-msi-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.deld-msi.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/deld-msi-ondemand-watermarking-policy",
  ]
}

module "deld-sme-delivery-dev-s3-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.deld-sme-delivery-dev-s3.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/deld-sme-delivery-dev-s3-policy",
  ]
}

module "eom-d-api-execute-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.eom-d-api-execute.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/eom-d-api-execute",
  ]
}

module "s3access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.s3access.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/sme-delivery-stage-source-s3-access",
    "arn:aws:iam::aws:policy/AmazonRDSFullAccess",
    "arn:aws:iam::aws:policy/AmazonS3FullAccess",
  ]
}

# module "terraform-policy-attachments" {
#   source     = "./modules/iam-group-policy-attachments"
#   group_name = aws_iam_group.terraform.name
#   custom_group_policy_arns = [
#     "arn:aws:iam::aws:policy/AmazonRDSFullAccess",
#     "arn:aws:iam::aws:policy/IAMFullAccess",
#     "arn:aws:iam::aws:policy/AmazonS3FullAccess",
#   ]
# }
