resource "aws_instance" "digsyss3-ocm01" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsysd-ocm01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-OCM-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-IAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-ocm01",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General",
      CLOPS_APPROVED = "YES",
      ME-Joined      = "NO"
    }
  )
}

resource "aws_instance" "digsyss3-ocm02" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsysd-ocm02"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-OCM-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-IAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-ocm02",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General"
      CLOPS_APPROVED = "YES"
      ME-Joined      = "NO"
    }
  )
}

resource "aws_instance" "digsyss3-dra2app01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.large"
  iam_instance_profile        = "digsysd-digsysd-dra2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-DRA2APP01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-XAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-dra2app01",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General"
      CLOPS_APPROVED = "YES"
      ME-Joined      = "NO"
    }
  )
}


resource "aws_instance" "digsyss3-eai2app01" {
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsysd-eai2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-EAI2APP01-SG.id, aws_security_group.DIGSYS-S3-INT-LB-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-IAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-eai2app01",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General",
      CLOPS_APPROVED = "YES",
      ME-Joined      = "NO"
    }
  )
}
/*
resource "aws_instance" "digsyss3-eom1app01" {
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsysd-eom1app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-EOM1APP01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-IAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name          = "digsyss3-eom1app01",
      Environment   = "Stage",
      SERVER_TYPE   = "EC2",
      OS            = "AL3",
      "Patch Group" = "General"
      CLOPS_APPROVED = "YES"
      ME-Joined = "NO"
    }
  )
}
*/
resource "aws_instance" "digsyss3-eom2app01" {
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsysd-eom2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-EOM2APP01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-XAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-eom2app01",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General"
      CLOPS_APPROVED = "YES"
      ME-Joined      = "NO"
    }
  )
}

resource "aws_instance" "digsyss3-tools01" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsysd-tools01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-TOOLS-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-XAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-tools01",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General"
      CLOPS_APPROVED = "YES"
      ME-Joined      = "NO"
    }
  )
}

resource "aws_instance" "digsyss3-util01" {
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  ami = "ami-064831802eae3c1b0"
  #  instance_type               = "t3.medium"
  instance_type               = "c5.2xlarge"
  iam_instance_profile        = "digsysd-digsyss-util01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-UTIL01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-IAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-util01",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General"
      CLOPS_APPROVED = "YES"
      ME-Joined      = "NO"
    }
  )
}

resource "aws_instance" "digsyss3-testers01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "r5.4xlarge"
  iam_instance_profile        = "digsysd-digsyss-testers01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-TESTERS01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-XAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-testers01",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General"
      CLOPS_APPROVED = "YES"
      ME-Joined      = "NO"
    }
  )
}
/*
resource "aws_instance" "digsyss3-lti01" {
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsyss-lti01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-LTI-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-XAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = {
      "Name"                  = "digsyss3-lti01",
      "Business-Unit"         = "Digital Systems",
      "Project-Code"          = "SME-2000-0512C"
      "Project-Name"          = "LT Info"
      "Environment"           = "Stage",
      "SERVER_TYPE"           = "EC2",
      "OS"                    = "AL3",
      "Patch Group"           = "General",
      "CLOPS_APPROVED"        = "YES",
      "ME-Joined"             = "NO",
      "OPS"                   = "STND",
      "DATA"                  = "NORMAL",
      "Owner"                 = "steve.leeds@sonymusic.com",
      "Terraform"             = "True",
      "CLOPS_FW"              = "YES"
      aws-migration-project-id = "MPE22602"
      map-migrated = "d-server-02sa4nzuab143a"
    }
}
*/

resource "aws_instance" "digsyss3-eai2app03" {
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysd-digsysd-eai2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-S3-EAI2APP01-SG.id, aws_security_group.DIGSYS-S3-INT-LB-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-S3-IAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "digsys-dev-18MARCH2024"
  tags = merge(
    var.ec2_tags,
    var.cloudops_firewall_protected_tag,
    {
      Name           = "digsyss3-eai2app03",
      Environment    = "Stage",
      SERVER_TYPE    = "EC2",
      OS             = "AL3",
      "Patch Group"  = "General",
      CLOPS_APPROVED = "YES",
      ME-Joined      = "NO"
    }
  )
}