data "aws_iam_policy_document" "cf-templates-ih8itwzfhdak-us-east-1" {
}

data "aws_iam_policy_document" "deld-lambdas-state" {
  statement {
    effect = "Allow"
    actions = [
      "s3:GetObject",
      "s3:PutObject",
      "s3:ListBucket",
      "s3:GetBucketPolicy"
    ]
    resources = [
      "arn:aws:s3:::deld-lambdas-state",
      "arn:aws:s3:::deld-lambdas-state/*"
    ]
    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/deld-github-actions-role"]
    }
  }
}
data "aws_iam_policy_document" "sme-delivery-dev-aoma-upload" {

  statement {
    sid    = "Stmt1442503462286"
    effect = "Allow"

    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::sme-delivery-dev-aoma-upload",
      "arn:aws:s3:::sme-delivery-dev-aoma-upload/*"
    ]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::058029036333:role/deld-service-discovery-instance-role",
        "arn:aws:iam::058029036333:role/deld-dsrv-dev-eks-ns-delivery-dev-sony-ci-transfer-role",
        "arn:aws:iam::058029036333:role/deld-conversion-role",
        "arn:aws:iam::058029036333:role/deld-deld-wfdash01",
        "arn:aws:iam::969009837416:role/aomad-eks-ameba-dev-ns-aoma3-dev-sa-aoma-export-service-role",
        "arn:aws:iam::058029036333:role/delivery-package-archiver-dev",
        "arn:aws:iam::058029036333:role/deld-dev-asset-requester"
      ]
    }
  }
}


data "aws_iam_policy_document" "del-d-vpc-flow-logs" {

  statement {
    sid       = "Stmt1335892150622"
    effect    = "Allow"
    resources = ["arn:aws:s3:::del-d-vpc-flow-logs"]

    actions = [
      "s3:GetBucketPolicy",
      "s3:GetBucketAcl",
    ]

    principals {
      type        = "Service"
      identifiers = ["billingreports.amazonaws.com"]
    }
  }

  statement {
    sid       = "Stmt1335892526596"
    effect    = "Allow"
    resources = ["arn:aws:s3:::del-d-vpc-flow-logs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "Service"
      identifiers = ["billingreports.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::del-d-vpc-flow-logs/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "del-s2-vpc-flow-logs" {

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::del-s2-vpc-flow-logs/AWSLogs/058029036333/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::del-s2-vpc-flow-logs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::del-s2-vpc-flow-logs/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "deld-frankfurt-alb-logs" {

  statement {
    sid       = "AWSConsoleStmt-1524479950090"
    effect    = "Allow"
    resources = ["arn:aws:s3:::deld-frankfurt-alb-logs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::054676820928:root"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::deld-frankfurt-alb-logs/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::deld-frankfurt-alb-logs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::deld-frankfurt-alb-logs/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "deld-waf-logs" {
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-awsconfig" {

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-awsconfig/*"]
    actions   = ["s3:GetObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-awsconfig"]
    actions   = ["s3:ListBucket"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-awsconfig/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-db-team" {

  statement {
    sid    = "Stmt1626923250080"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-aoma-delivery-dev-db-team/*",
      "arn:aws:s3:::sme-aoma-delivery-dev-db-team",
    ]

    actions = ["s3:*"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/RDSAdmin"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-db-team/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-eu-central-1-logs" {

  statement {
    sid       = "Stmt1540497187969"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-eu-central-1-logs"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "Stmt1549643721419"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-eu-central-1-logs/*"]
    actions   = ["s3:*"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::054676820928:root"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1640093283031"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-eu-central-1-logs/*"]

    actions = [
      "s3:PutObjectAcl",
      "s3:PutObject",
    ]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-euc1-s3-inventory" {

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["058029036333"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-euc1-s3-inventory/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-euw2-s3-inventory" {
  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-euw2-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["058029036333"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-euw2-s3-inventory/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1687762367538"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-euw2-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-rds-backups" {

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-rds-backups/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "ExportPolicy"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-aoma-delivery-dev-rds-backups/*",
      "arn:aws:s3:::sme-aoma-delivery-dev-rds-backups",
    ]

    actions = [
      "s3:PutObject*",
      "s3:ListBucket",
      "s3:GetObject*",
      "s3:GetBucketLocation",
      "s3:DeleteObject*",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/aoma-RDS_snapshot_lambda-role"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-ssm-out" {
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-us-east-1-logs" {

  statement {
    sid       = "Stmt1540497740947"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-us-east-1-logs"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1762497580484"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-us-east-1-logs/*"]

    actions = [
      "s3:PutObject"
    ]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["058029036333"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-us-west-1-logs" {

  statement {
    sid       = "Stmt1540497740947"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-us-west-1-logs"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-us-west-2-logs" {

  statement {
    sid       = "Stmt1540497686588"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-us-west-2-logs"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-use1-s3-inventory" {

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["058029036333"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-use1-s3-inventory/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-usw1-s3-inventory" {

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-usw1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["058029036333"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-usw1-s3-inventory/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-aoma-delivery-dev-usw2-s3-inventory" {

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-usw2-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["058029036333"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-aoma-delivery-dev-usw2-s3-inventory/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-deld-redshift-euc1" {

  statement {
    sid       = "Stmt1376526643067"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-deld-redshift-euc1/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::053454850223:user/logs"]
    }
  }

  statement {
    sid       = "Stmt137652664067"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-deld-redshift-euc1"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::053454850223:user/logs"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-deld-redshift-euc1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-delivery-dev-shelf" {

  statement {
    sid    = "Stmt1447436913699"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-delivery-dev-shelf/*",
      "arn:aws:s3:::sme-delivery-dev-shelf",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::058029036333:role/deld-mcon-s3-role",
        "arn:aws:iam::058029036333:role/deld-dev-asset-requester",
        "arn:aws:iam::104858398257:role/mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-ccc-role"
      ]
    }
  }
}



data "aws_iam_policy_document" "sme-delivery-dev-target" {

  statement {
    sid    = "Stmt1442503462285"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-delivery-dev-target/*",
      "arn:aws:s3:::sme-delivery-dev-target",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::104858398257:role/service-role/AWSBatchServiceRole",
        "arn:aws:iam::058029036333:role/deld-mcon-s3-role",
        "arn:aws:iam::058029036333:role/deld-deld-wfdash01",
        "arn:aws:iam::104858398257:role/ecsInstanceRole",
        "arn:aws:iam::104858398257:role/mcond-del-s3-source-target",
        "arn:aws:iam::104858398257:role/ecsTaskExecutionRole",
        "arn:aws:iam::104858398257:user/mcond-vantage-delivery-dev-s3-access",
        "arn:aws:iam::023180329437:role/delivery-bulk-operation-role",
        "arn:aws:iam::058029036333:role/bulk-operations-consumer",
        "arn:aws:iam::058029036333:role/delivery-package-archiver-dev",
        "arn:aws:iam::058029036333:role/deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role",
        "arn:aws:iam::058029036333:role/deld-dsrv-dev-eks-ns-delivery-dev-sony-ci-transfer-role",
        "arn:aws:iam::104858398257:role/mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-ccc-role"
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-delivery-dev-target/*"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-delivery-scratch" {

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-delivery-scratch"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["logs.eu-central-1.amazonaws.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-delivery-scratch/asdfghjkl/*",
      "arn:aws:s3:::sme-delivery-scratch/*",
    ]

    actions = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["logs.eu-central-1.amazonaws.com"]
    }
  }

  statement {
    sid       = "SecureTransport"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-delivery-scratch/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-delivery-uat-shelf" {

  statement {
    sid       = "Stmt1448314906532"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-delivery-uat-shelf/*"]
    actions   = ["s3:GetObject"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ENPSFG3F25WGG",
        "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E2MQPACYHR0SFX",
      ]
    }
  }

  statement {
    sid    = "Stmt1448315061431"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-delivery-uat-shelf/*",
      "arn:aws:s3:::sme-delivery-uat-shelf",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::023180329437:role/delp-media-conversion-aws-stage-role",
        "arn:aws:iam::104858398257:role/mcond-del-s3-source-target",
        "arn:aws:iam::058029036333:role/deld-dels2-mgsrv1b02",
        "arn:aws:iam::104858398257:role/service-role/AWSBatchServiceRole",
        "arn:aws:iam::058029036333:role/deld-stage-asset-requester",
        "arn:aws:iam::104858398257:role/mcons-del-s3-source-target",
        "arn:aws:iam::104858398257:role/ecsTaskExecutionRole",
        "arn:aws:iam::058029036333:role/deld-util",
        "arn:aws:iam::104858398257:role/ecsInstanceRole",
        "arn:aws:iam::023180329437:user/delp-media-conversion-aws-stage",
        "arn:aws:iam::104858398257:user/mcond-vantage-delivery-stage-s3-access",
        "arn:aws:iam::058029036333:role/delivery-package-archiver-stage",
        "arn:aws:iam::058029036333:role/dels2-conversion-role",
        "arn:aws:iam::058029036333:role/deld-dels2-wfdash01",
        "arn:aws:iam::104858398257:role/mcond-del-dev2-ns-mc-del-stage-sa-sme-mc-ccc-role"
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-delivery-uat-shelf/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-delivery-uat-target" {

  statement {
    sid    = "Stmt1442503462286"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-delivery-uat-target/*",
      "arn:aws:s3:::sme-delivery-uat-target",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::058029036333:role/delivery-package-archiver-stage",
        "arn:aws:iam::104858398257:user/mcond-vantage-delivery-stage-s3-access",
        "arn:aws:iam::023180329437:role/delp-media-conversion-aws-stage-role",
        "arn:aws:iam::058029036333:role/deld-stage-asset-requester",
        "arn:aws:iam::104858398257:role/ecsInstanceRole",
        "arn:aws:iam::058029036333:role/bulk-operations-consumer",
        "arn:aws:iam::058029036333:role/dels2-new-service-discovery-ECSInstanceRole",
        "arn:aws:iam::058029036333:role/deld-ddexws-taskrole",
        "arn:aws:iam::104858398257:role/service-role/AWSBatchServiceRole",
        "arn:aws:iam::058029036333:role/deld-dsrv-dev-eks-ns-delivery-dev-sony-ci-transfer-role",
        "arn:aws:iam::023180329437:user/delp-scops",
        "arn:aws:iam::104858398257:role/mcons-del-s3-source-target",
        "arn:aws:iam::104858398257:role/ecsTaskExecutionRole",
        "arn:aws:iam::058029036333:role/deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role",
        "arn:aws:iam::058029036333:role/deld-util",
        "arn:aws:iam::058029036333:role/dels2-conversion-role",
        "arn:aws:iam::023180329437:user/delp-media-conversion-aws-stage",
        "arn:aws:iam::058029036333:role/deld-dels2-wfdash01",
        "arn:aws:iam::058029036333:role/ExternalUserRole",
        "arn:aws:iam::104858398257:role/mcond-del-dev2-ns-mc-del-stage-sa-sme-mc-ccc-role",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-delivery-uat-target/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-pitch-content-dropoff-uat" {

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-pitch-content-dropoff-uat/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme_netezza_data" {
  statement {
    sid    = "Access to sme_netezza_data"
    effect = "Allow"

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::058029036333:role/test-15june2018-1"]
    }

    actions = [
      "s3:*"
    ]

    resources = [
      "arn:aws:s3:::sme.netezza.data/*",
      "arn:aws:s3:::sme.netezza.data"
    ]
  }
}

data "aws_iam_policy_document" "sme-delivery-uat-aoma-upload" {

  statement {
    sid    = "Stmt1442503462286"
    effect = "Allow"

    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::sme-delivery-uat-aoma-upload/*",
      "arn:aws:s3:::sme-delivery-uat-aoma-upload"
    ]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::058029036333:role/deld-dels2-wfdash01",
        "arn:aws:iam::969009837416:role/ameba-dev-ns-aoma3-stage-sa-aoma-export-service-role",
        "arn:aws:iam::058029036333:role/deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role",
        "arn:aws:iam::058029036333:role/dels2-conversion-role",
        "arn:aws:iam::058029036333:role/bulk-operations-consumer",
        "arn:aws:iam::058029036333:role/deld-util",
        "arn:aws:iam::058029036333:role/delivery-package-archiver-stage",
        "arn:aws:iam::058029036333:role/dels2-new-service-discovery-ECSInstanceRole"
      ]
    }
  }

  statement {
    sid    = ""
    effect = "Deny"

    actions = ["*"]
    resources = [
      "arn:aws:s3:::sme-delivery-uat-aoma-upload/*"
    ]

    principals {
      type        = "*"
      identifiers = ["*"]
    }

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }
  }
}

data "aws_iam_policy_document" "sme-delivery-uat-user-upload" {
  statement {
    sid    = "Stmt1442503462286"
    effect = "Allow"

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::058029036333:role/dels2-new-service-discovery-ECSInstanceRole",
        "arn:aws:iam::058029036333:role/bulk-operations-consumer",
        "arn:aws:iam::058029036333:role/dels2-conversion-role",
        "arn:aws:iam::058029036333:role/delivery-package-archiver-stage",
        "arn:aws:iam::058029036333:role/deld-util",
        "arn:aws:iam::058029036333:role/deld-dels2-wfdash01",
        "arn:aws:iam::058029036333:role/deld-dsrv-stage-eks-ns-delivery-stage-sony-ci-transfer-role"
      ]
    }

    actions = ["s3:*"]
    resources = [
      "arn:aws:s3:::sme-delivery-uat-user-upload/*",
      "arn:aws:s3:::sme-delivery-uat-user-upload"
    ]
  }
}

data "aws_iam_policy_document" "sme-deld-watermarking-us-east-1" {
  statement {
    sid    = "denyInsecureTransport"
    effect = "Deny"

    actions = ["*"]
    resources = [
      "arn:aws:s3:::sme-deld-watermarking-us-east-1/*",
    ]

    principals {
      type        = "*"
      identifiers = ["*"]
    }

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }
  }

  statement {
    sid    = "Stmt1442503462286"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-deld-watermarking-us-east-1",
      "arn:aws:s3:::sme-deld-watermarking-us-east-1/*",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::058029036333:role/deld-watermarking-delegate-role",
        "arn:aws:iam::058029036333:role/deld-watermarking-role",
        "arn:aws:iam::104858398257:role/mcond-del-dev2-ns-mc-del-stage-sa-sme-mc-ccc-role",
        "arn:aws:iam::104858398257:role/ecsInstanceRole",
      ]
    }
  }
}