resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-GTA_MyApps-Stage" {
  name   = "AWSLambdaBasicExecutionRole-GTA_MyApps-Stage"
  path   = var.path
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-GTA_MyApps-Stage.json
}

resource "aws_iam_policy" "AWSLambdaS3ExecutionRole-ReadListPut_GTA_MyApps" {
  name   = "AWSLambdaS3ExecutionRole-ReadListPut_GTA_MyApps"
  path   = var.path
  policy = data.aws_iam_policy_document.AWSLambdaS3ExecutionRole-ReadListPut_GTA_MyApps.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585141527700" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585141527700"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585141527700.json
}


resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "dadcp-aws-config-policy" {
  description = "dadcp-aws-config-policy"
  name        = "dadcp-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.dadcp-aws-config-policy.json
}

resource "aws_iam_policy" "sme-dx3d-thecus" {
  description = "Full access to the Thecus S3 Buckets"
  name        = "sme-dx3d-thecus"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-dx3d-thecus.json
}

resource "aws_iam_policy" "s3crr_for_sme-dx3d-thecus-ff_to_sme-dx3d-thecus-va" {
  name   = "s3crr_for_sme-dx3d-thecus-ff_to_sme-dx3d-thecus-va"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.s3crr_for_sme-dx3d-thecus-ff_to_sme-dx3d-thecus-va.json
}

resource "aws_iam_policy" "cloudops-BudgetActionDenyPolicy" {
  description = "cloudops-BudgetActionDenyPolicy"
  name        = "cloudops-BudgetActionDenyPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-BudgetActionDenyPolicy.json
}

resource "aws_iam_policy" "trial-1" {
  name   = "trial-1"
  path   = var.path
  policy = data.aws_iam_policy_document.trial-1.json
}



resource "aws_iam_policy" "Billing" {
  description = "Policy created to have permissions to change account name"
  name        = "Billing"
  path        = var.path
  policy      = data.aws_iam_policy_document.Billing.json
}

resource "aws_iam_policy" "RDSProxyIAMPolicy" {
  description = "RDSProxyIAMPolicy for RDSProxyIAMRole"
  name        = "RDSProxyIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSProxyIAMPolicy.json
}



resource "aws_iam_policy" "sme-gen-custom" {
  description = "Custom policy for sme-gen role"
  name        = "sme-gen-custom"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-gen-custom.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "DeepSecurity-7a5351f4c" {
  name   = "DeepSecurity-7a5351f4c"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity-7a5351f4c.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503413823468" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503413823468"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503413823468.json
}

resource "aws_iam_policy" "dx3d-dev" {
  description = "Policy for Aspera"
  name        = "dx3d-dev"
  path        = var.path
  policy      = data.aws_iam_policy_document.dx3d-dev.json
}

resource "aws_iam_policy" "ssm-sec-agent-status-upload" {
  name   = "ssm-sec-agent-status-upload"
  path   = var.path
  policy = data.aws_iam_policy_document.ssm-sec-agent-status-upload.json
}

resource "aws_iam_policy" "CWLogs-Put" {
  name   = "CWLogs-Put"
  path   = var.path
  policy = data.aws_iam_policy_document.CWLogs-Put.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1452260652014" {
  name   = "oneClick_flowlogsRole_1452260652014"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1452260652014.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "dxdevelopers" {
  name   = "dxdevelopers"
  path   = var.path
  policy = data.aws_iam_policy_document.dxdevelopers.json
}

resource "aws_iam_policy" "sme-dx3d-origin" {
  description = "To transfer files from DX3D to MSRV-D"
  name        = "sme-dx3d-origin"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-dx3d-origin.json
}

resource "aws_iam_policy" "dadcp-portal-policy" {
  description = "dadcp-portal-policy"
  name        = "dadcp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.dadcp-portal-policy.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "s3-central-ansible" {
  name   = "s3-central-ansible"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-central-ansible.json
}

resource "aws_iam_policy" "lambda_elasticsearch_execution_policy" {
  description = "lambda_elasticsearch_execution_policy"
  name        = "lambda_elasticsearch_execution_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda_elasticsearch_execution_policy.json
}

resource "aws_iam_policy" "sme-dadc-mps-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1" {
  name   = "sme-dadc-mps-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.sme-dadc-mps-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1.json
}

resource "aws_iam_policy" "ResourceTags-CreatePermission" {
  name   = "ResourceTags-CreatePermission"
  path   = var.path
  policy = data.aws_iam_policy_document.ResourceTags-CreatePermission.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "GLACIER-ARCHIVE-MPS" {
  name   = "GLACIER-ARCHIVE-MPS"
  path   = var.path
  policy = data.aws_iam_policy_document.GLACIER-ARCHIVE-MPS.json
}

resource "aws_iam_policy" "mpsprodbucket" {
  name   = "mpsprodbucket"
  path   = var.path
  policy = data.aws_iam_policy_document.mpsprodbucket.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "s3cp" {
  name   = "s3cp"
  path   = var.path
  policy = data.aws_iam_policy_document.s3cp.json
}

resource "aws_iam_policy" "mpsstagebucket" {
  name   = "mpsstagebucket"
  path   = var.path
  policy = data.aws_iam_policy_document.mpsstagebucket.json
}

resource "aws_iam_policy" "sme-dx3d-dx3-s3-access" {
  description = "Grants access to sme-dx3d-dx3 s3 bucket"
  name        = "sme-dx3d-dx3-s3-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-dx3d-dx3-s3-access.json
}

resource "aws_iam_policy" "atlantis_terrastate_policy" {
  name   = "atlantis_terrastate_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.atlantis_terrastate_policy.json
}

resource "aws_iam_policy" "atlantis_secrets_read_policy" {
  name   = "${var.environment}-${var.service_name}-secrets-read-policy"
  policy = data.aws_iam_policy_document.atlantis_secrets_read_policy.json
}

resource "aws_iam_policy" "atlantis_tf_infra_core_apply_policy" {
  name   = "${var.environment}-${var.service_name}-tf-infra-core-apply-policy"
  policy = data.aws_iam_policy_document.atlantis_tf_infra_core_apply_policy.json
}

resource "aws_iam_policy" "atlantis_apply_policy_part_one" {
  name   = "${var.environment}-${var.service_name}-apply-part-one-policy"
  policy = data.aws_iam_policy_document.atlantis_apply_policy_part_one.json
}

resource "aws_iam_policy" "atlantis_apply_policy_part_two" {
  name   = "${var.environment}-${var.service_name}-apply-part-two-policy"
  policy = data.aws_iam_policy_document.atlantis_apply_policy_part_two.json
}

resource "aws_iam_policy" "atlantis_kms_delete_policy" {
  name   = "${var.environment}-${var.service_name}-kms-delete-policy"
  policy = data.aws_iam_policy_document.atlantis_kms_delete_policy.json
}

resource "aws_iam_policy" "atlantis_kms_reencrypt_policy" {
  name   = "${var.environment}-${var.service_name}-kms-reencrypt-policy"
  policy = data.aws_iam_policy_document.atlantis_kms_reencrypt_policy.json
}

resource "aws_iam_policy" "atlantis_invoke_lambdas_policy" {
  name   = "${var.environment}-${var.service_name}-invoke-lambdas-policy"
  policy = data.aws_iam_policy_document.atlantis_invoke_lambdas_policy.json
}