resource "aws_iam_policy" "sme-gen-custom" {
  description = "for sme-gen"
  name        = "sme-gen-custom"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-gen-custom.json
}

resource "aws_iam_policy" "delp2-service-discovery-ECSInstance-DynamoDB" {
  description = "delp2-service-discovery-ECSInstance DynamoDB access"
  name        = "delp2-service-discovery-ECSInstance-DynamoDB"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp2-service-discovery-ECSInstance-DynamoDB.json
}

resource "aws_iam_policy" "SES_send_email_only" {
  description = "Policy that grants access to users to send emails only using SES API"
  name        = "SES_send_email_only"
  path        = var.path
  policy      = data.aws_iam_policy_document.SES_send_email_only.json
}
resource "aws_iam_policy" "grpsd_dudi001_secretsmanager_read" {
  name        = "grpsd-dudi001-secretsmanager-read"
  description = "Allows grpsd-dudi001 to read rdx/usm-client-secret-dev from Secrets Manager"
  policy      = data.aws_iam_policy_document.grpsd_dudi001_secretsmanager_read.json
}

resource "aws_iam_policy" "delivery-package-archiver-policy" {
  description = "policy for delivery package archiver lambda function "
  name        = "delivery-package-archiver-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delivery-package-archiver-policy.json
}
resource "aws_iam_policy" "sme-logs" {
  description = "policy for delivery package archiver lambda function "
  name        = "sme-logs"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-logs-policy.json
}

resource "aws_iam_policy" "delp-watermarking-role-policy" {
  description = "delp-watermarking-role-policy"
  name        = "delp-watermarking-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-watermarking-role-policy.json
}

resource "aws_iam_policy" "warner-ada-s3" {
  description = "Granting permissions to s3 path"
  name        = "warner-ada-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.warner-ada-s3.json
}
resource "aws_iam_policy" "delp2-delivery-util-ec2-policy" {
  description = "EC2 policy to attach to instances in ecs-delp2-delivery-util ECS cluster"
  name        = "delp2-delivery-util-ec2-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp2-delivery-util-ec2-policy.json
}

resource "aws_iam_policy" "universal-email-notifier-policy" {
  description = "universal-email-notifier-role policy"
  name        = "universal-email-notifier-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.universal-email-notifier-policy.json
}

resource "aws_iam_policy" "prod-packager-policy" {
  name   = "prod-packager-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.prod-packager-policy.json
}

resource "aws_iam_policy" "policy-gen-scops" {
  name   = "policy-gen-scops"
  path   = var.path
  policy = data.aws_iam_policy_document.policy-gen-scops.json
}

resource "aws_iam_policy" "delivery_package_purge_execution_policy" {
  description = "delivery_package_purge_execution_policy for sample drop purge lambda function"
  name        = "delivery_package_purge_execution_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delivery_package_purge_execution_policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "Deny Full Control of IAM"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "delivery-order-lambda-function-execution-policy" {
  description = "delivery-order-lambda-function-execution-policy"
  name        = "delivery-order-lambda-function-execution-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delivery-order-lambda-function-execution-policy.json
}

resource "aws_iam_policy" "S3-delivery-target" {
  name   = "S3-delivery-target"
  path   = var.path
  policy = data.aws_iam_policy_document.S3-delivery-target.json
}

resource "aws_iam_policy" "ScOps-S3" {
  name   = "ScOps-S3"
  path   = var.path
  policy = data.aws_iam_policy_document.ScOps-S3.json
}

resource "aws_iam_policy" "ecs_create_service" {
  description = "Permission to create services in ecr"
  name        = "ecs_create_service"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecs_create_service.json
}

resource "aws_iam_policy" "tagging_policy" {
  description = "for sme-gen"
  name        = "tagging_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.tagging_policy.json
}

resource "aws_iam_policy" "ECR-Access" {
  description = "ECR-Access to user"
  name        = "ECR-Access"
  path        = var.path
  policy      = data.aws_iam_policy_document.ECR-Access.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "AthenaRO" {
  name   = "AthenaRO"
  path   = var.path
  policy = data.aws_iam_policy_document.AthenaRO.json
}

resource "aws_iam_policy" "AWS_ECR_Access" {
  name   = "AWS_ECR_Access"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_ECR_Access.json
}

resource "aws_iam_policy" "sme-delivery-test-target" {
  description = "sme-delivery-test-target"
  name        = "sme-delivery-test-target"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delivery-test-target.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540805881069" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540805881069"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540805881069.json
}

resource "aws_iam_policy" "oneClick_lambda_basic_execution_1542093202278" {
  name   = "oneClick_lambda_basic_execution_1542093202278"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1542093202278.json
}

resource "aws_iam_policy" "delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-policy" {
  description = "delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-policy"
  name        = "delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-dsrv-prod-eks-ns-delivery-prod-sony-ci-transfer-policy.json
}

resource "aws_iam_policy" "iam-pass-policy" {
  description = "iam-pass-policy"
  name        = "iam-pass-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.iam-pass-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540806989651" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540806989651"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540806989651.json
}

resource "aws_iam_policy" "mlib-conversion-policy" {
  description = "mlib-conversion-policy"
  name        = "mlib-conversion-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mlib-conversion-policy.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540805922309" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540805922309"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540805922309.json
}

resource "aws_iam_policy" "For_RDS_Enhanced_Monitoring" {
  name   = "For_RDS_Enhanced_Monitoring"
  path   = var.path
  policy = data.aws_iam_policy_document.For_RDS_Enhanced_Monitoring.json
}

resource "aws_iam_policy" "delivery-bulk-operation-policy" {
  description = "Policy for delivery-bulk-operation-role"
  name        = "delivery-bulk-operation-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delivery-bulk-operation-policy.json
}

resource "aws_iam_policy" "delp-eks-dsrv-prod-eks-cluster-ns-delivery-prod-sa-aoma-master-export-service-policy" {
  description = "delp-eks-dsrv-prod-eks-cluster-ns-delivery-prod-sa-aoma-master-export-service-policy"
  name        = "delp-eks-dsrv-prod-eks-cluster-ns-delivery-prod-sa-aoma-master-export-service-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-eks-dsrv-prod-eks-cluster-ns-delivery-prod-sa-aoma-master-export-service-policy.json
}

resource "aws_iam_policy" "sme-delivery-stage-bb-target" {
  description = "sme-delivery-stage-bb-target"
  name        = "sme-delivery-stage-bb-target"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delivery-stage-bb-target.json
}

resource "aws_iam_policy" "delp-aws-config-policy" {
  description = "delp-aws-config-policy"
  name        = "delp-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-aws-config-policy.json
}

resource "aws_iam_policy" "s3-sme-conversion-shelf" {
  name   = "s3-sme-conversion-shelf"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-sme-conversion-shelf.json
}

resource "aws_iam_policy" "mlib-prod-ecs-kinesis-stream-policy" {
  description = "Policy to access Email kinesis stream"
  name        = "mlib-prod-ecs-kinesis-stream-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mlib-prod-ecs-kinesis-stream-policy.json
}

resource "aws_iam_policy" "sme-media-production-03302017" {
  description = "sme-media-production-03302017"
  name        = "sme-media-production-03302017"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-media-production-03302017.json
}

resource "aws_iam_policy" "S3-Athena-Full-Access" {
  name   = "S3-Athena-Full-Access"
  path   = var.path
  policy = data.aws_iam_policy_document.S3-Athena-Full-Access.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "sme-netezza-delivery-01" {
  description = "sme-netezza-delivery-01"
  name        = "sme-netezza-delivery-01"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-netezza-delivery-01.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540806938711" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540806938711"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540806938711.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540806472333" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540806472333"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540806472333.json
}

resource "aws_iam_policy" "delp-ecs-mlib-prod-task-def-task-policy" {
  description = "Policy used by the ECS task mlib-prod-task-def in mlib-prod-ecs"
  name        = "delp-ecs-mlib-prod-task-def-task-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-ecs-mlib-prod-task-def-task-policy.json
}

resource "aws_iam_policy" "sme-delivery-stage-source-s3-access" {
  description = "sme-delivery-stage-source-s3-access"
  name        = "sme-delivery-stage-source-s3-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delivery-stage-source-s3-access.json
}

resource "aws_iam_policy" "sme-aoma-delivery-prod-waf-logging-policy" {
  description = "sme-aoma-delivery-prod-waf-logging-policy"
  name        = "sme-aoma-delivery-prod-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-aoma-delivery-prod-waf-logging-policy.json
}

resource "aws_iam_policy" "partner-dropoff-bucket-policy" {
  description = "partner-dropoff-bucket-policy"
  name        = "partner-dropoff-bucket-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.partner-dropoff-bucket-policy.json
}

resource "aws_iam_policy" "partner-dropoff-bucket-policy-extended" {
  description = "partner-dropoff-bucket-policy-extended"
  name        = "partner-dropoff-bucket-policy-extended"
  path        = var.path
  policy      = data.aws_iam_policy_document.partner-dropoff-bucket-policy-extended.json
}

resource "aws_iam_policy" "mlib-prod-ecs-s3-policy" {
  description = "Policy to access sme-origin-medialib bucket"
  name        = "mlib-prod-ecs-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mlib-prod-ecs-s3-policy.json
}

resource "aws_iam_policy" "sme-delivery-scheduler-role-policy" {
  description = "sme-delivery-scheduler-role-policy"
  name        = "sme-delivery-scheduler-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delivery-scheduler-role-policy.json
}

resource "aws_iam_policy" "secret_manager_access_policy" {
  description = "Policy for secret_manager_access"
  name        = "secret_manager_access_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.secret_manager_access_policy.json
}

resource "aws_iam_policy" "DeepSecurity" {
  description = "for TMDS"
  name        = "DeepSecurity"
  path        = var.path
  policy      = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "RDSProxyIAMpolicy" {
  description = "RDSProxyIAMpolicy"
  name        = "RDSProxyIAMpolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSProxyIAMpolicy.json
}

resource "aws_iam_policy" "systems_manager_parameters" {
  description = "systems_manager_parameters"
  name        = "systems_manager_parameters"
  path        = var.path
  policy      = data.aws_iam_policy_document.systems_manager_parameters.json
}

resource "aws_iam_policy" "ELB_Access" {
  name   = "ELB_Access"
  path   = var.path
  policy = data.aws_iam_policy_document.ELB_Access.json
}

resource "aws_iam_policy" "delp2-ecs-service-discovery-LambdaServiceRole" {
  name   = "delp2-ecs-service-discovery-LambdaServiceRole"
  path   = var.path
  policy = data.aws_iam_policy_document.delp2-ecs-service-discovery-LambdaServiceRole.json
}

resource "aws_iam_policy" "AzureDeliveryQ-sqs-policy" {
  description = "AzureDeliveryQ-sqs-policy"
  name        = "AzureDeliveryQ-sqs-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AzureDeliveryQ-sqs-policy.json
}

resource "aws_iam_policy" "sme-amps-rw" {
  name   = "sme-amps-rw"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-amps-rw.json
}

resource "aws_iam_policy" "policygen-media-conversion-aws-prod-201509011315" {
  name   = "policygen-media-conversion-aws-prod-201509011315"
  path   = var.path
  policy = data.aws_iam_policy_document.policygen-media-conversion-aws-prod-201509011315.json
}

resource "aws_iam_policy" "delp-portal-policy" {
  description = "delp-portal-policy"
  name        = "delp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-portal-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540805758929" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540805758929"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540805758929.json
}

resource "aws_iam_policy" "mlib-prod-ecs-secretmanager-policy" {
  description = "ECS secret manager policy "
  name        = "mlib-prod-ecs-secretmanager-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mlib-prod-ecs-secretmanager-policy.json
}

resource "aws_iam_policy" "ALBIngressControllerIAMPolicy" {
  name   = "ALBIngressControllerIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.ALBIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "kinesis-statusupdatestream" {
  name   = "kinesis-statusupdatestream"
  path   = var.path
  policy = data.aws_iam_policy_document.kinesis-statusupdatestream.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-20b39b37-313a-446f-9d00-0dbef3901a76" {
  name   = "AWSLambdaBasicExecutionRole-20b39b37-313a-446f-9d00-0dbef3901a76"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-20b39b37-313a-446f-9d00-0dbef3901a76.json
}

resource "aws_iam_policy" "policy-ddexws-role-25mar2017" {
  description = "policy-ddexws-role-25mar2017"
  name        = "policy-ddexws-role-25mar2017"
  path        = var.path
  policy      = data.aws_iam_policy_document.policy-ddexws-role-25mar2017.json
}

resource "aws_iam_policy" "dsrv-prod-eks-cluster-ns-delivery-prod-sa-del-svc-gateway" {
  description = "Policy used by the EKS app  del-svc-gateway in delivery-prod namespace in dsrv-prod-eks-cluster"
  name        = "dsrv-prod-eks-cluster-ns-delivery-prod-sa-del-svc-gateway"
  path        = var.path
  policy      = data.aws_iam_policy_document.dsrv-prod-eks-cluster-ns-delivery-prod-sa-del-svc-gateway.json
}

resource "aws_iam_policy" "promo-prod-s3-star-1" {
  name   = "promo-prod-s3-star-1"
  path   = var.path
  policy = data.aws_iam_policy_document.promo-prod-s3-star-1.json
}

resource "aws_iam_policy" "promo-dev-campaigns-distribution" {
  name   = "promo-dev-campaigns-distribution"
  path   = var.path
  policy = data.aws_iam_policy_document.promo-dev-campaigns-distribution.json
}

resource "aws_iam_policy" "eks-fargate-logging-policy" {
  name   = "eks-fargate-logging-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.eks-fargate-logging-policy.json
}

resource "aws_iam_policy" "delp-sqs" {
  name   = "delp-sqs"
  path   = var.path
  policy = data.aws_iam_policy_document.delp-sqs.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "media-conversion-s3-stage-access" {
  description = "media-conversion-s3-stage-access"
  name        = "media-conversion-s3-stage-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.media-conversion-s3-stage-access.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503402361310" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503402361310"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503402361310.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-e1f9ab51-da25-409a-8807-e6ea0a256547" {
  name   = "AWSLambdaBasicExecutionRole-e1f9ab51-da25-409a-8807-e6ea0a256547"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-e1f9ab51-da25-409a-8807-e6ea0a256547.json
}

resource "aws_iam_policy" "delp-prod-wfdash" {
  description = "Policy for wfdash"
  name        = "delp-prod-wfdash"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-prod-wfdash.json
}

resource "aws_iam_policy" "sme-amp-rw" {
  name   = "sme-amp-rw"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-amp-rw.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503402382534" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503402382534"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503402382534.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-35ffda93-8e0f-4535-b500-ccad53c94c7a" {
  name   = "AWSLambdaBasicExecutionRole-35ffda93-8e0f-4535-b500-ccad53c94c7a"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-35ffda93-8e0f-4535-b500-ccad53c94c7a.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "sme-content-protection" {
  description = "sme-content-protection"
  name        = "sme-content-protection"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-content-protection.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1448212171727" {
  name   = "oneClick_flowlogsRole_1448212171727"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1448212171727.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540806198579" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540806198579"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540806198579.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1447447555661" {
  name   = "oneClick_flowlogsRole_1447447555661"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1447447555661.json
}

resource "aws_iam_policy" "media-conversion-aws-prod" {
  description = "media-conversion-aws-prod"
  name        = "media-conversion-aws-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.media-conversion-aws-prod.json
}

resource "aws_iam_policy" "MasterAdmin" {
  description = "CLOUDSD-2151"
  name        = "MasterAdmin"
  path        = var.path
  policy      = data.aws_iam_policy_document.MasterAdmin.json
}

resource "aws_iam_policy" "MasterAdmin-2" {
  description = "CLOUDSD-2151"
  name        = "MasterAdmin-2"
  path        = var.path
  policy      = data.aws_iam_policy_document.MasterAdmin-2.json
}

resource "aws_iam_policy" "MasterAdmin-3" {
  description = "CLOUDSD-2151"
  name        = "MasterAdmin-3"
  path        = var.path
  policy      = data.aws_iam_policy_document.MasterAdmin-3.json
}

resource "aws_iam_policy" "AWSGlueServiceRole-waf" {
  description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!"
  name        = "AWSGlueServiceRole-waf"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSGlueServiceRole-waf.json
}

resource "aws_iam_policy" "RDS_Snapshots_Export_To_S3_lambda" {
  name   = "RDS_Snapshots_Export_To_S3_lambda"
  path   = var.path
  policy = data.aws_iam_policy_document.RDS_Snapshots_Export_To_S3_lambda.json
}

resource "aws_iam_policy" "dsrv-prod-eks-cluster-ns-delivery-prod-sa-ddex-exchange-policy" {
  description = "Policy used by the EKS app  ddex-exchange in delivery-prod namespace in dsrv-prod-eks-cluster"
  name        = "dsrv-prod-eks-cluster-ns-delivery-prod-sa-ddex-exchange-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.dsrv-prod-eks-cluster-ns-delivery-prod-sa-ddex-exchange-policy.json
}


resource "aws_iam_policy" "AWSGlueServiceRole-waf-eu-west-2" {
  description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!"
  name        = "AWSGlueServiceRole-waf-eu-west-2"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSGlueServiceRole-waf-eu-west-2.json
}

resource "aws_iam_policy" "mlib-prod-ecs-cloudwatch-policy" {
  description = "Policy to access cloudwatch logs"
  name        = "mlib-prod-ecs-cloudwatch-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mlib-prod-ecs-cloudwatch-policy.json
}

resource "aws_iam_policy" "ast-srv-bulk-ingest-lambda-policy" {
  description = "ast-srv-bulk-ingest-lambda-policy"
  name        = "ast-srv-bulk-ingest-lambda-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ast-srv-bulk-ingest-lambda-policy.json
}

resource "aws_iam_policy" "ELB_register_target" {
  name   = "ELB_register_target"
  path   = var.path
  policy = data.aws_iam_policy_document.ELB_register_target.json
}

resource "aws_iam_policy" "conversion-service-role-inline-policy" {
  name   = "conversion-service-role-inline-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.conversion-service-role-inline-policy.json
}

resource "aws_iam_policy" "delp2-reports01" {
  name   = "delp2-reports01"
  path   = var.path
  policy = data.aws_iam_policy_document.delp2-reports01.json
}

resource "aws_iam_policy" "eom-p-api-execute" {
  description = "eom-order-api-gateway-user"
  name        = "eom-p-api-execute"
  path        = var.path
  policy      = data.aws_iam_policy_document.eom-p-api-execute.json
}

resource "aws_iam_policy" "sme-delivery-target" {
  description = "sme-delivery-target"
  name        = "sme-delivery-target"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delivery-target.json
}

resource "aws_iam_policy" "delivery-records-purge-lambda" {
  name   = "delivery-records-purge-lambda"
  path   = var.path
  policy = data.aws_iam_policy_document.delivery-records-purge-lambda.json
}

resource "aws_iam_policy" "sme-delivery-dev-source-policy" {
  description = "Policy for read and write access on sme-delivery-dev-source bucket."
  name        = "sme-delivery-dev-source-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delivery-dev-source-policy.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-4b27a209-85d2-4ce5-ac84-f1af015362b5" {
  name   = "AWSLambdaBasicExecutionRole-4b27a209-85d2-4ce5-ac84-f1af015362b5"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-4b27a209-85d2-4ce5-ac84-f1af015362b5.json
}

resource "aws_iam_policy" "aoma-RDS_snapshot_lambda-policy" {
  name   = "aoma-RDS_snapshot_lambda-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aoma-RDS_snapshot_lambda-policy.json
}

resource "aws_iam_policy" "aws-lambda-execution-policy" {
  name   = "aws-lambda-execution-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aws-lambda-execution-policy.json
}

resource "aws_iam_policy" "delivery-package-archiver-s3policy" {
  description = "delivery-package-archiver-s3policy "
  name        = "delivery-package-archiver-s3policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delivery-package-archiver-s3policy.json
}

resource "aws_iam_policy" "ECS-Policy" {
  name   = "ECS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ECS-Policy.json
}

resource "aws_iam_policy" "policygen-media-conversion-default-201406091300" {
  name   = "policygen-media-conversion-default-201406091300"
  path   = var.path
  policy = data.aws_iam_policy_document.policygen-media-conversion-default-201406091300.json
}

resource "aws_iam_policy" "media-conversion-S3-stage-shelf-access" {
  description = "media-conversion-S3-stage-shelf-access"
  name        = "media-conversion-S3-stage-shelf-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.media-conversion-S3-stage-shelf-access.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-19d3b7c0-40d2-4401-ae91-bab58c714de9" {
  name   = "AWSLambdaBasicExecutionRole-19d3b7c0-40d2-4401-ae91-bab58c714de9"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-19d3b7c0-40d2-4401-ae91-bab58c714de9.json
}

resource "aws_iam_policy" "eks-fargate-logging-secret-access-policy" {
  description = "eks-fargate-logging-secret-access-policy"
  name        = "eks-fargate-logging-secret-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.eks-fargate-logging-secret-access-policy.json
}

resource "aws_iam_policy" "policygen-media-conversion-aws-stage-201511191654" {
  name   = "policygen-media-conversion-aws-stage-201511191654"
  path   = var.path
  policy = data.aws_iam_policy_document.policygen-media-conversion-aws-stage-201511191654.json
}

resource "aws_iam_policy" "sme-pitch-user-role" {
  description = "sme-pitch-user-role"
  name        = "sme-pitch-user-role"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-pitch-user-role.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-f81e9d49-ce96-4c89-ab74-3925858440ff" {
  name   = "AWSLambdaBasicExecutionRole-f81e9d49-ce96-4c89-ab74-3925858440ff"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-f81e9d49-ce96-4c89-ab74-3925858440ff.json
}

resource "aws_iam_policy" "aws-opsworks-service-policy" {
  name   = "aws-opsworks-service-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aws-opsworks-service-policy.json
}

resource "aws_iam_policy" "sme-conversion-shelf-test" {
  name   = "sme-conversion-shelf-test"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-conversion-shelf-test.json
}

resource "aws_iam_policy" "sqs-custom-pitch" {
  name   = "sqs-custom-pitch"
  path   = var.path
  policy = data.aws_iam_policy_document.sqs-custom-pitch.json
}

resource "aws_iam_policy" "oneClick_lambda_basic_execution_1494406367508" {
  name   = "oneClick_lambda_basic_execution_1494406367508"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1494406367508.json
}

resource "aws_iam_policy" "sme-netezza-delivery-02" {
  description = "sme-netezza-delivery-02"
  name        = "sme-netezza-delivery-02"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-netezza-delivery-02.json
}

resource "aws_iam_policy" "sme-s3-inventory-access" {
  name   = "sme-s3-inventory-access"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-s3-inventory-access.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1528028433696" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1528028433696"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1528028433696.json
}

resource "aws_iam_policy" "delp-trendmicro_esdomain_policy" {
  description = "For TMDS ELK"
  name        = "delp-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "delp-ecr-clean-up-access-policy" {
  description = "Policy for cleaning up ecr images"
  name        = "delp-ecr-clean-up-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-ecr-clean-up-access-policy.json
}

resource "aws_iam_policy" "PostgreSQL-Credentials-Rotation-Policy" {
  description = "PostgreSQL-Credentials-Rotation-Policy "
  name        = "PostgreSQL-Credentials-Rotation-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.PostgreSQL-Credentials-Rotation-Policy.json
}

resource "aws_iam_policy" "RDS-admin" {
  name   = "RDS-admin"
  path   = var.path
  policy = data.aws_iam_policy_document.RDS-admin.json
}

resource "aws_iam_policy" "prod-asset-requester-policy" {
  name   = "prod-asset-requester-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.prod-asset-requester-policy.json
}

resource "aws_iam_policy" "delp-external-msk-policy" {
  name   = "delp-external-msk-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.delp-external-msk-policy.json
}

resource "aws_iam_policy" "lambda-create" {
  name   = "lambda-create"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda-create.json
}

resource "aws_iam_policy" "Kosmo-Kontor-Assets" {
  name        = "Kosmo-Kontor-Assets"
  description = "Access to s3://sme-media-production for SME-Germany"
  path        = var.path
  policy      = data.aws_iam_policy_document.Kosmo-Kontor-Assets.json
}

resource "aws_iam_policy" "dsrv-prod-eks-cluster-mediagate-prod-service-policy" {
  name        = "dsrv-prod-eks-cluster-mediagate-prod-service-policy"
  description = "Access to KMS"
  path        = var.path
  policy      = data.aws_iam_policy_document.dsrv-prod-eks-cluster-mediagate-prod-service-policy.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "DEVADMIN-POLICY" {
  name   = "DEVADMIN-POLICY"
  path   = var.path
  policy = data.aws_iam_policy_document.DEVADMIN-POLICY.json
}

resource "aws_iam_policy" "DEVADMIN-POLICY-2" {
  name   = "DEVADMIN-POLICY-2"
  path   = var.path
  policy = data.aws_iam_policy_document.DEVADMIN-POLICY-2.json
}

resource "aws_iam_policy" "DEVADMIN-POLICY-3" {
  name   = "DEVADMIN-POLICY-3"
  path   = var.path
  policy = data.aws_iam_policy_document.DEVADMIN-POLICY-3.json
}

resource "aws_iam_policy" "DEVADMIN-POLICY-4" {
  name   = "DEVADMIN-POLICY-4"
  path   = var.path
  policy = data.aws_iam_policy_document.DEVADMIN-POLICY-4.json
}

resource "aws_iam_policy" "delp-rds-cmk" {
  description = "delp-rds-cmk"
  name        = "delp-rds-cmk"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-rds-cmk.json
}

resource "aws_iam_policy" "prod-ampsv-s3-policy" {
  description = "prod-ampsv-s3-policy"
  name        = "prod-ampsv-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.prod-ampsv-s3-policy.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "IAM-Policy" {
  description = "IAM Permission"
  name        = "KIAM-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.IAM-Policy.json
}

resource "aws_iam_policy" "github-actions-lambda-policy" {
  description = "Lambda deployment policy for github actions"
  name        = "deld-github-actions-lambda-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.github-actions-lambda-policy.json
}

resource "aws_iam_policy" "partner-dropoff-bucket-assume-role-policy" {
  description = "Policy used for other roles to assume role"
  name        = "partner-dropoff-bucket-assume-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.partner-dropoff-bucket-assume-role-policy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-dsrv-prod-eks-cluster" {
  name        = "KarpenterControllerPolicy-dsrv-prod-eks-cluster"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-dsrv-prod-eks-cluster.json
}

resource "aws_iam_policy" "RDS-EC2" {
  name   = "RDS-EC2"
  path   = var.path
  policy = data.aws_iam_policy_document.RDS-EC2.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "AsperaV2DeliveryQ-sqs-policy" {
  description = "AsperaV2DeliveryQ-sqs-policy"
  name        = "AsperaV2DeliveryQ-sqs-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AsperaV2DeliveryQ-sqs-policy.json
}

resource "aws_iam_policy" "delp-msi-ondemand-watermarking-user-policy" {
  description = "delp-msi-ondemand-watermarking-user-policy"
  name        = "delp-msi-ondemand-watermarking-user-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-msi-ondemand-watermarking-user-policy.json
}

resource "aws_iam_policy" "sme-media-production-s3" {
  description = "sme-media-production-s3"
  name        = "sme-media-production-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-media-production-s3.json
}

resource "aws_iam_policy" "aomadel-supplychain-s3-access-policy" {
  description = "Policy to access objects in dsrv-dsp-package-xml-prod S3 bucket"
  name        = "aomadel-supplychain-s3-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aomadel-supplychain-s3-access-policy.json
}

resource "aws_iam_policy" "delivery-prod-s3-replicator" {
  name   = "delivery-prod-s3-replicator"
  path   = var.path
  policy = data.aws_iam_policy_document.delivery-prod-s3-replicator.json
}

resource "aws_iam_policy" "sme-media-production-full-access" {
  description = "Full S3 object access (put, get, delete) for sme-media-production bucket"
  name        = "sme-media-production-full-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-media-production-full-access.json
}

resource "aws_iam_policy" "sme-delivery-user-upload-full-access" {
  description = "Full S3 object access (put, get, delete) for sme-delivery-user-upload bucket"
  name        = "sme-delivery-user-upload-full-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delivery-user-upload-full-access.json
}

resource "aws_iam_policy" "globalds-prod-assumerole" {
  name        = "globalds-prod-assumerole"
  description = "globalds-prod-assumerole"
  path        = var.path
  policy      = data.aws_iam_policy_document.globalds-prod-assumerole.json
}

resource "aws_iam_policy" "delp-eks-node-eip-association" {
  name        = "delp-eks-node-eip-association"
  description = "Allows EKS worker nodes to associate their static EIP via userdata"
  path        = var.path
  policy      = data.aws_iam_policy_document.delp-eks-node-eip-association.json
}