resource "aws_iam_policy" "digsysd-ALBIngressControllerIAMPolicy" {
  name   = "digsysd-ALBIngressControllerIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.digsysd-ALBIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "digsys-stage-dra-01-dra-dk2" {
  name   = "digsys-stage-dra-01-dra-dk2"
  path   = var.path
  policy = data.aws_iam_policy_document.digsys-stage-dra-01-dra-dk2.json
}

resource "aws_iam_policy" "digsysd-aws-config-policy" {
  description = "digsysd-aws-config-policy"
  name        = "digsysd-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-aws-config-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1513247253064" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1513247253064"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1513247253064.json
}

resource "aws_iam_policy" "digsys-dev-msk02-DRA-DK2" {
  name   = "digsys-dev-msk02-DRA-DK2"
  path   = var.path
  policy = data.aws_iam_policy_document.digsys-dev-msk02-DRA-DK2.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "digsysd-deld-msk-client-poc-policy" {
  description = "Policy for cross account role digsysd-deld-msk-client-poc"
  name        = "digsysd-deld-msk-client-poc-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-deld-msk-client-poc-policy.json
}

resource "aws_iam_policy" "digsysd-ec2-stopstart-policy" {
  description = "digsysd-ec2-stopstart-policy"
  name        = "digsysd-ec2-stopstart-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-ec2-stopstart-policy.json
}

resource "aws_iam_policy" "digsys-dev-lti-dms" {
  name   = "digsys-dev-lti-dms"
  path   = var.path
  policy = data.aws_iam_policy_document.digsys-dev-lti-dms.json
}

resource "aws_iam_policy" "api_gateway_full_access" {
  name   = "api_gateway_full_access"
  path   = var.path
  policy = data.aws_iam_policy_document.api_gateway_full_access.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540804855958" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540804855958"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540804855958.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "AWSLambdaVPCAccessExecutionRole-02f07986-9113-4990-865a-8ff26be07601" {
  name   = "AWSLambdaVPCAccessExecutionRole-02f07986-9113-4990-865a-8ff26be07601"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaVPCAccessExecutionRole-02f07986-9113-4990-865a-8ff26be07601.json
}

resource "aws_iam_policy" "digsys-dev-rdsstopstart" {
  description = "Policy for RDS Auto Start and Stop"
  name        = "digsys-dev-rdsstopstart"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsys-dev-rdsstopstart.json
}

resource "aws_iam_policy" "DMS-Policy" {
  name   = "DMS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.DMS-Policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1511524004384" {
  name   = "oneClick_flowlogsRole_1511524004384"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1511524004384.json
}

resource "aws_iam_policy" "Billing-RO" {
  name   = "Billing-RO"
  path   = var.path
  policy = data.aws_iam_policy_document.Billing-RO.json
}

resource "aws_iam_policy" "glue_admin" {
  name   = "glue_admin"
  path   = var.path
  policy = data.aws_iam_policy_document.glue_admin.json
}

resource "aws_iam_policy" "ecs-cloudtrail-lookup" {
  name   = "ecs-cloudtrail-lookup"
  path   = var.path
  policy = data.aws_iam_policy_document.ecs-cloudtrail-lookup.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-8799dbbc-588d-465b-ba14-a434a39877c0" {
  name   = "AWSLambdaBasicExecutionRole-8799dbbc-588d-465b-ba14-a434a39877c0"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-8799dbbc-588d-465b-ba14-a434a39877c0.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "CertReadOnly" {
  name   = "CertReadOnly"
  path   = var.path
  policy = data.aws_iam_policy_document.CertReadOnly.json
}

resource "aws_iam_policy" "rds-rman-s3" {
  name   = "rds-rman-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.rds-rman-s3.json
}

resource "aws_iam_policy" "ec2_key_pair_mgmt" {
  description = "ec2_key_pair_mgmt"
  name        = "ec2_key_pair_mgmt"
  path        = var.path
  policy      = data.aws_iam_policy_document.ec2_key_pair_mgmt.json
}

resource "aws_iam_policy" "dra-dk2-test-lambda" {
  description = "dra-dk2-test-lambda"
  name        = "dra-dk2-test-lambda"
  path        = var.path
  policy      = data.aws_iam_policy_document.dra-dk2-test-lambda.json
}

resource "aws_iam_policy" "digsysd-eks-fullaccess" {
  description = "digsysd-eks-fullaccess"
  name        = "digsysd-eks-fullaccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-eks-fullaccess.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "cft_lti_policy" {
  name   = "cft_lti_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.cft_lti_policy.json
}

resource "aws_iam_policy" "digsysd-s3-sme-dev-dst" {
  description = "Allow access to sme-dev-dst s3 bucket"
  name        = "digsysd-s3-sme-dev-dst"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-s3-sme-dev-dst.json
}

resource "aws_iam_policy" "digsysd-eks-ro-policy" {
  description = "digsysd-eks-ro-policy"
  name        = "digsysd-eks-ro-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-eks-ro-policy.json
}

resource "aws_iam_policy" "sme-digsysd-txmgr01" {
  name   = "sme-digsysd-txmgr01"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-digsysd-txmgr01.json
}

resource "aws_iam_policy" "CWLogs-Put" {
  name   = "CWLogs-Put"
  path   = var.path
  policy = data.aws_iam_policy_document.CWLogs-Put.json
}

resource "aws_iam_policy" "SecretManagerAccess" {
  description = "SecretManagerAccess"
  name        = "SecretManagerAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.SecretManagerAccess.json
}

resource "aws_iam_policy" "athena_full" {
  name   = "athena_full"
  path   = var.path
  policy = data.aws_iam_policy_document.athena_full.json
}

resource "aws_iam_policy" "sme-digital-systems-dev-waf-logging-policy" {
  description = "sme-digital-systems-dev-waf-logging-policy"
  name        = "sme-digital-systems-dev-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-digital-systems-dev-waf-logging-policy.json
}

resource "aws_iam_policy" "digsysd-cloudwatch-policy" {
  description = "Policy for Set Retention Settings, Create metric filters, Delete log groups."
  name        = "digsysd-cloudwatch-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-cloudwatch-policy.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "digsysd-dev-rds-s3_rw_policy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "digsysd-dev-rds-s3_rw_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-dev-rds-s3_rw_policy.json
}

resource "aws_iam_policy" "MSK-Policy" {
  description = "Access to MSK"
  name        = "MSK-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.MSK-Policy.json
}

resource "aws_iam_policy" "MSK02-Policy" {
  description = "Access to MSK02"
  name        = "MSK02-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.MSK02-Policy.json
}

resource "aws_iam_policy" "MSK01-stage-Policy" {
  description = "Access to digsyss3-msk01"
  name        = "MSK01-stage-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.MSK01-stage-Policy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-digsysd3-eks" {
  name        = "KarpenterControllerPolicy-digsysd3-eks"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-digsysd3-eks.json
}

resource "aws_iam_policy" "digsysd3-eks-midict-stage-sa-role-policy" {
  description = "Access to assumerole"
  name        = "digsysd3-eks-midict-stage-sa-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd3-eks-midict-stage-sa-role-policy.json
}

resource "aws_iam_policy" "digsysd3-ES-policy" {
  description = "Access to assumerole"
  name        = "digsysd3-ES-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd3-ES-policy.json
}

resource "aws_iam_policy" "digsysd3-eks-midict-dev-sa-role-policy" {
  description = "Access to assumerole"
  name        = "digsysd3-eks-midict-dev-sa-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd3-eks-midict-dev-sa-role-policy.json
}

resource "aws_iam_policy" "ecr_full_access" {
  description = "Access to assumerole"
  name        = "ecr_full_access"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecr_full_access.json
}

resource "aws_iam_policy" "ecs_task_exec_secrets" {
  description = "Allow ecs task to use secrets manager"
  name        = "ecs_task_exec_secrets"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecs_task_exec_secrets.json
}

resource "aws_iam_role_policy" "dsms_task_role_ses" {
  name   = "dsms-task-role-ses"
  role   = aws_iam_role.dsms_task_role.id
  policy = data.aws_iam_policy_document.dsms_task_ses_send.json
}