resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1586659384789" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1586659384789"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1586659384789.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = " Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "AmazonSesSendingAccess" {
  name   = "AmazonSesSendingAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.AmazonSesSendingAccess.json
}

resource "aws_iam_policy" "rds" {
  name   = "rds"
  path   = var.path
  policy = data.aws_iam_policy_document.rds.json
}

resource "aws_iam_policy" "DeepSecurity-5c534c256" {
  name   = "DeepSecurity-5c534c256"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity-5c534c256.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template_56869403" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template_56869403"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template_56869403.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "dx3p-portal-policy" {
  description = "DX3 Prod Portal Policy"
  name        = "dx3p-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.dx3p-portal-policy.json
}

resource "aws_iam_policy" "dx3p-trendmicro_esdomain_policy" {
  description = "For TMDS ELK "
  name        = "dx3p-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.dx3p-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1590571895032" {
  name   = "oneClick_flowlogsRole_1590571895032"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1590571895032.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1586398950417" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1586398950417"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1586398950417.json
}

resource "aws_iam_policy" "KMS_fullaccess" {
  name   = "KMS_fullaccess"
  path   = var.path
  policy = data.aws_iam_policy_document.KMS_fullaccess.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "PrismaCloud-IAM-ReadOnly-Policy" {
  name   = "PrismaCloud-IAM-ReadOnly-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.PrismaCloud-IAM-ReadOnly-Policy.json
}

resource "aws_iam_policy" "grpsd2-bastion01-ec2-restart" {
  name   = "grpsd2-bastion01-ec2-restart"
  path   = var.path
  policy = data.aws_iam_policy_document.grpsd2-bastion01-ec2-restart.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "postp" {
  name   = "postp"
  path   = var.path
  policy = data.aws_iam_policy_document.postp.json
}

resource "aws_iam_policy" "waf" {
  description = "waf"
  name        = "waf"
  path        = var.path
  policy      = data.aws_iam_policy_document.waf.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "Deny IAM policy for CloudOps power role"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "dx3p-aws-config-policy" {
  name   = "dx3p-aws-config-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.dx3p-aws-config-policy.json
}

resource "aws_iam_policy" "sme-dx3p-dx3-s3-access" {
  description = "Grants access to sme-dx3p-dx3 s3 bucket"
  name        = "sme-dx3p-dx3-s3-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-dx3p-dx3-s3-access.json
}