resource "aws_iam_policy" "AWS_ECR_Access" { description = "AWS ECR Access" name = "AWS_ECR_Access" path = var.path policy = data.aws_iam_policy_document.AWS_ECR_Access.json } resource "aws_iam_policy" "Kinesis-Policy" { description = "kinesis" name = "Kinesis-Policy" path = var.path policy = data.aws_iam_policy_document.Kinesis-Policy.json } resource "aws_iam_policy" "CloudOpsDenyIAM" { description = "IAM Read Only" name = "CloudOpsDenyIAM" path = var.path policy = data.aws_iam_policy_document.CloudOpsDenyIAM.json } resource "aws_iam_policy" "AWSLambdaS3ExecutionRole-0d69ef12-e446-4f49-a987-4c0e230abc5c" { name = "AWSLambdaS3ExecutionRole-0d69ef12-e446-4f49-a987-4c0e230abc5c" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaS3ExecutionRole-0d69ef12-e446-4f49-a987-4c0e230abc5c.json } resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" { description = "Policy to allow GSIRT to collect S3 Access Logs" name = "GSIRT_AWS_S3AccessLog_Collection" path = var.path policy = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json } resource "aws_iam_policy" "deld-msi-ondemand-watermarking-policy" { description = "deld-msi-ondemand-watermarking" name = "deld-msi-ondemand-watermarking-policy" path = var.path policy = data.aws_iam_policy_document.deld-msi-ondemand-watermarking-policy.json } resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-b052c8a3-a20c-481c-9b32-be58d53b0ecb" { name = "AWSLambdaBasicExecutionRole-b052c8a3-a20c-481c-9b32-be58d53b0ecb" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-b052c8a3-a20c-481c-9b32-be58d53b0ecb.json } resource "aws_iam_policy" "AWSGlueServiceRole-huron-local" { description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!" name = "AWSGlueServiceRole-huron-local" path = "/service-role/" policy = data.aws_iam_policy_document.AWSGlueServiceRole-huron-local.json } resource "aws_iam_policy" "AWSLambdaS3ExecutionRole-65ee20b6-04ed-4bdd-b965-5fb9b28c0d23" { name = "AWSLambdaS3ExecutionRole-65ee20b6-04ed-4bdd-b965-5fb9b28c0d23" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaS3ExecutionRole-65ee20b6-04ed-4bdd-b965-5fb9b28c0d23.json } resource "aws_iam_policy" "lambda_elasticsearch_execution_policy" { description = "lambda_elasticsearch_execution_policy" name = "lambda_elasticsearch_execution_policy" path = var.path policy = data.aws_iam_policy_document.lambda_elasticsearch_execution_policy.json } resource "aws_iam_policy" "delivery-scratch-bulk-operations-consumer" { name = "delivery-scratch-bulk-operations-consumer" path = var.path policy = data.aws_iam_policy_document.delivery-scratch-bulk-operations-consumer.json } resource "aws_iam_policy" "deld-aws-config-policy" { description = "deld-aws-config-policy" name = "deld-aws-config-policy" path = var.path policy = data.aws_iam_policy_document.deld-aws-config-policy.json } resource "aws_iam_policy" "ecr-clean-up-access-policy" { description = "Policy to clean up ecr un-used images" name = "ecr-clean-up-access-policy" path = var.path policy = data.aws_iam_policy_document.ecr-clean-up-access-policy.json } resource "aws_iam_policy" "PostgreSQL-Credentials-Rotation-Policy" { description = "PostgreSQL-Credentials-Rotation-Policy" name = "PostgreSQL-Credentials-Rotation-Policy" path = var.path policy = data.aws_iam_policy_document.PostgreSQL-Credentials-Rotation-Policy.json } resource "aws_iam_policy" "dels-sqs" { name = "dels-sqs" path = var.path policy = data.aws_iam_policy_document.dels-sqs.json } resource "aws_iam_policy" "deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role-policy" { name = "deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role-policy" path = var.path policy = data.aws_iam_policy_document.deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role-policy.json } resource "aws_iam_policy" "PrismaCloud-IAM-Remediation-Policy" { name = "PrismaCloud-IAM-Remediation-Policy" path = var.path policy = data.aws_iam_policy_document.PrismaCloud-IAM-Remediation-Policy.json } resource "aws_iam_policy" "stage-asset-requester-policy" { name = "stage-asset-requester-policy" path = var.path policy = data.aws_iam_policy_document.stage-asset-requester-policy.json } resource "aws_iam_policy" "deld-eks-dsrv-dev-eks-cluster-ns-delivery-dev-sa-aoma-master-export-service-policy" { description = "Policy used by the EKS app aoma-master-export-service in delivery-dev namespace in dsrv-dev-eks-cluster" name = "deld-eks-dsrv-dev-eks-cluster-ns-delivery-dev-sa-aoma-master-export-service-policy" path = var.path policy = data.aws_iam_policy_document.deld-eks-dsrv-dev-eks-cluster-ns-delivery-dev-sa-aoma-master-export-service-policy.json } resource "aws_iam_policy" "dsrv-stage-eks-cluster-ns-delivery-stage-sa-ddex-exchange-policy" { description = "Policy used by the EKS app ddex-exchange in delivery-stage namespace in dsrv-stage-eks-cluster" name = "dsrv-stage-eks-cluster-ns-delivery-stage-sa-ddex-exchange-policy" path = var.path policy = data.aws_iam_policy_document.dsrv-stage-eks-cluster-ns-delivery-stage-sa-ddex-exchange-policy.json } resource "aws_iam_policy" "mlib-kenisis-policy" { name = "mlib-kenisis-policy" path = var.path policy = data.aws_iam_policy_document.mlib-kenisis-policy.json } resource "aws_iam_policy" "SES_send_email_only" { description = "SES_send_email_only" name = "SES_send_email_only" path = var.path policy = data.aws_iam_policy_document.SES_send_email_only.json } resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" { name = "AWS_Allow_Inspector_Assessment" path = var.path policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json } resource "aws_iam_policy" "dels2-conversion-sqs-policy" { description = "dels2-conversion-sqs-policy" name = "dels2-conversion-sqs-policy" path = var.path policy = data.aws_iam_policy_document.dels2-conversion-sqs-policy.json } resource "aws_iam_policy" "portal_iam" { name = "portal_iam" path = var.path policy = data.aws_iam_policy_document.portal_iam.json } resource "aws_iam_policy" "dsrv_dev_eks_lambda_elasticsearch_policy" { description = "dsrv_dev_eks_lambda_elasticsearch_policy" name = "dsrv_dev_eks_lambda_elasticsearch_policy" path = var.path policy = data.aws_iam_policy_document.dsrv_dev_eks_lambda_elasticsearch_policy.json } resource "aws_iam_policy" "deld-ecs-mlib-stage-task-def-task-policy" { description = "Policy used by the ECS task mlib-stage-task-def in mlib-stage-ecs" name = "deld-ecs-mlib-stage-task-def-task-policy" path = var.path policy = data.aws_iam_policy_document.deld-ecs-mlib-stage-task-def-task-policy.json } resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503384560177" { name = "oneClick_CloudTrail_CloudWatchLogs_Role_1503384560177" path = var.path policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503384560177.json } resource "aws_iam_policy" "rds_create_policy" { description = "rds_create_policy" name = "rds_create_policy" path = var.path policy = data.aws_iam_policy_document.rds_create_policy.json } resource "aws_iam_policy" "cross_secrete_access_to_mcon_dev_secret" { name = "cross_secrete_access_to_mcon_dev_secret" path = var.path policy = data.aws_iam_policy_document.cross_secrete_access_to_mcon_dev_secret.json } resource "aws_iam_policy" "deld-dels2-wfdash" { description = "For WildFly" name = "deld-dels2-wfdash" path = var.path policy = data.aws_iam_policy_document.deld-dels2-wfdash.json } resource "aws_iam_policy" "stage-external-msk-policy" { description = "For stage external msk access" name = "stage-external-msk-policy" path = var.path policy = data.aws_iam_policy_document.stage-external-msk-policy.json } resource "aws_iam_policy" "dev-external-msk-policy" { description = "For dev external msk access" name = "dev-external-msk-policy" path = var.path policy = data.aws_iam_policy_document.dev-external-msk-policy.json } resource "aws_iam_policy" "deld-portal-policy" { description = "deld-portal-policy" name = "deld-portal-policy" path = var.path policy = data.aws_iam_policy_document.deld-portal-policy.json } resource "aws_iam_policy" "AWSIngressControllerIAMPolicy" { description = "AWSIngressControllerIAMPolicy" name = "AWSIngressControllerIAMPolicy" path = var.path policy = data.aws_iam_policy_document.AWSIngressControllerIAMPolicy.json } resource "aws_iam_policy" "deld-dels2-agentapp01-policy" { name = "deld-dels2-agentapp01-policy" path = var.path policy = data.aws_iam_policy_document.deld-dels2-agentapp01-policy.json } resource "aws_iam_policy" "dsrv-dev-eks-cluster-ns-delivery-dev-sa-del-svc-gateway-policy" { description = "Policy used by the EKS app del-svc-gateway in delivery-dev namespace in dsrv-dev-eks-cluster" name = "dsrv-dev-eks-cluster-ns-delivery-dev-sa-del-svc-gateway-policy" path = var.path policy = data.aws_iam_policy_document.dsrv-dev-eks-cluster-ns-delivery-dev-sa-del-svc-gateway-policy.json } resource "aws_iam_policy" "deld-eks-dsrv-stage-eks-cluster-ns-delivery-stage-sa-aoma-master-export-service-policy" { description = "Policy used by the EKS app aoma-master-export-service in delivery-stage namespace in dsrv-stage-eks-cluster" name = "deld-eks-dsrv-stage-eks-cluster-ns-delivery-stage-sa-aoma-master-export-service-policy" path = var.path policy = data.aws_iam_policy_document.deld-eks-dsrv-stage-eks-cluster-ns-delivery-stage-sa-aoma-master-export-service-policy.json } resource "aws_iam_policy" "deld-sqs-policy" { description = "policy for send, receive and delete messages from sqs." name = "deld-sqs-policy" path = var.path policy = data.aws_iam_policy_document.deld-sqs-policy.json } resource "aws_iam_policy" "SES-ALLOW" { name = "SES-ALLOW" path = var.path policy = data.aws_iam_policy_document.SES-ALLOW.json } resource "aws_iam_policy" "ds_agent_policy" { description = "Deep Security for Trend" name = "ds_agent_policy" path = var.path policy = data.aws_iam_policy_document.ds_agent_policy.json } resource "aws_iam_policy" "util-policy" { description = "util-policy" name = "util-policy" path = var.path policy = data.aws_iam_policy_document.util-policy.json } resource "aws_iam_policy" "mgsrv-stage-s3" { description = "mgsrv-stage-s3" name = "mgsrv-stage-s3" path = var.path policy = data.aws_iam_policy_document.mgsrv-stage-s3.json } resource "aws_iam_policy" "deld-sme-delivery-dev-target-s3-policy" { description = "deld-sme-delivery-dev-target-s3-policy" name = "deld-sme-delivery-dev-target-s3-policy" path = var.path policy = data.aws_iam_policy_document.deld-sme-delivery-dev-target-s3-policy.json } resource "aws_iam_policy" "sme-aoma-delivery-dev-waf-logging-policy" { description = "sme-aoma-delivery-dev-waf-logging-policy" name = "sme-aoma-delivery-dev-waf-logging-policy" path = var.path policy = data.aws_iam_policy_document.sme-aoma-delivery-dev-waf-logging-policy.json } resource "aws_iam_policy" "kms_read_access" { name = "kms_read_access" path = var.path policy = data.aws_iam_policy_document.kms_read_access.json } resource "aws_iam_policy" "sme-delivery-stage-source-s3-access" { description = "sme-delivery-stage-source-s3-access" name = "sme-delivery-stage-source-s3-access" path = var.path policy = data.aws_iam_policy_document.sme-delivery-stage-source-s3-access.json } resource "aws_iam_policy" "AllowAuroraTo-sme_netezza_data-Buckets" { name = "AllowAuroraTo-sme_netezza_data-Buckets" path = var.path policy = data.aws_iam_policy_document.AllowAuroraTo-sme_netezza_data-Buckets.json } resource "aws_iam_policy" "iam_policy_v1_to_v2_additional_policy" { description = "iam_policy_v1_to_v2_additional_policy" name = "iam_policy_v1_to_v2_additional_policy" path = var.path policy = data.aws_iam_policy_document.iam_policy_v1_to_v2_additional_policy.json } resource "aws_iam_policy" "ALBIngressControllerIAMPolicy" { name = "ALBIngressControllerIAMPolicy" path = var.path policy = data.aws_iam_policy_document.ALBIngressControllerIAMPolicy.json } resource "aws_iam_policy" "eks-fargate-logging-policy" { description = "eks-fargate-logging-policy" name = "eks-fargate-logging-policy" path = var.path policy = data.aws_iam_policy_document.eks-fargate-logging-policy.json } resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" { description = "AWSLoadBalancerControllerIAMPolicy" name = "AWSLoadBalancerControllerIAMPolicy" path = var.path policy = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json } resource "aws_iam_policy" "delivery-package-archiver-dev-kinesis-access" { description = "delivery-package-archiver-dev-kinesis-access" name = "delivery-package-archiver-dev-kinesis-access" path = var.path policy = data.aws_iam_policy_document.delivery-package-archiver-dev-kinesis-access.json } resource "aws_iam_policy" "mgsrv-stage-dynamodb" { description = "mgsrv-stage-dynamodb" name = "mgsrv-stage-dynamodb" path = var.path policy = data.aws_iam_policy_document.mgsrv-stage-dynamodb.json } resource "aws_iam_policy" "cloudops-instance-policy" { description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess" name = "cloudops-instance-policy" path = var.path policy = data.aws_iam_policy_document.cloudops-instance-policy.json } resource "aws_iam_policy" "deld-stage-cache" { description = "Policy for cache" name = "deld-stage-cache" path = var.path policy = data.aws_iam_policy_document.deld-stage-cache.json } resource "aws_iam_policy" "Kinesis-AOMA-del" { name = "Kinesis-AOMA-del" path = var.path policy = data.aws_iam_policy_document.Kinesis-AOMA-del.json } resource "aws_iam_policy" "sme-pitch-uat" { description = "grant access to execute lambda, s3 access to sme-pitch-content-dropoff-uat and external SQS access with assume role" name = "sme-pitch-uat" path = var.path policy = data.aws_iam_policy_document.sme-pitch-uat.json } resource "aws_iam_policy" "deld-ssm-policy" { description = "SSM permissions to role deld-deld-wfdash01." name = "deld-ssm-policy" path = var.path policy = data.aws_iam_policy_document.deld-ssm-policy.json tags = { "Jira" = "CLOUDSD-4078" } tags_all = { "Jira" = "CLOUDSD-4078" } } resource "aws_iam_policy" "aoma-RDS_snapshot_lambda-policy" { name = "aoma-RDS_snapshot_lambda-policy" path = var.path policy = data.aws_iam_policy_document.aoma-RDS_snapshot_lambda-policy.json } resource "aws_iam_policy" "PrismaCloud-ReadOnly-Policy-Compute" { name = "PrismaCloud-ReadOnly-Policy-Compute" path = var.path policy = data.aws_iam_policy_document.PrismaCloud-ReadOnly-Policy-Compute.json } resource "aws_iam_policy" "IAMPASSROLE" { name = "IAMPASSROLE" path = var.path policy = data.aws_iam_policy_document.IAMPASSROLE.json } resource "aws_iam_policy" "dsrv-stage-eks-cluster-ns-delivery-stage-sa-del-svc-gateway-policy" { description = "Policy used by the EKS app del-svc-gateway in delivery-stage namespace in dsrv-stage-eks-cluster" name = "dsrv-stage-eks-cluster-ns-delivery-stage-sa-del-svc-gateway-policy" path = var.path policy = data.aws_iam_policy_document.dsrv-stage-eks-cluster-ns-delivery-stage-sa-del-svc-gateway-policy.json } resource "aws_iam_policy" "CloudWatchEventsLambdaRoute53" { name = "CloudWatchEventsLambdaRoute53" path = var.path policy = data.aws_iam_policy_document.CloudWatchEventsLambdaRoute53.json } resource "aws_iam_policy" "ALBcontrollerpolicy" { description = "ALBcontrollerpolicy" name = "ALBcontrollerpolicy" path = var.path policy = data.aws_iam_policy_document.ALBcontrollerpolicy.json } resource "aws_iam_policy" "deld-dsrv-dsp-s3" { description = "To access dsrv-dsp-package-xml-dev bucket" name = "deld-dsrv-dsp-s3" path = var.path policy = data.aws_iam_policy_document.deld-dsrv-dsp-s3.json } resource "aws_iam_policy" "logstash" { name = "logstash" path = var.path policy = data.aws_iam_policy_document.logstash.json } resource "aws_iam_policy" "deld-util-policy" { name = "deld-util-policy" path = var.path policy = data.aws_iam_policy_document.deld-util-policy.json } resource "aws_iam_policy" "Athena_RO" { name = "Athena_RO" path = var.path policy = data.aws_iam_policy_document.Athena_RO.json } resource "aws_iam_policy" "sme-gen-custom-access-policy-02" { name = "sme-gen-custom-access-policy-02" path = var.path policy = data.aws_iam_policy_document.sme-gen-custom-access-policy-02.json } resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540816183164" { name = "oneClick_CloudTrail_CloudWatchLogs_Role_1540816183164" path = var.path policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540816183164.json } resource "aws_iam_policy" "oneClick_Cognito_dsrvdevekskibanausersAuth_Role_1644235550925" { name = "oneClick_Cognito_dsrvdevekskibanausersAuth_Role_1644235550925" path = var.path policy = data.aws_iam_policy_document.oneClick_Cognito_dsrvdevekskibanausersAuth_Role_1644235550925.json } resource "aws_iam_policy" "oneClick_flowlogsRole_1502364196890" { name = "oneClick_flowlogsRole_1502364196890" path = var.path policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1502364196890.json } resource "aws_iam_policy" "mlib-stage-ecs-secretmanager-policy" { description = "Policy to access secret manager" name = "mlib-stage-ecs-secretmanager-policy" path = var.path policy = data.aws_iam_policy_document.mlib-stage-ecs-secretmanager-policy.json } resource "aws_iam_policy" "ECS-Policy" { name = "ECS-Policy" path = var.path policy = data.aws_iam_policy_document.ECS-Policy.json } resource "aws_iam_policy" "conversion-service-role-inline-policy" { name = "conversion-service-role-inline-policy" path = var.path policy = data.aws_iam_policy_document.conversion-service-role-inline-policy.json } resource "aws_iam_policy" "deld-deld-gitrun01-inline_policy" { name = "deld-deld-gitrun01-inline_policy" path = var.path policy = data.aws_iam_policy_document.deld-deld-gitrun01-inline_policy.json } resource "aws_iam_policy" "PrismaCloud-Remediation-Policy-Compute" { name = "PrismaCloud-Remediation-Policy-Compute" path = var.path policy = data.aws_iam_policy_document.PrismaCloud-Remediation-Policy-Compute.json } resource "aws_iam_policy" "DEVADMIN-POLICY" { name = "DEVADMIN-POLICY" path = var.path policy = data.aws_iam_policy_document.DEVADMIN-POLICY.json } resource "aws_iam_policy" "DEVADMIN-POLICY-2" { name = "DEVADMIN-POLICY-2" path = var.path policy = data.aws_iam_policy_document.DEVADMIN-POLICY-2.json } resource "aws_iam_policy" "DEVADMIN-POLICY-3" { name = "DEVADMIN-POLICY-3" path = var.path policy = data.aws_iam_policy_document.DEVADMIN-POLICY-3.json } resource "aws_iam_policy" "dev-asset-request-policy" { name = "dev-asset-request-policy" path = var.path policy = data.aws_iam_policy_document.dev-asset-request-policy.json } resource "aws_iam_policy" "mlib-stage-ecs-cloudwatch-policy" { description = "Policy to access cloudwatch " name = "mlib-stage-ecs-cloudwatch-policy" path = var.path policy = data.aws_iam_policy_document.mlib-stage-ecs-cloudwatch-policy.json } resource "aws_iam_policy" "secret_access_policy" { name = "secret_access_policy" path = var.path policy = data.aws_iam_policy_document.secret_access_policy.json } resource "aws_iam_policy" "PostgreSql-RDS-DB_secret_manger" { description = "Read permissions to PostgreSql-RDS-DB secret manager" name = "PostgreSql-RDS-DB_secret_manger" path = var.path policy = data.aws_iam_policy_document.PostgreSql-RDS-DB_secret_manger.json } resource "aws_iam_policy" "For_RDS_Enhanced_Monitoring" { name = "For_RDS_Enhanced_Monitoring" path = var.path policy = data.aws_iam_policy_document.For_RDS_Enhanced_Monitoring.json } resource "aws_iam_policy" "eom-d-api-execute" { description = "eom-order-api-gateway-user" name = "eom-d-api-execute" path = var.path policy = data.aws_iam_policy_document.eom-d-api-execute.json } resource "aws_iam_policy" "huron-dev-s3-access" { name = "huron-dev-s3-access" path = var.path policy = data.aws_iam_policy_document.huron-dev-s3-access.json } resource "aws_iam_policy" "dels2-ecs-scheduler-policy" { description = "Policy for dels2-ecs-scheduler-role " name = "dels2-ecs-scheduler-policy" path = var.path policy = data.aws_iam_policy_document.dels2-ecs-scheduler-policy.json } resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-0f5dd197-97cb-4858-b27c-49fd3d92bded" { name = "AWSLambdaBasicExecutionRole-0f5dd197-97cb-4858-b27c-49fd3d92bded" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-0f5dd197-97cb-4858-b27c-49fd3d92bded.json } resource "aws_iam_policy" "mlib-secretsmanager-policy" { name = "mlib-secretsmanager-policy" path = var.path policy = data.aws_iam_policy_document.mlib-secretsmanager-policy.json } resource "aws_iam_policy" "deld-ecs-lambda" { name = "deld-ecs-lambda" path = var.path policy = data.aws_iam_policy_document.deld-ecs-lambda.json } resource "aws_iam_policy" "deld-ddexws-policy" { description = "deld-ddexws-policy" name = "deld-ddexws-policy" path = var.path policy = data.aws_iam_policy_document.deld-ddexws-policy.json } resource "aws_iam_policy" "deld-trendmicro_esdomain_policy" { description = "Policy for accessing centralized tmds es domain" name = "deld-trendmicro_esdomain_policy" path = var.path policy = data.aws_iam_policy_document.deld-trendmicro_esdomain_policy.json } resource "aws_iam_policy" "cross_secret_access_to_mcon_stage" { name = "cross_secret_access_to_mcon_stage" path = var.path policy = data.aws_iam_policy_document.cross_secret_access_to_mcon_stage.json } resource "aws_iam_policy" "delivery-package-archiver-stage-policy" { description = "Policy for delivery-package-archiver-stage role" name = "delivery-package-archiver-stage-policy" path = var.path policy = data.aws_iam_policy_document.delivery-package-archiver-stage-policy.json } resource "aws_iam_policy" "wafv2" { name = "wafv2" path = var.path policy = data.aws_iam_policy_document.wafv2.json } resource "aws_iam_policy" "mlib-stage-ecs-kinesis-stream-policy" { description = "Policy to access EmailStream-STAGE" name = "mlib-stage-ecs-kinesis-stream-policy" path = var.path policy = data.aws_iam_policy_document.mlib-stage-ecs-kinesis-stream-policy.json } resource "aws_iam_policy" "EOM-xJpgcy_secret_manager_policy" { description = "Read permission policy for EOM-xJpgcy secret manager" name = "EOM-xJpgcy_secret_manager_policy" path = var.path policy = data.aws_iam_policy_document.EOM-xJpgcy_secret_manager_policy.json } resource "aws_iam_policy" "oneClick_lambda_basic_execution_1494875283338" { name = "oneClick_lambda_basic_execution_1494875283338" path = var.path policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1494875283338.json } resource "aws_iam_policy" "lambda-create" { name = "lambda-create" path = var.path policy = data.aws_iam_policy_document.lambda-create.json } resource "aws_iam_policy" "DeliveryBulkOperationLambda-Secrets-Access" { name = "DeliveryBulkOperationLambda-Secrets-Access" path = var.path policy = data.aws_iam_policy_document.DeliveryBulkOperationLambda-Secrets-Access.json } resource "aws_iam_policy" "del-d-api" { description = "CLOUDOPS-4214" name = "del-d-api" path = var.path policy = data.aws_iam_policy_document.del-d-api.json } resource "aws_iam_policy" "RDSProxyIAMpolicy" { description = "RDSProxyIAMpolicy" name = "RDSProxyIAMpolicy" path = var.path policy = data.aws_iam_policy_document.RDSProxyIAMpolicy.json } resource "aws_iam_policy" "root" { name = "root" path = var.path policy = data.aws_iam_policy_document.root.json } resource "aws_iam_policy" "EKS-worker-node-policy" { name = "EKS-worker-node-policy" path = var.path policy = data.aws_iam_policy_document.EKS-worker-node-policy.json } resource "aws_iam_policy" "deld-sme-delivery-dev-s3-policy" { name = "deld-sme-delivery-dev-s3-policy" path = var.path policy = data.aws_iam_policy_document.deld-sme-delivery-dev-s3-policy.json } resource "aws_iam_policy" "PrismaCloud-IAM-ReadOnly-Policy-ElasticBeanstalk" { name = "PrismaCloud-IAM-ReadOnly-Policy-ElasticBeanstalk" path = var.path policy = data.aws_iam_policy_document.PrismaCloud-IAM-ReadOnly-Policy-ElasticBeanstalk.json } resource "aws_iam_policy" "mlib-stage-ecs-s3-policy" { description = "Policy to access sme-stage-origin-medialib" name = "mlib-stage-ecs-s3-policy" path = var.path policy = data.aws_iam_policy_document.mlib-stage-ecs-s3-policy.json } resource "aws_iam_policy" "WAF_Policy" { name = "WAF_Policy" path = var.path policy = data.aws_iam_policy_document.WAF_Policy.json } resource "aws_iam_policy" "sqs-custom-pitch" { name = "sqs-custom-pitch" path = var.path policy = data.aws_iam_policy_document.sqs-custom-pitch.json } resource "aws_iam_policy" "sec-mng-custom-pitch" { name = "sec-mng-custom-pitch" path = var.path policy = data.aws_iam_policy_document.sec-mng-custom-pitch.json } resource "aws_iam_policy" "deld-deld-mlib01" { description = "For deld-mlib01 only" name = "deld-deld-mlib01" path = var.path policy = data.aws_iam_policy_document.deld-deld-mlib01.json } resource "aws_iam_policy" "partner-dropoff-bucket-policy" { description = "partner-dropoff-bucket-policy" name = "partner-dropoff-bucket-policy" path = var.path policy = data.aws_iam_policy_document.partner-dropoff-bucket-policy.json } resource "aws_iam_policy" "SecretsManager" { name = "SecretsManager" path = var.path policy = data.aws_iam_policy_document.SecretsManager.json } resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-dc4a3b8c-13c2-4ef0-b09a-93d9a7528b80" { name = "AWSLambdaBasicExecutionRole-dc4a3b8c-13c2-4ef0-b09a-93d9a7528b80" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-dc4a3b8c-13c2-4ef0-b09a-93d9a7528b80.json } resource "aws_iam_policy" "SecretsManagerPolicy" { name = "SecretsManagerPolicy" path = var.path policy = data.aws_iam_policy_document.SecretsManagerPolicy.json } resource "aws_iam_policy" "mlib-s3-policy" { name = "mlib-s3-policy" path = var.path policy = data.aws_iam_policy_document.mlib-s3-policy.json } resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" { name = "GSIRT_AWS_Monitoring_Role-DescribePolicy" path = var.path policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json } resource "aws_iam_policy" "dsrv-dev-eks-cluster-ns-delivery-dev-sa-ddex-exchange-svc-policy" { description = "Policy used by the EKS app ddex-exchange-svc in delivery-dev namespace in dsrv-dev-eks-cluster" name = "dsrv-dev-eks-cluster-ns-delivery-dev-sa-ddex-exchange-svc-policy" path = var.path policy = data.aws_iam_policy_document.dsrv-dev-eks-cluster-ns-delivery-dev-sa-ddex-exchange-svc-policy.json } resource "aws_iam_policy" "Kinesis-and-cloudwatch-access-policy" { name = "Kinesis-and-cloudwatch-access-policy" path = var.path policy = data.aws_iam_policy_document.Kinesis-and-cloudwatch-access-policy.json } resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-4300a810-9720-4f63-9af4-57b43f50f30d" { name = "AWSLambdaBasicExecutionRole-4300a810-9720-4f63-9af4-57b43f50f30d" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-4300a810-9720-4f63-9af4-57b43f50f30d.json } resource "aws_iam_policy" "RDS_Snapshots_Export_To_S3_lambda" { name = "RDS_Snapshots_Export_To_S3_lambda" path = var.path policy = data.aws_iam_policy_document.RDS_Snapshots_Export_To_S3_lambda.json } resource "aws_iam_policy" "deld-dev-cache" { description = "Policy for cache" name = "deld-dev-cache" path = var.path policy = data.aws_iam_policy_document.deld-dev-cache.json } resource "aws_iam_policy" "StatusUpdateStream-Stage-FullAccess" { description = "StatusUpdateStream-Stage-FullAccess" name = "StatusUpdateStream-Stage-FullAccess" path = var.path policy = data.aws_iam_policy_document.StatusUpdateStream-Stage-FullAccess.json } resource "aws_iam_policy" "sme-gen-custom-access-policy-01" { name = "sme-gen-custom-access-policy-01" path = var.path policy = data.aws_iam_policy_document.sme-gen-custom-access-policy-01.json } resource "aws_iam_policy" "deld-dev2-cache" { description = "Policy for cache" name = "deld-dev2-cache" path = var.path policy = data.aws_iam_policy_document.deld-dev2-cache.json } resource "aws_iam_policy" "flowlogsPolicy" { description = "For VPC Flow Logs" name = "flowlogsPolicy" path = var.path policy = data.aws_iam_policy_document.flowlogsPolicy.json } resource "aws_iam_policy" "PrismaCloud-IAM-ReadOnly-Policy" { name = "PrismaCloud-IAM-ReadOnly-Policy" path = var.path policy = data.aws_iam_policy_document.PrismaCloud-IAM-ReadOnly-Policy.json } resource "aws_iam_policy" "deld-sqs" { name = "deld-sqs" path = var.path policy = data.aws_iam_policy_document.deld-sqs.json } resource "aws_iam_policy" "oneClick_lambda_basic_execution_1490993843994" { name = "oneClick_lambda_basic_execution_1490993843994" path = var.path policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1490993843994.json } resource "aws_iam_policy" "cost-explore-ro" { description = "Read cost explorer service" name = "cost-explore-ro" path = var.path policy = data.aws_iam_policy_document.cost-explore-ro.json } resource "aws_iam_policy" "kms-key-policy" { description = "kms-key-policy" name = "kms-key-policy" path = var.path policy = data.aws_iam_policy_document.kms-key-policy.json } resource "aws_iam_policy" "deld-dsrv-dev-eks-ns-delivery-dev-sony-ci-transfer-role-policy" { name = "deld-dsrv-dev-eks-ns-delivery-dev-sony-ci-transfer-role-policy" path = var.path policy = data.aws_iam_policy_document.deld-dsrv-dev-eks-ns-delivery-dev-sony-ci-transfer-role-policy.json } resource "aws_iam_policy" "mgsrv-dev-dynamodb" { description = "mgsrv-dev-dynamodb" name = "mgsrv-dev-dynamodb" path = var.path policy = data.aws_iam_policy_document.mgsrv-dev-dynamodb.json } resource "aws_iam_policy" "mgsrv-dev-s3" { description = "mgsrv-dev-s3" name = "mgsrv-dev-s3" path = var.path policy = data.aws_iam_policy_document.mgsrv-dev-s3.json } resource "aws_iam_policy" "AmazonEKS_EFS_CSI_Driver_Policy" { description = "AmazonEKS_EFS_CSI_Driver_Policy" name = "AmazonEKS_EFS_CSI_Driver_Policy" path = var.path policy = data.aws_iam_policy_document.AmazonEKS_EFS_CSI_Driver_Policy.json } resource "aws_iam_policy" "RDSAdminPolicyForTerraform" { description = "RDSAdminPolicyForTerraform" name = "RDSAdminPolicyForTerraform" path = var.path policy = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json } resource "aws_iam_policy" "deld-sqs-wfdash" { description = "deld-sqs-wfdash" name = "deld-sqs-wfdash" path = var.path policy = data.aws_iam_policy_document.deld-sqs-wfdash.json } resource "aws_iam_policy" "deld-dashbordui-dynamodb-access" { description = "Access DynamoDB tables from DashbordUI pod" name = "deld-dashbordui-dynamodb-access" path = var.path policy = data.aws_iam_policy_document.deld-dashbordui-dynamodb-access.json } resource "aws_iam_policy" "dels-sqs-wfdash" { description = "dels-sqs-wfdash" name = "dels-sqs-wfdash" path = var.path policy = data.aws_iam_policy_document.dels-sqs-wfdash.json } resource "aws_iam_policy" "deld-deld-mlib01-kms-policy" { description = "deld-deld-mlib01-kms-policy" name = "deld-deld-mlib01-kms-policy" path = var.path policy = data.aws_iam_policy_document.deld-deld-mlib01-kms-policy.json } resource "aws_iam_policy" "deld-dev-uat-globalds-msk-policy" { description = "deld-dev-uat-globalds-msk-policy" name = "deld-dev-uat-globalds-msk-policy" path = var.path policy = data.aws_iam_policy_document.dev-uat-globalds-msk-policy.json } resource "aws_iam_policy" "deld-ECS-Instance-Role-kms-secrets-policy" { description = "deld-ECS-Instance-Role-kms-secrets-policy" name = "deld-ECS-Instance-Role-kms-secrets-policy" path = var.path policy = data.aws_iam_policy_document.deld-ECS-Instance-Role-kms-secrets-policy.json } resource "aws_iam_policy" "dev-ampsv-s3-policy" { description = "dev-ampsv-s3-policy" name = "dev-ampsv-s3-policy" path = var.path policy = data.aws_iam_policy_document.dev-ampsv-s3-policy.json } resource "aws_iam_policy" "stage-ampsv-s3-policy" { description = "stage-ampsv-s3-policy" name = "stage-ampsv-s3-policy" path = var.path policy = data.aws_iam_policy_document.stage-ampsv-s3-policy.json } resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" { description = "Access s3 bucket in core cloud shared account" name = "KubeCostFederatedRoleIAMPolicy" path = var.path policy = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json } resource "aws_iam_policy" "deld-cloudops-14959-policy" { description = "Access sme-delivery-uat-target" name = "deld-cloudops-14959-policy" path = var.path policy = data.aws_iam_policy_document.deld-cloudops-14959-policy.json } resource "aws_iam_policy" "kinesis-put-records-policy" { description = "Policy to put Kinesis records" name = "deld-ddexws-taskrole-kinesis-policy" path = var.path policy = data.aws_iam_policy_document.kinesis-put-records-policy.json } resource "aws_iam_policy" "github-actions-lambda-policy" { description = "Lambda deployment policy for github actions" name = "deld-github-actions-lambda-policy" path = var.path policy = data.aws_iam_policy_document.github-actions-lambda-policy.json } resource "aws_iam_policy" "KarpenterControllerPolicy-dsrv-dev-eks-cluster" { name = "KarpenterControllerPolicy-dsrv-dev-eks-cluster" description = "Karpenter controller IAM policy" path = var.path policy = data.aws_iam_policy_document.KarpenterControllerPolicy-dsrv-dev-eks-cluster.json } resource "aws_iam_policy" "SQSReadAccessForDeldUtil" { name = "SQSReadAccessForDeldUtil" description = "Karpenter controller IAM policy" path = var.path policy = data.aws_iam_policy_document.SQSReadAccessForDeldUtil.json } resource "aws_iam_policy" "SQSWriteAccessForWfdash01" { name = "SQSWriteAccessForWfdash01" description = "Karpenter controller IAM policy" path = var.path policy = data.aws_iam_policy_document.SQSWriteAccessForWfdash01.json } resource "aws_iam_policy" "deld-watermarking-role-policy" { name = "deld-watermarking-role-policy" description = "SQS Access" path = var.path policy = data.aws_iam_policy_document.deld-watermarking-role-policy.json } resource "aws_iam_policy" "deld-watermarking-delegate-role-policy" { name = "deld-watermarking-delegate-role-policy" description = "SNS Access and Assume delegate policy" path = var.path policy = data.aws_iam_policy_document.deld-watermarking-delegate-role-policy.json } resource "aws_iam_policy" "sme-delivery-s3-permissions" { name = "sme-delivery-s3-permissions" description = "S3 access" path = var.path policy = data.aws_iam_policy_document.sme-delivery-s3-permissions.json } resource "aws_iam_policy" "sme-delivery-kinesis-stage" { name = "sme-delivery-kinesis-stage" description = "Kinesis access" path = var.path policy = data.aws_iam_policy_document.sme-delivery-kinesis-stage.json } resource "aws_iam_policy" "sme-delivery-kinesis-dev" { name = "sme-delivery-kinesis-dev" description = "Kinesis access" path = var.path policy = data.aws_iam_policy_document.sme-delivery-kinesis-dev.json } resource "aws_iam_policy" "sme-dynamo-db" { name = "sme-dynamo-db" description = "Dynamodb access" path = var.path policy = data.aws_iam_policy_document.sme-dynamo-db.json } resource "aws_iam_policy" "secret-manager-dev" { name = "secret-manager-dev" description = "SecretsManager access" path = var.path policy = data.aws_iam_policy_document.secret-manager-dev.json } resource "aws_iam_policy" "secret-manager-stage" { name = "secret-manager-stage" description = "SecretsManager access" path = var.path policy = data.aws_iam_policy_document.secret-manager-stage.json } resource "aws_iam_policy" "assume-role-dev" { name = "assume-role-dev" description = "Assume Role" path = var.path policy = data.aws_iam_policy_document.assume-role-dev.json } resource "aws_iam_policy" "assume-role-stage" { name = "assume-role-stage" description = "Assume Role" path = var.path policy = data.aws_iam_policy_document.assume-role-stage.json } resource "aws_iam_policy" "sqs-dev" { name = "sqs-dev" description = "sqs-dev" path = var.path policy = data.aws_iam_policy_document.sqs-dev.json } resource "aws_iam_policy" "sme-logs" { name = "sme-logs" description = "sme-logs" path = var.path policy = data.aws_iam_policy_document.sme-logs.json } resource "aws_iam_policy" "openobserve-s3-policy" { name = "openobserve-s3-policy" description = "Policy for OpenObserve to access S3 bucket" policy = data.aws_iam_policy_document.openobserve-s3-access.json } resource "aws_iam_policy" "lambda-cloudwatch-access" { name = "lambda-cloudwatch-access" description = "lambda-cloudwatch-access" path = var.path policy = data.aws_iam_policy_document.lambda-cloudwatch-access.json } resource "aws_iam_policy" "delivery-dev-s3-replicator" { name = "delivery-dev-s3-replicator" path = var.path policy = data.aws_iam_policy_document.delivery-dev-s3-replicator.json } resource "aws_iam_policy" "globalds-dev-assumerole" { name = "globalds-dev-assumerole" description = "globalds-dev-assumerole" path = var.path policy = data.aws_iam_policy_document.globalds-dev-assumerole.json }