module "digsysp-apigw-group-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysp-apigw-group.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonAPIGatewayAdministrator",
    "arn:aws:iam::aws:policy/AmazonAPIGatewayInvokeFullAccess",
  ]
}

module "digsysp-jenkins-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysp-jenkins.name
  custom_group_policy_arns = [
    aws_iam_policy.eks_admin.arn,
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser",
    "arn:aws:iam::aws:policy/SecretsManagerReadWrite",
    aws_iam_policy.digsysp-jenkins-ecs-update.arn,
  ]
}

module "digsysp-s3-sme-mipr-rman-backups-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.digsysp-s3-sme-mipr-rman-backups.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/digsysp-s3-sme-mipr-rman-backups",
  ]
}