resource "aws_iam_policy" "digsysd-ALBIngressControllerIAMPolicy" {
  description = "digsysd-ALBIngressControllerIAMPolicy"
  name        = "digsysd-ALBIngressControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-ALBIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "Ingress-Policy_v1_to_v2" {
  description = "Ingress-Policy_v1_to_v2"
  name        = "Ingress-Policy_v1_to_v2"
  path        = var.path
  policy      = data.aws_iam_policy_document.Ingress-Policy_v1_to_v2.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "CertReadOnly" {
  description = "RO Policy for Certificates in DigsysP"
  name        = "CertReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.CertReadOnly.json
}

resource "aws_iam_policy" "sme-gen-custom" {
  name   = "sme-gen-custom"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-gen-custom.json
}

resource "aws_iam_policy" "rds-rman-s3" {
  name   = "rds-rman-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.rds-rman-s3.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1511524185262" {
  name   = "oneClick_flowlogsRole_1511524185262"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1511524185262.json
}

resource "aws_iam_policy" "athena_full" {
  name   = "athena_full"
  path   = var.path
  policy = data.aws_iam_policy_document.athena_full.json
}

resource "aws_iam_policy" "sme-digsysp-txmgr01" {
  description = "sme-digsysp-txmgr01"
  name        = "sme-digsysp-txmgr01"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-digsysp-txmgr01.json
}

resource "aws_iam_policy" "glue_admin" {
  name   = "glue_admin"
  path   = var.path
  policy = data.aws_iam_policy_document.glue_admin.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "digsysp-portal-policy" {
  description = "digsysp-portal-policy"
  name        = "digsysp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysp-portal-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585142410726" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585142410726"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585142410726.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1513245531782" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1513245531782"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1513245531782.json
}

resource "aws_iam_policy" "DMS-Access-Policy" {
  description = "DMS-Access-Policy"
  name        = "DMS-Access-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DMS-Access-Policy.json
}

resource "aws_iam_policy" "eks_admin" {
  name   = "eks_admin"
  path   = var.path
  policy = data.aws_iam_policy_document.eks_admin.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "cost-explore-ro"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "sme-digital-systems-prod-waf-logging-policy" {
  description = "sme-digital-systems-prod-waf-logging-policy"
  name        = "sme-digital-systems-prod-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-digital-systems-prod-waf-logging-policy.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "digsysp-trendmicro_esdomain_policy" {
  description = "For TMDS ELK"
  name        = "digsysp-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysp-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "salprod-events-xml" {
  description = "salprod-events-xml"
  name        = "salprod-events-xml"
  path        = var.path
  policy      = data.aws_iam_policy_document.salprod-events-xml.json
}

resource "aws_iam_policy" "DMS-Policy" {
  name   = "DMS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.DMS-Policy.json
}

resource "aws_iam_policy" "digsysp-s3-sme-mipr-rman-backups" {
  name   = "digsysp-s3-sme-mipr-rman-backups"
  path   = var.path
  policy = data.aws_iam_policy_document.digsysp-s3-sme-mipr-rman-backups.json
}

resource "aws_iam_policy" "digsysp-aws-config-policy" {
  description = "digsysp-aws-config-policy"
  name        = "digsysp-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysp-aws-config-policy.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" {
  description = "AWSLoadBalancerControllerIAMPolicy"
  name        = "AWSLoadBalancerControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "CWLogs-Put" {
  name   = "CWLogs-Put"
  path   = var.path
  policy = data.aws_iam_policy_document.CWLogs-Put.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-eomffp-drd" {
  name        = "KarpenterControllerPolicy-eomffp-drd"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-eomffp-drd.json
}

resource "aws_iam_policy" "ses-access-policy" {
  name   = "ses-access-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ses-access-policy.json
}

resource "aws_iam_policy" "RDSProxyIAMpolicy" {
  description = "RDSProxyIAMpolicy"
  name        = "RDSProxyIAMpolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSProxyIAMpolicy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-digsys-p3-eks" {
  name        = "KarpenterControllerPolicy-digsys-p3-eks"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy-digsys-p3-eks.json
}

resource "aws_iam_policy" "digsys-p3-eks-midict-prod-sa-role-policy" {
  description = "Access to assumerole"
  name        = "digsys-p3-eks-midict-prod-sa-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsys-p3-eks-midict-prod-sa-role-policy.json
}

resource "aws_iam_policy" "digsys-p3-ALBIngressControllerIAMPolicy" {
  description = "digsys-p3-ALBIngressControllerIAMPolicy"
  name        = "digsys-p3-ALBIngressControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsys-p3-ALBIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "ecr_full_access" {
  description = "Access to assumerole"
  name        = "ecr_full_access"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecr_full_access.json
}

resource "aws_iam_policy" "ecs_task_exec_secrets" {
  description = "Allow ecs task to use secrets manager"
  name        = "ecs_task_exec_secrets"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecs_task_exec_secrets.json
}

resource "aws_iam_policy" "digsysp-jenkins-ecs-update" {
  description = "Allow Jenkins to update ECS services"
  name        = "digsysp-jenkins-ecs-update"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysp-jenkins-ecs-update.json
}

resource "aws_iam_policy" "digsysp-supplychain-s3-access-policy" {
  description = "Policy to access objects in dsrv-dsp-package-xml-prod S3 bucket"
  name        = "digsysp-supplychain-s3-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysp-supplychain-s3-access-policy.json
}

resource "aws_iam_policy" "dra-orphan-lambda-eventbridge-policy" {
  description = "Policy for eventbridge to invoke DRA orphan Lambda"
  name        = "dra-orphan-lambda-eventbridge-policyy"
  path        = var.path
  policy      = data.aws_iam_policy_document.dra-orphan-lambda-eventbridge-policy.json
}

resource "aws_iam_policy" "digsysp-lambda-msk-access-policy" {
  description = "digsysp-lambda-msk-access-policy"
  name        = "digsysp-lambda-msk-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysp-lambda-msk-access-policy.json
}

resource "aws_iam_policy" "digsysp-lambda-states-execution-policy" {
  description = "digsysp-lambda-states-start-execution-policy"
  name        = "digsysp-lambda-states-start-execution-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysp-lambda-states-execution-policy.json
}