module "athena-query-result-vinit" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "athena-query-result-vinit"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:eu-central-1:718729873097:key/b8c99e72-9f9d-4211-9191-707f0eaa1604"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.athena-query-result-vinit.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "athena-query-result-vinit"
    Owner                    = "Greg Taylor"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    USE                      = "POC"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "cf-templates-1lwyljnst7flb-eu-central-1" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "cf-templates-1lwyljnst7flb-eu-central-1"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.cf-templates-1lwyljnst7flb-eu-central-1.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "cf-templates-1lwyljnst7flb-eu-central-1"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "cf-templates-1lwyljnst7flb-us-east-1" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "cf-templates-1lwyljnst7flb-us-east-1"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-us-east-1-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "cf-templates-1lwyljnst7flb-us-east-1"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "cft-dms-eu" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "cft-dms-eu"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "cft-dms-eu"
    Classification = "internal-use-only"
    Business-Unit  = "EOM"
    Environment    = "Dev"
    Owner          = "Sheila Eckert"
    Project-Code   = "SME-2000-0590D+M"
    Project-Name   = "EOM"
    Terraform      = "True"
  Purpose = "CLOUDOPS" }
}

module "digital-systems-dev-frankfurt-elb-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "digital-systems-dev-frankfurt-elb-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.digital-systems-dev-frankfurt-elb-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "digital-systems-dev-frankfurt-elb-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "digsys-va-d-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "digsys-va-d-vpc-flow-logs"
  versioning = {
    enabled = true
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-us-east-1-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.digsys-va-d-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "digsys-va-d-vpc-flow-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "dra-test-lambda-deploy" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "dra-test-lambda-deploy"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "dra-test-lambda-deploy"
    Business-Unit  = "EOM"
    Environment    = "Dev"
    Owner          = "Sheila Eckert"
    Project-Code   = "SME-2000-0590D+M"
    Project-Name   = "EOM"
    Terraform      = "True"
    Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "eom-ansible" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "eom-ansible"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:eu-central-1:718729873097:key/b8c99e72-9f9d-4211-9191-707f0eaa1604"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.eom-ansible.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "eom-ansible"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "eom-dev-rds-log-backup" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "eom-dev-rds-log-backup"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:us-east-1:718729873097:key/4c3acef8-5c38-4f0e-9489-8b2d5bf715f9"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-digital-systems-dev-us-east-1-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.eom-dev-rds-log-backup.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "eom-dev-rds-log-backup"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "eom-ff-d-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "eom-ff-d-vpc-flow-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.eom-ff-d-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "eom-ff-d-vpc-flow-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "eom-ff-s-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "eom-ff-s-vpc-flow-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.eom-ff-s-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "eom-ff-s-vpc-flow-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "eom2-wfly-dev-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "eom2-wfly-dev-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:eu-central-1:718729873097:key/b8c99e72-9f9d-4211-9191-707f0eaa1604"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.eom2-wfly-dev-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "eom2-wfly-dev-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "oracle-data-awsadmin-1" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "oracle-data-awsadmin-1"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-us-east-1-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.oracle-data-awsadmin-1.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "oracle-data-awsadmin-1"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-dev-dst" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-dev-dst"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-dev-dst.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-dev-dst"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-athena-out" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-athena-out"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-athena-out"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-aws-config" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-aws-config"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-dev-aws-config.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-aws-config"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-eu-central-1-s3-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-eu-central-1-s3-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-dev-eu-central-1-s3-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-eu-central-1-s3-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    USE                      = "LOGGING"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-euc1-s3-inventory" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-euc1-s3-inventory"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-dev-euc1-s3-inventory.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-euc1-s3-inventory"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-lti" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-lti"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-digital-systems-dev-lti"
    Business-Unit            = "EOM"
    Environment              = "Dev"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-msk-connect-test" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-msk-connect-test"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-dev-msk-connect-test.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-digital-systems-dev-msk-connect-test"
    Business-Unit  = "EOM"
    Environment    = "Dev"
    Project-Code   = "SME-2000-0590D+M"
    Project-Name   = "EOM"
    Terraform      = "True"
    Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-sal-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-sal-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-dev-sal-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-sal-logs"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-digital-systems-dev-ssm-out" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-ssm-out"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-ssm-out"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-digital-systems-dev-us-east-1-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-us-east-1-logs"
  versioning = {
    enabled = true
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-dev-us-east-1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-us-east-1-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    USE                      = "LOGGING"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "LOGGING" }
}

module "sme-digital-systems-dev-use1-s3-inventory" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-use1-s3-inventory"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-us-east-1-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-dev-use1-s3-inventory.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digital-systems-dev-use1-s3-inventory"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digsysd-txmgr01" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digsysd-txmgr01"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digsysd-txmgr01.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-digsysd-txmgr01"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Classification           = "internal-use-only"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-dra" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-dra"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-dra"
    Business-Unit            = "EOM"
    Environment              = "Dev"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Classification           = "internal-use-only"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-max-data" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-data"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-data.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-max-data"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-max-data-dev-mi" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-data-dev-mi"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-data-dev-mi.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-max-data-dev-mi"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-mipr-rman-backups-digsys-d" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-mipr-rman-backups-digsys-d"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-mipr-rman-backups-digsys-d"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-stage-dst" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-stage-dst"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-stage-dst.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "sme-stage-dst"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "stage-eom-waf" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "stage-eom-waf"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "stage-eom-waf"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "supplychain-eom-prod-rman-backups" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "supplychain-eom-prod-rman-backups"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:us-east-1:718729873097:key/4c3acef8-5c38-4f0e-9489-8b2d5bf715f9"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-digital-systems-dev-us-east-1-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.supplychain-eom-prod-rman-backups.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "supplychain-eom-prod-rman-backups"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "test-eom-bastion" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "test-eom-bastion"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.test-eom-bastion.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "test-eom-bastion"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "testlock-sme" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "testlock-sme"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:eu-central-1:718729873097:key/b8c99e72-9f9d-4211-9191-707f0eaa1604"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = true
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Dev"
    Name                     = "eom-ansible"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590D+M"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-digital-systems-dev-digsys-d3-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-digsys-d3-vpc-flow-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-digital-systems-dev-digsys-d3-vpc-flow-logs"
    Business-Unit  = "EOM"
    Environment    = "Dev"
    Project-Code   = "SME-2000-0590D+M"
    Project-Name   = "EOM"
    Terraform      = "True"
    Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-dev-digsys-s3-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-dev-digsys-s3-vpc-flow-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-digital-systems-dev-digsys-s3-vpc-flow-logs"
    Business-Unit  = "EOM"
    Environment    = "Dev"
    Project-Code   = "SME-2000-0590D+M"
    Project-Name   = "EOM"
    Terraform      = "True"
    Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "aws-sam-cli-managed-default-samclisourcebucket" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "aws-sam-cli-managed-default-samclisourcebucket-tpblfaxvb2kt"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  policy                                = data.aws_iam_policy_document.aws-sam-cli-managed-default-samclisourcebucket.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    "Name"           = "aws-sam-cli-managed-default-samclisourcebucket",
    "Business-Unit"  = "PRS",
    "Project-Code"   = "SME-2000-0512C",
    "Project-Name"   = "PRS",
    "Environment"    = "Stage",
    "DATA"           = "NORMAL",
    "OWNER"          = "philip.kong@sonymusic.com",
    "Terraform"      = "True",
    "Classification" = "internal-use-only",
    "Purpose"        = "CLOUDOPS"
  }
}

module "digsys-sam-deploy" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "digsys-sam-deploy"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    "Name"           = "digsys-sam-deploy",
    "Business-Unit"  = "PRS",
    "Project-Code"   = "SME-2000-0512C",
    "Project-Name"   = "PRS",
    "Environment"    = "Stage",
    "DATA"           = "NORMAL",
    "OWNER"          = "philip.kong@sonymusic.com",
    "Terraform"      = "True",
    "Classification" = "internal-use-only",
    "Purpose"        = "CLOUDOPS"
  }
}

module "lambdasam-efa549c758-eu-central-1" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "lambdasam-efa549c758-eu-central-1"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    "Name"           = "lambdasam-efa549c758-eu-central-1",
    "Business-Unit"  = "PRS",
    "Project-Code"   = "SME-2000-0512C",
    "Project-Name"   = "PRS",
    "Environment"    = "Stage",
    "DATA"           = "NORMAL",
    "OWNER"          = "philip.kong@sonymusic.com",
    "Terraform"      = "True",
    "Classification" = "internal-use-only",
    "Purpose"        = "CLOUDOPS"
  }
}


module "mi-dictionary-on-demand" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "mi-dictionary-on-demand"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    "Name"           = "mi-dictionary-on-demand",
    "Business-Unit"  = "PRS",
    "Project-Code"   = "SME-2000-0512C",
    "Project-Name"   = "PRS",
    "Environment"    = "Stage",
    "DATA"           = "NORMAL",
    "OWNER"          = "philip.kong@sonymusic.com",
    "Terraform"      = "True",
    "Classification" = "internal-use-only",
    "Purpose"        = "CLOUDOPS"
  }
}

module "mi-dictionary-regular-batch" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "mi-dictionary-regular-batch"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    "Name"           = "mi-dictionary-regular-batch",
    "Business-Unit"  = "PRS",
    "Project-Code"   = "SME-2000-0512C",
    "Project-Name"   = "PRS",
    "Environment"    = "Stage",
    "DATA"           = "NORMAL",
    "OWNER"          = "philip.kong@sonymusic.com",
    "Terraform"      = "True",
    "Classification" = "internal-use-only",
    "Purpose"        = "CLOUDOPS"
  }
}


module "sme-digsd-mi-dictionary-on-demand" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digsd-mi-dictionary-on-demand"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    "Name"           = "sme-digsd-mi-dictionary-on-demand",
    "Business-Unit"  = "PRS",
    "Project-Code"   = "SME-2000-0512C",
    "Project-Name"   = "PRS",
    "Environment"    = "Dev",
    "DATA"           = "NORMAL",
    "OWNER"          = "philip.kong@sonymusic.com",
    "Terraform"      = "True",
    "Classification" = "internal-use-only",
    "Purpose"        = "CLOUDOPS"
  }
}

module "sme-digsd-mi-dictionary-regular-batch" {
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digsd-mi-dictionary-regular-batch"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-dev-eu-central-1-s3-logs"
    target_prefix = "sme-digital-systems-dev/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    "Name"           = "sme-digsd-mi-dictionary-regular-batch",
    "Business-Unit"  = "PRS",
    "Project-Code"   = "SME-2000-0512C",
    "Project-Name"   = "PRS",
    "Environment"    = "Dev",
    "DATA"           = "NORMAL",
    "OWNER"          = "philip.kong@sonymusic.com",
    "Terraform"      = "True",
    "Classification" = "internal-use-only",
    "Purpose"        = "CLOUDOPS"
  }
}