data "aws_iam_policy_document" "cf-templates-14tjte8xlww1c-us-east-1" {
  statement {
    sid       = "Stmt1541169887327"
    effect    = "Deny"
    resources = ["arn:aws:s3:::cf-templates-14tjte8xlww1c-us-east-1"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-dadc-mps-prod-awsconfig" {
  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dadc-mps-prod-awsconfig/*"]
    actions   = ["s3:GetObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dadc-mps-prod-awsconfig"]
    actions   = ["s3:ListBucket"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }
}

data "aws_iam_policy_document" "sme-dadc-mps-prod-us-east-1-logs" {
  statement {
    sid       = "Stmt1541175770210"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-dadc-mps-prod-us-east-1-logs"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-dx3-d1-vpc-flowlogs" {
  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3-d1-vpc-flowlogs/AWSLogs/765134955759/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3-d1-vpc-flowlogs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-dx3-dev-db-team-lambda" {
  statement {
    sid    = "Stmt1586002122225"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-dx3-dev-db-team-lambda/*",
      "arn:aws:s3:::sme-dx3-dev-db-team-lambda",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::662765073744:role/AWSBatchServiceRole",
        "arn:aws:iam::662765073744:role/promod-ecs-task-role",
        "arn:aws:iam::765134955759:role/dx3d-rdsadmin",
        "arn:aws:iam::765134955759:user/sme-dx3d-origin",
        "arn:aws:iam::662765073744:role/promod-ECS-Instance-Role",
        "arn:aws:iam::765134955759:role/dx3d-dx3d1-aspera02",      ]
    }
  }
}

data "aws_iam_policy_document" "sme-dx3-dev-euc1-s3-inventory" {
  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3-dev-euc1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["765134955759"]
    }

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-dx3-dev-use1-s3-inventory" {
  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1603804496875"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3-dev-use1-s3-inventory/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    condition {
      test     = "StringEquals"
      variable = "aws:SourceAccount"
      values   = ["765134955759"]
    }

    condition {
      test     = "ArnLike"
      variable = "aws:SourceArn"
      values   = ["arn:aws:s3:::*"]
    }

    principals {
      type        = "Service"
      identifiers = ["s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-dx3d-dx3" {
  statement {
    sid    = "Stmt1586002122225"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-dx3d-dx3/*",
      "arn:aws:s3:::sme-dx3d-dx3",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::765134955759:role/dx3d-dx3d1-aspera02",
        "arn:aws:iam::662765073744:role/promod-ecs-task-role",
        "arn:aws:iam::662765073744:role/AWSBatchServiceRole",
        "arn:aws:iam::765134955759:role/dx3d-rdsadmin",
        "arn:aws:iam::765134955759:user/sme-dx3d-origin",
        "arn:aws:iam::104858398257:role/ecsInstanceRole",
        "arn:aws:iam::662765073744:role/promod-ECS-Instance-Role",
      ]
    }
  }
}

data "aws_iam_policy_document" "sme-dx3d-elb-leuc1-ogs" {
  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3d-elb-leuc1-ogs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::054676820928:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3d-elb-leuc1-ogs/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3d-elb-leuc1-ogs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1676978324409"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3d-elb-leuc1-ogs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-dx3d-s3-logs-euc1" {
  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1642713336508"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-dx3d-s3-logs-euc1/*"]

    actions = [
      "s3:PutObject",
      "s3:PutObjectAcl",
    ]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-mps-dev" {
  statement {
    sid       = "Stmt1541696240948"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-mps-dev"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-mps-prod" {
  statement {
    sid       = "AWSCloudTrailAclCheck20150319"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-mps-prod"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["cloudtrail.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSCloudTrailWrite20150319"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-mps-prod/AWSLogs/765134955759/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["cloudtrail.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-mps-stage" {
  statement {
    sid       = "Stmt1541696296977"
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-mps-stage"]
    actions   = ["s3:*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}