module "failure_sns_topic" {
  source = "git@github.com:theorchard/terraform-sns.git//?ref=3.0.0"

  environment               = var.environment
  sns_topic_name            = var.failure_sns_topic
  application_family        = var.application_family
  sns_subscription_endpoint = var.notification_email
  sns_subscription_protocol = "email"
}


# create SNS Write policy
data "aws_iam_policy_document" "failure_destination_policy_document" {
  statement {
    effect = "Allow"
    actions = [
      "sns:Publish",
    ]
    resources = [
      module.failure_sns_topic.topic_arn
    ]
  }
}
resource "aws_iam_policy" "failure_destination_policy" {
  name        = "${var.environment}-failure-destination-policy"
  description = "Access failure_sns_topic from lambda"
  policy      = data.aws_iam_policy_document.failure_destination_policy_document.json
}