data "aws_iam_policy_document" "AmazonEKSLoadBalancerControllerRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "AmazonEKSLoadBalancerControllerRolestage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }
}

data "aws_iam_policy_document" "AnsibleAWSServiceAccess-DEL-D-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
        "arn:aws:iam::943540511943:role/AnsibleDevCrossAccountAccess",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-tower01",
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-dev-cloud9-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/john001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dial001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/spanick",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/eira001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/cher008",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pcharle",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gogi001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/char098",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/psalvio",
      ]
    }
  }
}

data "aws_iam_policy_document" "aoma-RDS_snapshot_lambda-role-trust-policy" {
  statement {
    sid     = "VisualEditor0"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }

  statement {
    sid     = "VisualEditor1"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds-export.aws.internal"]
    }
  }

  statement {
    sid     = "VisualEditor2"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["export.rds.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "aws-opsworks-ec2-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::943540511943:root"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "AWSBackupDefaultServiceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["backup.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSGlueServiceRole-huron-local-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["glue.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "AWSReservedSSO_SME-CloudOps-Admin_fb63101da46d41ae-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithSAML",
      "sts:TagSession",
    ]

    condition {
      test     = "StringEquals"
      variable = "SAML:aud"
      values   = ["https://signin.aws.amazon.com/saml"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:saml-provider/AWSSSO_375a39d0bfdcc65c_DO_NOT_DELETE"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonEKS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonEKSForFargate-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks-fargate.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonElasticFileSystem-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticfilesystem.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonGuardDuty-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["guardduty.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonOpenSearchService-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["opensearchservice.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonSSM-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ssm.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAPIGateway-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ops.apigateway.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAutoScaling-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["autoscaling.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAWSCloud9-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["cloud9.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudFormationStackSetsOrgMember-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["member.org.stacksets.cloudformation.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudTrail-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["cloudtrail.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudWatchCrossAccount-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["cloudwatch-crossaccount.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForECS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForElastiCache-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticache.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForElasticLoadBalancing-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticloadbalancing.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForEMRCleanup-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticmapreduce.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForFMS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["fms.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForGlobalAccelerator-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["globalaccelerator.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForMarketplaceLicenseManagement-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["license-management.marketplace.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForNetworkFirewall-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["network-firewall.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForOrganizations-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["organizations.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForRDS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForRedshift-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["redshift.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForRoute53Resolver-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["route53resolver.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForServiceQuotas-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["servicequotas.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForSSO-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["sso.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForSupport-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["support.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForTrustedAdvisor-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["trustedadvisor.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForVPCTransitGateway-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["transitgateway.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForWAFRegionalLogging-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["waf-regional.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForWAFV2Logging-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["wafv2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWS_InspectorEvents_Invoke_Assessment_Template-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["events.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "bulk-operations-consumer-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "CloudTrail_CloudWatchLogs_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["cloudtrail.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "cloudwarerole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["6e194b01-9ace-47eb-8d83-5bf409257419"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::814021343637:user/ca-collector"]
    }
  }
}



data "aws_iam_policy_document" "CognitoAccessForAmazonOpenSearch-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["es.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "Cognito_dsrvdevekskibanausersAuth_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "cognito-identity.amazonaws.com:aud"
      values   = ["eu-central-1:da9493a6-e4e1-4497-b732-d4ca49460d44"]
    }

    condition {
      test     = "ForAnyValue:StringLike"
      variable = "cognito-identity.amazonaws.com:amr"
      values   = ["authenticated"]
    }

    principals {
      type        = "Federated"
      identifiers = ["cognito-identity.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "Cognito_dsrv_dev_eks_kibana_usersAuth_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "cognito-identity.amazonaws.com:aud"
      values   = ["eu-central-1:2486d1c0-b1a4-49e2-9056-875e351a44fe"]
    }

    condition {
      test     = "ForAnyValue:StringLike"
      variable = "cognito-identity.amazonaws.com:amr"
      values   = ["authenticated"]
    }

    principals {
      type        = "Federated"
      identifiers = ["cognito-identity.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ddexApiRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["apigateway.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ddexAtom-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "DeepSecurity-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["ff83ee8f-2a8d-4801-9b44-51d69a5a00a0"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::147995105371:root"]
    }
  }
}

data "aws_iam_policy_document" "DeepSecuritySetup-6c59585e7-LambdaExecutionRole-1O4LFC0JTG13B-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "delbs-delbs-ms01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "delbs-delbs-ms02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "delbs-delbs-ms03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-amazonEKSIngresscontrollerrole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-aws-config-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["config.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-conversion-role-trust-policy" {
  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:delivery-conversion-requestor",
        "system:serviceaccount:delivery-dev:delivery-conversion-completion-service",
        "system:serviceaccount:delivery-dev:delivery-conversion-handler"
      ]
    }
  }
}

data "aws_iam_policy_document" "deld-ddexws-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-ddexws-taskrole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:ddexws",
        "system:serviceaccount:delivery-stage:ddexws",
        "system:serviceaccount:delivery-uat:ddexws"
      ]
    }
  }
}


data "aws_iam_policy_document" "deld-deld-agentpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-cache01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-cache02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-ddexvalid01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-delpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-gitrun01-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:TagSession",
      "sts:AssumeRole",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:root"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "token.actions.githubusercontent.com:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringLike"
      variable = "token.actions.githubusercontent.com:sub"

      values = [
        "repo:SME-Media-Services/*",
        "repo:SME-Delivery-Services/*",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/token.actions.githubusercontent.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-mgsrv1a01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-mgsrv1b01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-mlib01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:aoma-media-library",
        "system:serviceaccount:delivery-dev:aoma-media-library-scheduler"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-orch02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-reports01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-scheduler02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-sftp01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-wfdash01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:kube-system:alb-ingress-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:delivery-dashboard-ui"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-zookeeper01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-zookeeper02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld-zookeeper03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-agentpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-cache01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-ddexvalid01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-delagent-app01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-delagent-pgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-delpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-dspcache01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-gitrun01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-mgsrv1a01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-mgsrv1b02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-mlibpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-reports01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-wfdash01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-zookeeper01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-zookeeper02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-deld2-zookeeper03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-agentapp01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-agentpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-amazonEKSIngresscontrollerrole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:kube-system:alb-ingress-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-cache01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-ddexvalid01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-delpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-docker02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-mgsrv1a01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-mgsrv1b02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-mlibpgbouncer01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-reports01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-wfdash01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-stage:delivery-dashboard-ui",
        "system:serviceaccount:delivery-uat:delivery-dashboard-ui"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-dashboard-ui"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-zookeeper01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dels2-zookeeper02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-dev-asset-requester-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:delivery-export-packager",
        "system:serviceaccount:delivery-dev:delivery-batch-handler",
        "system:serviceaccount:delivery-dev:delivery-s3-transfer-service",
        "system:serviceaccount:delivery-dev:delivery-s3-v2-transfer-service",
        "system:serviceaccount:delivery-dev:aoma-asset-requester",
        "system:serviceaccount:delivery-dev:delivery-packager",
        "system:serviceaccount:delivery-dev:delivery-dispatcher",
        "system:serviceaccount:delivery-stage:delivery-dispatcher",
        "system:serviceaccount:delivery-stage:delivery-packager",
        "system:serviceaccount:delivery-stage:delivery-batch-handler",
        "system:serviceaccount:delivery-dev:delivery-dashboard-ui",
      ]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/deld-EKS-worker-node-Role"]
    }
  }
}

data "aws_iam_policy_document" "deld-dsrv-dev-eks-ns-fargate-container-insights-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:fargate-container-insights:fargate-container-insights-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-dsrv-dev-eks-ns-delivery-dev-sa-aoma-master-export-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:aoma-master-export-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-dsrv-dev-eks-ns-delivery-dev-sony-ci-transfer-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:delivery-sony-ci-transfer-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-dsrv-stage-eks-ns-delivery-stage-sa-aoma-master-export-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:delivery-stage:aoma-master-export-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:aoma-master-export-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-sony-ci-transfer-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-sony-ci-transfer-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}


data "aws_iam_policy_document" "deld-ECS-Instance-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-stage:aoma-media-library",
        "system:serviceaccount:delivery-stage:aoma-media-library-scheduler"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:aoma-media-library-scheduler"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-ecs-mlib-stage-task-def-task-role-trust-policy" {
  statement {
    sid     = "TaskDefinitionPolicy"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "deld-ecsInstance-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-eks-pod-execution-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:eks:eu-central-1:${var.account_id}:fargateprofile/*/*"]
    }

    principals {
      type        = "Service"
      identifiers = ["eks-fargate-pods.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-EKS-Service-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-EKS-worker-node-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-sa-msk-mlib-dev"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::969009837416:role/aomad-sa-msk-mlib-stage"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:delivery-monitor-compiler",
        "system:serviceaccount:delivery-stage:delivery-monitor-compiler"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-github-actions-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
      "sts:TagSession",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:root"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "token.actions.githubusercontent.com:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringLike"
      variable = "token.actions.githubusercontent.com:sub"
      values   = ["repo:SME-Media-Services/*", "repo:SME-Delivery-Services/*", "repo:SME-databases/*"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/token.actions.githubusercontent.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-infosec-cwro-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/reed001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/npatel1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hegd001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/jais003",
      ]
    }
  }
}

data "aws_iam_policy_document" "deld-mgsrv-stage-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-portal-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-reports01",
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-portal01",
      ]
    }
  }
}

data "aws_iam_policy_document" "deld-prometheus-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-clshrd-prometheus"]
    }
  }
}


data "aws_iam_policy_document" "deld-service-discovery--lambda-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-service-discovery-instance-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::943540511943:root"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:delivery-status-publisher"]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:delivery-scheduler"]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:delivery-package-creator"]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "deld-service-discovery-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-stage-asset-requester-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-dispatcher"]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-export-packager"]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-stage:delivery-export-packager",
        "system:serviceaccount:delivery-stage:delivery-batch-handler",
        "system:serviceaccount:delivery-stage:delivery-s3-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-s3-v2-transfer-service",
        "system:serviceaccount:delivery-stage:aoma-asset-requester",
        "system:serviceaccount:delivery-stage:delivery-packager",
        "system:serviceaccount:delivery-uat:aoma-asset-requester",
        "system:serviceaccount:delivery-uat:delivery-dispatcher",
        "system:serviceaccount:delivery-uat:delivery-packager"
      ]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}


data "aws_iam_policy_document" "deld-trendmicro_esdomain_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-util-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-s3-v2-transfer-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:delivery-aspera-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-orchestration",
        "system:serviceaccount:delivery-stage:delivery-aspera-transfer-service",
        "system:serviceaccount:delivery-dev:delivery-orchestration",
        "system:serviceaccount:delivery-stage:delivery-s3-v2-transfer-service",
        "system:serviceaccount:delivery-dev:delivery-gcs-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-gcs-transfer-service",
        "system:serviceaccount:delivery-dev:delivery-azure-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-azure-transfer-service",
        "system:serviceaccount:delivery-dev:delivery-itms-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-itms-transfer-service",
        "system:serviceaccount:delivery-dev:delivery-sftp-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-sftp-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-scheduler",
        "system:serviceaccount:delivery-uat:delivery-itms-transfer-service",
        "system:serviceaccount:delivery-uat:delivery-orchestration",
        "system:serviceaccount:delivery-uat:delivery-s3-v2-transfer-service",
        "system:serviceaccount:delivery-stage:delivery-dashboard-ui",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}


data "aws_iam_policy_document" "deld-youtube-eks-developer-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbmonitor01"]
    }
  }
}

data "aws_iam_policy_document" "delivery-ecr-repo-cleanup-role-bduwjy3v-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "delivery-order-iam-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "delivery-package-archiver-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "delivery-package-archiver-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "delivery-records-purge-lambda-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:delivery-records-purge-service",
        "system:serviceaccount:delivery-stage:delivery-records-purge-service",
      ]
    }
  }
}

data "aws_iam_policy_document" "Delivery-RO-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/tang002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kosh001",
      ]
    }
  }
}



data "aws_iam_policy_document" "dels2-conversion-role-trust-policy" {
  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::104858398257:role/mcond-del-s3-source-target",
        "arn:aws:iam::943540511943:root",
      ]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-stage:delivery-conversion-requestor",
        "system:serviceaccount:delivery-stage:delivery-conversion-completion-service",
        "system:serviceaccount:delivery-uat:delivery-conversion-completion-service",
        "system:serviceaccount:delivery-uat:delivery-conversion-requestor",
        "system:serviceaccount:delivery-stage:delivery-conversion-handler"
      ]
    }
  }
}


data "aws_iam_policy_document" "dels2-ecs-scheduler-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-scheduler"]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "dels2-new-ecs-service-discovery-ECSServiceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "dels2-new-service-discovery-ECSInstanceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::943540511943:root"
      ]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-status-publisher"]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-stage:delivery-package-creator",
        "system:serviceaccount:delivery-uat:delivery-package-creator",
        "system:serviceaccount:delivery-uat:delivery-status-publisher"
      ]
    }
    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}



data "aws_iam_policy_document" "dels2-service-discovery-instance-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "dels2-service-discovery-service-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "des2-new-service-discovery-ECSInstanceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "DevAdmin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vsubram",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/chou030",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/t000001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sha0001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/kari020",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/maht001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/shar051",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/eswa003",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sdonipu",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bhag005",
      ]
    }
  }
}



data "aws_iam_policy_document" "dms-cloudwatch-logs-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["dms.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "dms-vpc-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["dms.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "dsrv-dev-eks-cluster-ns-delivery-dev-sa-ddex-exchange-svc-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-dev:ddex-exchange",
        "system:serviceaccount:delivery-dev:delivery-onix-packager"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }


}

data "aws_iam_policy_document" "dsrv-dev-eks-cluster-ns-delivery-dev-sa-del-svc-gateway-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:delivery-service-gateway"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "dsrv-stage-eks-cluster-ns-delivery-stage-sa-ddex-exchange-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:delivery-stage:ddex-exchange",
        "system:serviceaccount:delivery-stage:delivery-onix-packager"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

}

data "aws_iam_policy_document" "dsrv-stage-eks-cluster-ns-delivery-stage-sa-del-svc-gateway-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-service-gateway"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:delivery-service-gateway"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}



data "aws_iam_policy_document" "dsrv_dev_eks_lambda_elasticsearch-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "EC2Admin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ecs-service-discovery-ECSInstanceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ecs-service-discovery-ECSServiceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ecs-service-discovery-LambdaServiceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ecsInstanceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ecsServiceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ecsTask-KinesisAccess-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "email-notifier-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "ExternalAccess-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::023180329437:root"]
    }
  }
}

data "aws_iam_policy_document" "ExternalUserRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/peja001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sdonipu",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/shar051",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/nlovett",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mpadsal",
      ]
    }
  }
}



data "aws_iam_policy_document" "flowlogsRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "Service"

      identifiers = [
        "ec2.amazonaws.com",
        "vpc-flow-logs.amazonaws.com",
      ]
    }
  }
}



data "aws_iam_policy_document" "GSIRT_AWS_Monitoring_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:role/splunk_ec2_api_server_role"]
    }
  }
}

data "aws_iam_policy_document" "IAMReadOnly-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sdonipu",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/roraj01",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sama030",
      ]
    }
  }
}



data "aws_iam_policy_document" "Lambda-FullAccess-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::358364484590:root"]
    }
  }
}

data "aws_iam_policy_document" "lambda-rds-log-backup-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "lambda-sns-ebs-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "lambda_delivery_package_purge_execution-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lambda_elasticsearch_execution_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lamda-kinesis-exceution-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "logstash-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "logs_check-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "McEc2WinInstance-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "migrationhub-discovery-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["migrationhub.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "mlib-dev-ecs-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "OrchardRedshiftRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["redshift.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "pitch-app-track-loader-uat-lambda-function-role-8i3sfjea-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "PostgreSQL-Credentials-Rotation-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "PrismaCloudReadWriteRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["bb9886ad-2abb-4c41-9b97-0a508d5d53fa"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::188619942792:root"]
    }
  }
}

data "aws_iam_policy_document" "rds-monitoring-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["monitoring.rds.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gvamsik",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dwenger",
        "arn:aws:iam::358364484590:root",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sira001",
      ]
    }
  }
}

data "aws_iam_policy_document" "RDSAdmin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish008",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gvamsik",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dwenger",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vank001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sira001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pati021",
      ]
    }
  }
}

data "aws_iam_policy_document" "RDSProxyIAMRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "ReadOnlyExtern-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mpadsal",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/eswa003",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/na00001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dwenger",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/raj0002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mish004",
        "arn:aws:iam::943540511943:role/AnsibleDevCrossAccountAccess",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/shar051",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dewi002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/ashetga",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/chou030",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/v000001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hont002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sing009",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/agra003",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pdhodap",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/park007",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vank001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/liou001",
        "arn:aws:sts::943540511943:assumed-role/ReadOnlyInfoSec/i-0aed764d640aef5a2",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/bisw001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat",
        "arn:aws:iam::943540511943:role/ReadOnlyInfoSec",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/thom027",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/npatel1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sasi001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gvamsik",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/vsubram",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sira001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/cort004",
      ]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }
}


data "aws_iam_policy_document" "sme-aoma-delivery-dev-Evident-Service-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["4da3b5db-0231-4455-b71f-cdad7261720e"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::613698206329:root"]
    }
  }
}



data "aws_iam_policy_document" "sme-aoma-delivery-dev-waf-logging-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["${var.account_id}"]
    }

    principals {
      type        = "Service"
      identifiers = ["firehose.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "sme-pitch-user-uat-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "test-15june2018-1-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "test-role-a5iufsi2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "ytcd-eks-ingress-controller-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-west-2.amazonaws.com/id/BDA60C4104BFBA7C4558FC09AA70F128:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-west-2.amazonaws.com/id/BDA60C4104BFBA7C4558FC09AA70F128"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-west-2.amazonaws.com/id/8C6B0BFC903328E3B6C1C377732411D2:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-west-2.amazonaws.com/id/8C6B0BFC903328E3B6C1C377732411D2"]
    }
  }
}

data "aws_iam_policy_document" "ytcd-EKS-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "ytcs-EKS-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ytcs-ytclaims-eks-worker-NodeInstanceRole-FWF1WIG26X3K-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ecsTaskExecutionRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "mgsrv-dev_eks-dsrv-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:root"]
    }
  }
}

data "aws_iam_policy_document" "dsrv-dev-eks-cluster-ns-mediagate-dev-sa-mediagate-dev-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:mediagate-dev:mediagate-dev-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-dev:mediagate-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

}

data "aws_iam_policy_document" "AmazonEKS_EFS_CSI_DriverRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:kube-system:efs-csi-controller-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringLike"
      variable = "oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:kube-system:efs-csi-controller-sa"]
    }

    condition {
      test     = "StringLike"
      variable = "oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }
}

data "aws_iam_policy_document" "dsrv-stage-eks-cluster-mediagate-stage-service-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:mediagate-stage:mediagate-stage-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:delivery-stage:mediagate-service"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}


data "aws_iam_policy_document" "deld-dsrv-stage-eks-ns-fargate-container-insights-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values   = ["system:serviceaccount:fargate-container-insights:fargate-container-insights-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }
}

data "aws_iam_policy_document" "KubeCostFederatedRole-dsrv-dev-eks-cluster-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = [
        "system:serviceaccount:kubecost:kubecost-s3-access-sa",
        "system:serviceaccount:kube-system:ebs-csi-controller-sa",
        "system:serviceaccount:kube-system:ebs-csi-node-sa",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}


data "aws_iam_policy_document" "KubeCostFederatedRole-dsrv-stage-eks-cluster-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558:sub"
      values = [
        "system:serviceaccount:kubecost:kubecost-s3-access-sa",
        "system:serviceaccount:kube-system:ebs-csi-controller-sa",
        "system:serviceaccount:kube-system:ebs-csi-node-sa",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/305A3133270A1E494C8D0FCAE0890558"]
    }
  }
}


data "aws_iam_policy_document" "deld-cloudops-14959-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/call014",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/jmartin3",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat",
      ]
    }
  }
}

data "aws_iam_policy_document" "deld-mcon-s3-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "EKSFargatePodExecutionRole-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["eks-fargate-pods.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "KarpenterControllerRole-dsrv-dev-eks-cluster-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:TagSession",
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["pods.eks.amazonaws.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRoleWithWebIdentity"
    ]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:kube-system:karpenter"]
    }
  }
}

data "aws_iam_policy_document" "deld-watermarking-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values = ["system:serviceaccount:delivery-dev:delivery-watermarking-service",
        "system:serviceaccount:delivery-stage:delivery-watermarking-service"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::058029036333:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }

  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ecs-tasks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "deld-watermarking-delegate-role-trust-policy" {
  statement {
    effect = "Allow"

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/deld-watermarking-role"]
    }

    actions = ["sts:AssumeRole"]
  }
}

data "aws_iam_policy_document" "openobserve-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:sub"
      values   = ["system:serviceaccount:openobserve:openobserve"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/B8EFD5D6E4C2D7FDF71C1B39F692709B"]
    }
  }
}

data "aws_iam_policy_document" "delivery-dev-s3-replicator-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }
}