module "cf-templates-6uadb4178z7p-eu-central-1" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "cf-templates-6uadb4178z7p-eu-central-1"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.cf-templates-6uadb4178z7p-eu-central-1.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "cf-templates-6uadb4178z7p-eu-central-1"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "cf-templates-6uadb4178z7p-us-east-1" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "cf-templates-6uadb4178z7p-us-east-1"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-us-east-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "cf-templates-6uadb4178z7p-us-east-1"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "digital-systems-prod-frankfurt-elb-logs" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "digital-systems-prod-frankfurt-elb-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.digital-systems-prod-frankfurt-elb-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "digital-systems-prod-frankfurt-elb-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "digsys-ff-2audit-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "digsys-ff-2audit-vpc-flow-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "digsys-ff-2audit-vpc-flow-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "digsys-ff-audit-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "digsys-ff-audit-vpc-flow-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.digsys-ff-audit-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "digsys-ff-audit-vpc-flow-logs"
    Owner                    = "Sheila Eckert"
    Classification           = "internal-use-only"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "dms-799833541840-cvjcnngozmcw" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "dms-799833541840-cvjcnngozmcw"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.dms-799833541840-cvjcnngozmcw.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Prod"
    Name                     = "dms-799833541840-cvjcnngozmcw"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "eom-ff-p-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "eom-ff-p-vpc-flow-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.eom-ff-p-vpc-flow-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "eom-ff-p-vpc-flow-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Classification           = "internal-use-only"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "eom-prod-rds-log-backup" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "eom-prod-rds-log-backup"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = {
    rule = {
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:us-east-1:799833541840:key/77184473-51c8-4595-b262-46d8b2c246a3"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging = {
    target_bucket = "sme-digital-systems-prod-us-east-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.eom-prod-rds-log-backup.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "eom-prod-rds-log-backup"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-digital-systems-prod-athena-out" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-athena-out"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Prod"
    Name                     = "sme-digital-systems-prod-athena-out"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-prod-aws-config" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-aws-config"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-prod-aws-config.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "sme-digital-systems-prod-aws-config"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-prod-eu-central-1-logs" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-eu-central-1-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-prod-eu-central-1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "sme-digital-systems-prod-eu-central-1-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    USE                      = "LOGGING"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "LOGGING" }
}

module "sme-digital-systems-prod-euc1-s3-inventory" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-euc1-s3-inventory"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-prod-euc1-s3-inventory.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Prod"
    Name                     = "sme-digital-systems-prod-euc1-s3-inventory"
    Project-Code             = "SME-2000-0590E"
    Classification           = "internal-use-only"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digital-systems-prod-ssm-out" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-ssm-out"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "sme-digital-systems-prod-ssm-out"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Classification           = "internal-use-only"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-digital-systems-prod-us-east-1-logs" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-us-east-1-logs"
  versioning = {
    enabled = true
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-prod-us-east-1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "sme-digital-systems-prod-us-east-1-logs"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    USE                      = "LOGGING"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "LOGGING" }
}

module "sme-digital-systems-prod-use1-s3-inventory" {
  #checkov:skip=CKV2_AWS_6: Ensure that S3 bucket has a Public Access block
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV2_AWS_61: Ensure that an S3 bucket has a lifecycle configuration
  #checkov:skip=CKV_AWS_18: Ensure the S3 bucket has access logging enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-use1-s3-inventory"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-us-east-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digital-systems-prod-use1-s3-inventory.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Prod"
    Name                     = "sme-digital-systems-prod-use1-s3-inventory"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "CLOUDOPS" }
}

module "sme-digsysp-txmgr01" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digsysp-txmgr01"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digsysp-txmgr01.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "EOM"
    Environment              = "Prod"
    Name                     = "sme-digsysp-txmgr01"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "APP-SUPPORT"
   }
}

module "sme-max-data-prod-mi" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-data-prod-mi"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-data-prod-mi.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "sme-max-data-prod-mi"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-max-data-prod-oh" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-max-data-prod-oh"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-max-data-prod-oh.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "sme-max-data-prod-oh"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-mipr-rman-backups" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-mipr-rman-backups"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-mipr-rman-backups.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-unit = "EOM"
    Environment              = "prod"
    Name                     = "sme-mipr-rman-backups"
    Owner                    = "Sheila Eckert"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "EOM"
    aws-migration-project-id = "MPE22602"
  map-migrated = "d-server-02sa4nzuab143a"
  Terraform = "True"
  Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "sme-digsp-mi-dictionary-on-demand" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digsp-mi-dictionary-on-demand"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digsp-mi-dictionary-on-demand.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { 
    Business-unit            = "SME-Digital-Systems"
    Environment              = "prod"
    Name                     = "sme-digsp-mi-dictionary-on-demand"
    Owner                    = "Steve Leeds"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "Digital-Systems"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
    Purpose                  = "APP-SUPPORT" 
  }
}

module "sme-digsp-mi-dictionary-regular-batch" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digsp-mi-dictionary-regular-batch"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-digsp-mi-dictionary-regular-batch.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { 
    Business-unit            = "SME-Digital-Systems"
    Environment              = "prod"
    Name                     = "sme-digsp-mi-dictionary-regular-batch"
    Owner                    = "Steve Leeds"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "Digital-Systems"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-02sa4nzuab143a"
    Terraform                = "True"
    Classification           = "internal-use-only"
    Purpose                  = "APP-SUPPORT" 
  }
}

module "sme-digital-systems-prod-digsys-p3-vpc-flow-logs" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-digital-systems-prod-digsys-p3-vpc-flow-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "sme-digital-systems-prod/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {    Name = "sme-digital-systems-prod-digsys-p3-vpc-flow-logs"
    Business-Unit  = "Digital Systems"
    Environment    = "Prod"
    Project-Code   = "SME-2000-0590D+M"
    Project-Name   = "Digital Systems"
    Terraform      = "True"
    Classification = "internal-use-only"
    Purpose        = "CLOUDOPS" }
}

module "digsys-eom-prod-sam-deploy" {
  #checkov:skip=CKV_AWS_145: Ensure that S3 buckets are encrypted with KMS by default
  #checkov:skip=CKV_AWS_19: Ensure all data stored in the S3 bucket is securely encrypted at rest
  #checkov:skip=CKV_AWS_21: Ensure all data stored in the S3 bucket have versioning enabled
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration sets period for aborting failed uploads
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "digsys-eom-prod-sam-deploy"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-digital-systems-prod-eu-central-1-logs"
    target_prefix = "digsys-eom-prod-sam-deploy/"
  }

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = true
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Business-unit            = "SME-Digital-Systems"
    Environment              = "prod"
    Name                     = "digsys-sam-deploy"
    Owner                    = "Steve Leeds"
    Project-Code             = "SME-2000-0590E"
    Project-Name             = "Digital-Systems"
    Terraform                = "True"
    Classification           = "internal-use-only"
    Purpose                  = "APP-SUPPORT" 
  }
}