module "digimax_oh_data-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digimax_oh_data.name
  custom_group_policy_arns = [
  ]
}

module "digsysd-apigw-demo-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysd-apigw-demo.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess",
    "arn:aws:iam::${var.account_id}:policy/api_gateway_full_access",
  ]
}

module "digsysd-dev-apps-group-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysd-dev-apps-group.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/AmazonCognitoPowerUser",
    "arn:aws:iam::aws:policy/AmazonMSKReadOnlyAccess",
    "arn:aws:iam::aws:policy/ReadOnlyAccess",
    "arn:aws:iam::aws:policy/SecretsManagerReadWrite",
    "arn:aws:iam::aws:policy/AWSSupportAccess",
    "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role",
    "arn:aws:iam::aws:policy/CloudWatchLogsReadOnlyAccess",
    "arn:aws:iam::aws:policy/service-role/AWSLambdaMSKExecutionRole",
  ]
}

module "digsysd-lari002-prog-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysd-lari002-prog.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/ReadOnlyAccess",
    "arn:aws:iam::aws:policy/SecretsManagerReadWrite",
    "arn:aws:iam::aws:policy/AmazonECS_FullAccess",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
    "arn:aws:iam::aws:policy/service-role/AmazonEC2ContainerServiceforEC2Role",
    "arn:aws:iam::aws:policy/CloudWatchLogsReadOnlyAccess",
    "arn:aws:iam::${var.account_id}:policy/digsysd-cloudwatch-policy",
    "arn:aws:iam::${var.account_id}:policy/ec2_key_pair_mgmt",
  ]
}
module "digsysd-prag008-prog-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysd-prag008-prog.name
  custom_group_policy_arns = [
    "arn:aws:iam::718729873097:policy/digsysd3-eks-midict-dev-sa-role-policy",
    "arn:aws:iam::718729873097:policy/digsysd3-eks-midict-stage-sa-role-policy",

  ]
}
module "digsysd-s3-sme-dev-dst-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysd-s3-sme-dev-dst.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/SecretsManagerReadWrite",
    "arn:aws:iam::${var.account_id}:policy/digsysd-s3-sme-dev-dst",
  ]
}

module "digsysd-syne002-prog-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysd-syne002-prog.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess",
  ]
}

module "jenkins_ecr_access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.jenkins_ecr_access.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/SecretsManagerReadWrite",
    "arn:aws:iam::aws:policy/AmazonECS_FullAccess",
    "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy",
    "arn:aws:iam::${var.account_id}:policy/digsysd-eks-fullaccess",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
  ]
}