data "aws_iam_policy_document" "cf-templates-d2uimad4i1is-eu-central-1" {
  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::cf-templates-d2uimad4i1is-eu-central-1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}
data "aws_iam_policy_document" "gdsd-supraphon-uat-assets" {
  statement {
    sid    = "Stmt16452067593"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::gdsd-supraphon-uat-assets",
      "arn:aws:s3:::gdsd-supraphon-uat-assets/*",
    ]

    actions = [
      "s3:DeleteObject",
      "s3:Get*",
      "s3:List*",
      "s3:Put*",
      "s3:AbortMultipartUpload",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::107577002119:user/gdsd-supraphon",
        "arn:aws:iam::887829410671:role/ampd-ECS-Instance-Role",
        "arn:aws:iam::887829410671:role/ampd-EKS-worker-node-Role",
        "arn:aws:iam::887829410671:role/lambda-s3-sqs-access"
      ]
    }
  }
}





data "aws_iam_policy_document" "gdsd-audio-salad-uat-assets" {
  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::gdsd-audio-salad-uat-assets/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1627576770382"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::gdsd-audio-salad-uat-assets",
      "arn:aws:s3:::gdsd-audio-salad-uat-assets/*",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::887829410671:role/ampd-ECS-Instance-Role",
        "arn:aws:iam::887829410671:role/ampd-EKS-worker-node-Role",
        "arn:aws:iam::635220336377:user/gdsp-orchard-exddex-assets",
        "arn:aws:iam::019963779799:user/swbrdp-orchard02",
        #"arn:aws:iam::887829410671:role/ampd-ecs-ampd-external-event-dispatcher-taskdef-task-role",
        "arn:aws:iam::107577002119:role/sme-gds-uat-ampsv-role",
        "arn:aws:iam::107577002119:user/sme-gds-dev-AMPSV",
        "arn:aws:iam::107577002119:user/sme-gds-dev-GRPS",
        "arn:aws:iam::107577002119:user/gdsd-audio-salad-uat",
        "arn:aws:iam::887829410671:role/lambda-s3-sqs-access"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsd-fuga-uat-assets" {
  statement {
    sid    = "Stmt1645201767593"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::gdsd-fuga-uat-assets",
      "arn:aws:s3:::gdsd-fuga-uat-assets/*",
    ]

    actions = [
      "s3:DeleteObject",
      "s3:Get*",
      "s3:List*",
      "s3:Put*",
      "s3:AbortMultipartUpload",
      "s3:ListBucketMultipartUploads",
      "s3:ListMultipartUploadParts",
      "s3:GetBucketLocation",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::887829410671:role/ampd-ECS-Instance-Role",
        "arn:aws:iam::887829410671:role/ampd-EKS-worker-node-Role",
        "arn:aws:iam::107577002119:user/sme-gds-dev-GRPS",
        "arn:aws:iam::107577002119:role/lcsd-ddex-role",
        #"arn:aws:iam::887829410671:role/ampd-ecs-amps-external-event-dispatcher-taskdef-task-role",
        "arn:aws:iam::107577002119:user/gdsd-FUGA",
        "arn:aws:iam::107577002119:user/sme-gds-dev-AMPSV",
        "arn:aws:iam::107577002119:role/sme-gds-dev-ampsv-role",
        "arn:aws:iam::107577002119:role/globaldsd-ddex-qa-role",
        "arn:aws:iam::107577002119:role/sme-gds-uat-ampsv-role",
        "arn:aws:iam::107577002119:user/sme-gds-dev-GRPS-UAT",
        "arn:aws:iam::887829410671:role/lambda-s3-sqs-access",
      ]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::gdsd-fuga-uat-assets/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1664424176675"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::gdsd-fuga-uat-assets",
      "arn:aws:s3:::gdsd-fuga-uat-assets/*",
    ]

    actions = [
      "s3:GetObject",
      "s3:ListBucket",
      "s3:PutObject",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::635220336377:user/gdsp-mp-mike"]
    }
  }
}

data "aws_iam_policy_document" "gdsd-msk-dev-evnts" {
  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::gdsd-msk-dev-evnts/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "ExportPolicy"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::gdsd-msk-dev-evnts",
      "arn:aws:s3:::gdsd-msk-dev-evnts/*",
    ]

    actions = [
      "s3:PutObject*",
      "s3:ListBucket",
      "s3:GetObject*",
      "s3:DeleteObject*",
      "s3:GetBucketLocation",
    ]

    principals {
      type = "AWS"

      identifiers = [

        "arn:aws:iam::969009837416:user/aomad-ameba-admin",
      ]
    }
  }
}

data "aws_iam_policy_document" "sme-global-ds-dev-awsconfig" {
  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-dev-awsconfig/*"]
    actions   = ["s3:GetObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-dev-awsconfig"]
    actions   = ["s3:ListBucket"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:root"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-global-ds-dev-awsconfig/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "sme-global-ds-dev-cf-euc1-logs" {
  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-global-ds-dev-cf-euc1-logs/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}


data "aws_iam_policy_document" "sme-global-ds-dev-elb-euc1-logs" {
  statement {
    sid       = "AWSConsoleStmt-1560314855058"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-dev-elb-euc1-logs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::054676820928:root"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-dev-elb-euc1-logs/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-dev-elb-euc1-logs"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-global-ds-dev-elb-euc1-logs/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1649129565837"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-dev-elb-euc1-logs/*"]
    actions   = ["s3:PutObject"]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-global-ds-dev-exddex-dev-assets" {
  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-global-ds-dev-exddex-dev-assets/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1627576770382"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-global-ds-dev-exddex-dev-assets",
      "arn:aws:s3:::sme-global-ds-dev-exddex-dev-assets/*",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::887829410671:role/ampd-EKS-worker-node-Role",
        "arn:aws:iam::887829410671:role/ampd-ECS-Instance-Role",
        "arn:aws:iam::230315258045:user/grpsd-rmayer1",
        "arn:aws:iam::107577002119:role/lcsd-ddex-role",
        "arn:aws:iam::230315258045:role/DeepSecuritySetup-d8739381f-LambdaExecutionRole-1SE8TOH25G8T0",
        "arn:aws:iam::107577002119:user/sme-gds-dev-AMPSV",
        "arn:aws:iam::635220336377:user/gdsp-orchard-exddex-assets",
        "arn:aws:iam::107577002119:user/gdsd-FUGA",
        "arn:aws:iam::230315258045:role/lambdaGRPS-S3",
        "arn:aws:iam::019963779799:user/swbrdp-orchard02",
        "arn:aws:iam::887829410671:role/lambda-s3-sqs-access",
      ]
    }
  }
}

data "aws_iam_policy_document" "sme-global-ds-dev-exddex-uat-assets" {
  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-global-ds-dev-exddex-uat-assets/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }

  statement {
    sid    = "Stmt1627576770382"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::sme-global-ds-dev-exddex-uat-assets",
      "arn:aws:s3:::sme-global-ds-dev-exddex-uat-assets/*",
    ]

    actions = ["s3:*"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::887829410671:role/ampd-ECS-Instance-Role",
        "arn:aws:iam::887829410671:role/ampd-EKS-worker-node-Role",
        "arn:aws:iam::635220336377:user/gdsp-orchard-exddex-assets",
        "arn:aws:iam::019963779799:user/swbrdp-orchard02",
        "arn:aws:iam::107577002119:role/sme-gds-uat-ampsv-role",
        "arn:aws:iam::107577002119:user/sme-gds-dev-AMPSV",
        "arn:aws:iam::107577002119:user/sme-gds-dev-GRPS",
        "AROA45NWBWNXRWLJMTHEN",
        "arn:aws:iam::887829410671:role/lambda-s3-sqs-access"
      ]
    }
  }
}

data "aws_iam_policy_document" "sme-global-ds-dev-s3-euc1-logs" {
  statement {
    sid       = "S3PolicyStmt-DO-NOT-MODIFY-1641878804843"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-dev-s3-euc1-logs/*"]

    actions = [
      "s3:PutObject",
      "s3:PutObjectAcl",
    ]

    principals {
      type        = "Service"
      identifiers = ["logging.s3.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-global-ds-gds-s1" {
  statement {
    sid       = "AWSLogDeliveryWrite"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-gds-s1/AWSLogs/107577002119/*"]
    actions   = ["s3:PutObject"]

    condition {
      test     = "StringEquals"
      variable = "s3:x-amz-acl"
      values   = ["bucket-owner-full-control"]
    }

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = "AWSLogDeliveryAclCheck"
    effect    = "Allow"
    resources = ["arn:aws:s3:::sme-global-ds-gds-s1"]
    actions   = ["s3:GetBucketAcl"]

    principals {
      type        = "Service"
      identifiers = ["delivery.logs.amazonaws.com"]
    }
  }

  statement {
    sid       = ""
    effect    = "Deny"
    resources = ["arn:aws:s3:::sme-global-ds-gds-s1/*"]
    actions   = ["*"]

    condition {
      test     = "Bool"
      variable = "aws:SecureTransport"
      values   = ["false"]
    }

    principals {
      type        = "*"
      identifiers = ["*"]
    }
  }
}

data "aws_iam_policy_document" "gdsd-ddex-general-uat" {
  statement {
    sid    = "Stmt1645201767594"
    effect = "Allow"

    resources = [
      "arn:aws:s3:::gdsd-ddex-general-uat",
      "arn:aws:s3:::gdsd-ddex-general-uat/*",
    ]

    actions = [
      "s3:DeleteObject",
      "s3:GetObject",
      "s3:ListBucket",
      "s3:PutObject",
      "s3:AbortMultipartUpload",
      "s3:ListBucketMultipartUploads",
      "s3:ListMultipartUploadParts",
      "s3:GetBucketLocation",
    ]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::107577002119:user/gdsd-ddex-general",
      ]
    }
  }
}