resource "aws_rds_cluster" "gateway-uat-rds" {
  #checkov:skip=CKV2_AWS_27: Ensure Postgres RDS as aws_rds_cluster has Query Logging enabled
  allocated_storage = 1
  availability_zones = [
    "eu-central-1a",
    "eu-central-1b",
    "eu-central-1c",
  ]
  backtrack_window        = 0
  backup_retention_period = 14
  cluster_identifier      = "gateway-uat-rds"
  cluster_members = [
    "gateway-uat-rds-01",
  ]
  copy_tags_to_snapshot            = true
  database_name                    = "gateway"
  db_cluster_parameter_group_name  = "gw-uat-apg17-cluster-params"
  db_instance_parameter_group_name = "gw-uat-apg17-instance-params"
  db_subnet_group_name             = "gds-u1-rds-sng"
  deletion_protection              = true
  enable_http_endpoint             = false
  enabled_cloudwatch_logs_exports = [
    "postgresql",
  ]
  engine                              = "aurora-postgresql"
  engine_mode                         = "provisioned"
  engine_version                      = "17.7"
  iam_database_authentication_enabled = true
  iam_roles                           = []
  iops                                = 0
  kms_key_id                          = "arn:aws:kms:eu-central-1:107577002119:key/d22d5808-e534-4530-8f61-323511ec7c7f"
  master_username                     = "master_rds"
  network_type                        = "IPV4"
  port                                = 5432
  preferred_backup_window             = "07:00-07:30"
  preferred_maintenance_window        = "sun:08:00-sun:08:30"
  skip_final_snapshot                 = true
  storage_encrypted                   = true
  tags                                = {}
  tags_all                            = {}
  apply_immediately                   = true
  allow_major_version_upgrade         = true
  vpc_security_group_ids = [
    "sg-0cea4aef90af6b58b",
  ]

}