resource "aws_instance" "digsysp3-csa2app01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysp-digsysp-csa2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-CSA2APP01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-csa2app01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-dra2app01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.2xlarge"
  iam_instance_profile        = "digsysp-digsysp-dra2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-DRA2APP01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-dra2app01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-dsmsapp01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysp-digsysp-dsmsapp01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-DSMSAPP01A-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-dsmsapp01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-dsmsapp02" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysp-digsysp-dsmsapp02"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-DSMSAPP01A-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-dsmsapp02",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-eai2app01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "m5.xlarge"
  iam_instance_profile        = "digsysp-digsysp-eai2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-EAI2APP01-SG.id, aws_security_group.DIGSYS-P3-INTERNAL-LB-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-eai2app01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-eom2app01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.xlarge"
  iam_instance_profile        = "digsysp-digsysp-eom2app01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-EOM2APP01-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-eom2app01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-ocm01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysp-digsysp-ocm01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-OCM01A-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1A.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-ocm01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-ocm02" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysp-digsysp-ocm02"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-OCM01A-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-IAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-ocm02",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_instance" "digsysp3-tools01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                         = "ami-064831802eae3c1b0"
  instance_type               = "t3.medium"
  iam_instance_profile        = "digsysp-digsysp-tools01"
  vpc_security_group_ids      = [aws_security_group.DIGSYS-P3-TOOLS-SG.id]
  disable_api_termination     = "true"
  subnet_id                   = aws_subnet.DIGSYS-P3-XAPP-1B.id
  associate_public_ip_address = "false"
  key_name                    = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-tools01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
}

resource "aws_network_interface" "digsysp3-util01" {
  subnet_id       = aws_subnet.DIGSYS-P3-IAPP-1B.id
  private_ips     = ["10.11.189.94"]
  security_groups = [aws_security_group.DIGSYS-P3-UTIL-SG.id]
}

resource "aws_instance" "digsysp3-util01" {
  #checkov:skip=CKV_AWS_79: Ensure Instance Metadata Service Version 1 is not enabled
  #checkov:skip=CKV_AWS_135: Ensure that EC2 is EBS optimized
  #checkov:skip=CKV_AWS_126: Ensure that detailed monitoring is enabled for EC2 instances
  #checkov:skip=CKV_AWS_8: Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted
  ami                     = "ami-064831802eae3c1b0"
  instance_type           = "t3.2xlarge"
  iam_instance_profile    = "digsysp-digsysp-util01"
  disable_api_termination = "true"
  key_name                = "eom-prod-ff-1"
  tags = {
    "Name"                   = "digsysp3-util01",
    "Business-Unit"          = "Digital Systems",
    "Project-Code"           = "SME-2000-0590D+M"
    "Project-Name"           = "Digital Systems"
    "Environment"            = "Prod",
    "SERVER_TYPE"            = "EC2",
    "OS"                     = "AL3",
    "Patch Group"            = "General",
    "CLOPS_APPROVED"         = "YES",
    "ME_JOINED"              = "NO",
    "OPS"                    = "STND",
    "DATA"                   = "NORMAL",
    "OWNER"                  = "steve.leeds@sonymusic.com",
    "Terraform"              = "True",
    "CLOPS_FW"               = "YES"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
  }
  network_interface {
    network_interface_id = aws_network_interface.digsysp3-util01.id
    device_index         = 0
  }
}