data "aws_iam_policy_document" "AnsibleAWSServiceAccess-globaldsp-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::943540511943:role/AnsibleDevCrossAccountAccess",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-tower01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
      ]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForAmazonGuardDuty-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["guardduty.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector2.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForAmazonSSM-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ssm.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForBackup-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["backup.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForCloudFormationStackSetsOrgMember-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["member.org.stacksets.cloudformation.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForFMS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["fms.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForMarketplaceLicenseManagement-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["license-management.marketplace.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForOrganizations-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["organizations.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForSSO-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["sso.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForSupport-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["support.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "AWSServiceRoleForTrustedAdvisor-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["trustedadvisor.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "DeepSecurity-3819346f4-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["F409846A-5B8E-3609-1237-28D6556B4B4F"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::147995105371:root"]
    }
  }
}
data "aws_iam_policy_document" "DeepSecuritySetup-3819346f4-LambdaExecutionRole-1RKANF6N4Z96K-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "flowlogsRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["vpc-flow-logs.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "globaldsp-aws-config-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["config.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "globaldsp-portal-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-portal01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-reports01",
      ]
    }
  }
}
data "aws_iam_policy_document" "globaldsp-trendmicro_esdomain_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "GSIRT_AWS_Monitoring_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:role/splunk_ec2_api_server_role"]
    }
  }
}
data "aws_iam_policy_document" "logs_check-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "OrganizationAccountAccessRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::970903126758:root"]
    }
  }
}
data "aws_iam_policy_document" "PrismaCloudReadOnlyRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["fd02c720-1410-4f0b-9378-395cacaaa278"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::188619942792:root"]
    }
  }
}
data "aws_iam_policy_document" "PrismaCloudReadWriteRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["fd02c720-1410-4f0b-9378-395cacaaa278"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::188619942792:root"]
    }
  }
}
data "aws_iam_policy_document" "RDSAdmin-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/gvamsik",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/dwenger",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sira001",
      ]
    }
  }
}
data "aws_iam_policy_document" "sme-global-ds-prod-ct-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["cloudtrail.amazonaws.com"]
    }
  }
}
data "aws_iam_policy_document" "stacksets-exec-681219392bfdde9951179cb20ffea4ef-trust-policy" {
  statement {
    sid     = "1"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::970903126758:role/aws-service-role/stacksets.cloudformation.amazonaws.com/AWSServiceRoleForCloudFormationStackSetsOrgAdmin"]
    }
  }
}

data "aws_iam_policy_document" "GDS-P-amazonEKSIngresscontrollerrole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::635220336377:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5"]
    }
  }
}

data "aws_iam_policy_document" "GDS-P-eks-global-ds-prod-ns-global-ds-sa-gateway-role-trust-policy" {

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:sub"
      values   = ["system:serviceaccount:global-ds:gw"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::635220336377:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::635220336377:role/GDS-P-EKS-worker-node-Role",

      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-lcsp-rdx-chd-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::918817604416:role/lcsp-ddex-eks-prod-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "global-ds-eks-developer-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbmonitor01"]
    }
  }
}

data "aws_iam_policy_document" "globaldsp-ameba-ddex-rel-mgr-prod-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:sub"
      values   = [
        "system:serviceaccount:global-ds:ddex-rims",
        "system:serviceaccount:global-ds:ddex-rims-scheduler"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::635220336377:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::635220336377:role/GDS-P-EKS-worker-node-Role"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-ameba-ec-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:sub"
      values   = ["system:serviceaccount:global-ds:ec-backfill"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::635220336377:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::635220336377:role/GDS-P-EKS-worker-node-Role"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "globaldsp-ameba-sr-prod-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::635220336377:role/GDS-P-EKS-worker-node-Role"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-ameba-ks-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:sub"
      values   = ["system:serviceaccount:global-ds:ks-ds"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::635220336377:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::635220336377:role/GDS-P-EKS-worker-node-Role"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

}

data "aws_iam_policy_document" "sme-gds-prod-ampsv-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::554998489284:role/ampp-ecs-ampp-asset-srv-gateway-taskdef-task-role",
        "arn:aws:iam::554998489284:role/ampp-ECS-Instance-Role",
        "arn:aws:iam::554998489284:role/ampp-ecs-amps-external-event-dispatcher-taskdef-task-role",
        "arn:aws:iam::554998489284:role/ampp-eks-amp-prod-as-asset-service-sa-role",
        "arn:aws:iam::554998489284:role/ampp-EKS-worker-node-Role",
      ]
    }
  }
}

data "aws_iam_policy_document" "globaldsp-switchboard-prod-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:sub"
      values   = ["system:serviceaccount:global-ds:ddex-rims"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::635220336377:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::019963779799:role/orch-switchboard-prod",
        "arn:aws:iam::019963779799:role/sme-prod-switchboard-task-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-clopsd-awaxd-dbutils01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbutils02",
        "arn:aws:iam::943540511943:role/clopsd-awaxd-dbutils01",
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-ddex-filewatcher-prod-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::918817604416:role/lcsp-ddex-eks-prod-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "global-ds-prod-logs-es-lambda-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ReadOnlyInfosec-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::943540511943:role/ReadOnlyInfoSec",
      ]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-ddex-filewatcher-fuga-prod-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/A2D990F2066BE9CD8C8340D787755C69:sub"
      values   = ["system:serviceaccount:prod-ddex-watcher-fuga:ddex-watcher"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::918817604416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/A2D990F2066BE9CD8C8340D787755C69"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::918817604416:role/lcsp-ddex-eks-prod-role",
        "arn:aws:iam::918817604416:role/lcsp-EKS-worker-node-Role",
      ]
    }
  }
}

data "aws_iam_policy_document" "DatadogAWSIntegrationRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["3407cc2e31f44d71bbb55f404c78a6e9"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::464622532012:root"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-github-actions-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "token.actions.githubusercontent.com:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringLike"
      variable = "token.actions.githubusercontent.com:sub"
      values   = ["repo:SME-AOMA/*", "repo:SME-databases/*"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::635220336377:oidc-provider/token.actions.githubusercontent.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
      "sts:TagSession",
    ]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::107577002119:role/GDS-D-globalsd-gitrun01"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-ameba-labelcopy-msk-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-ameba-link-service-prod-role",
        "arn:aws:iam::613871678587:role/aomap-ameba-labelcopy-loader-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-mi-dict-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::799833541840:role/digsys-p3-eks-midict-prod-sa-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-scuba-msk-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::250735107403:role/service-role/cap-v-rdx-etl",
        "arn:aws:iam::907595137996:role/cap-v-stars-rdx-etl-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-eom-eai-ext-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::799833541840:role/digsysp-eks-prod-health-monitor-sa-role",
        "arn:aws:iam::799833541840:role/dsms-task-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "globaldsp-aoma-txmgr-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-ecs-aomap-txmgr-taskdef-task-role",
        "arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-ns-txmgr-digital-assurance-service-role",
        "arn:aws:iam::613871678587:role/aomap-ECS-Instance-Role"
      ]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::613871678587:role/aomap-txmgr-kafka-consumer-service-role"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-aoma-service-msk-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-eks-aoma2-kafka-sa-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-ameba-msk-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-ameba-evnt-hist-prod-role",
        "arn:aws:iam::613871678587:role/aomap-eks-ameba-prod-ns-ameba-private-sa-ec-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "globaldsp-msk-delivery-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::023180329437:role/delp-EKS-worker-node-Role",
        "arn:aws:iam::023180329437:role/prod-asset-requester-role",
        "arn:aws:iam::023180329437:role/delp2-service-discovery-ECSInstanceRole",
        "arn:aws:iam::023180329437:role/delp2-conversion-role",
        "arn:aws:iam::023180329437:role/delp2-ddexws-task-role",
        "arn:aws:iam::023180329437:role/delp-delp3-wfdash01",
        "arn:aws:iam::023180329437:role/delp2-packager-role",
        "arn:aws:iam::023180329437:role/delivery-bulk-operation-role",
        "arn:aws:iam::023180329437:role/delp2-delivery-util-ec2-role",
        "arn:aws:iam::023180329437:role/dsrv-prod-eks-cluster-ns-delivery-prod-sa-ddex-exchange-role",
        "arn:aws:iam::023180329437:role/delp-watermarking-role",
        "arn:aws:iam::023180329437:role/delivery-package-archiver-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "globaldsp-msk-mcnv-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-qms-role",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-ws-role",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-cs-role",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-ccc-role",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-dc-role",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-vw-role",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-cms-role",
        "arn:aws:iam::638682502729:role/mcp-batch-ecs-task-role",
        "arn:aws:iam::638682502729:role/ecsInstanceRole",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-prod-sa-sme-mc-ar-role",
        "arn:aws:iam::638682502729:role/mconp-eks-mconp-del-prod-02-ns-mc-del-prod-sa-sme-mc-qms-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-msk-mcnv-promo-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::505950216627:role/promop-eks-mconp-promo-prod2-ns-mc-promo-prod-sa-sme-mc-cs-role",
        "arn:aws:iam::505950216627:role/promop-eks-mconp-promo-prod2-ns-mc-promo-prod-sa-sme-mc-dc-role",
        "arn:aws:iam::505950216627:role/mconp-promo-prod2-ns-mc-promo-prod-sa-sme-mc-qms-role",
        "arn:aws:iam::505950216627:role/mcp-batch-ecs",
        "arn:aws:iam::505950216627:role/ecsInstanceRole",
        "arn:aws:iam::505950216627:role/promop-eks-mconp-promo-prod2-ns-mc-promo-prod-sa-sme-mc-ws-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-aoma-msk-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole"
    ]
    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::613871678587:role/aomap-ECS-Instance-Role",
        "arn:aws:iam::613871678587:role/ameba-prod-ns-aoma3-sa-aoma-health-metrics-role",
        "arn:aws:iam::613871678587:role/aomap-ms-ns-aoma3-sa-aoma-export-service-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-lcsp-rdx-chd-ro-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::918817604416:role/lcsp-prod-rdx-chd-ro-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "EKSFargatePodExecutionRole-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["eks-fargate-pods.amazonaws.com"]
    }
  }
}


data "aws_iam_policy_document" "KarpenterControllerRole-global-ds-prod-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:TagSession",
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["pods.eks.amazonaws.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRoleWithWebIdentity"
    ]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/99CE7C76E93AFCEB98593AE7F3B3ADE5:sub"
      values   = ["system:serviceaccount:kube-system:karpenter"]
    }
  }
}

data "aws_iam_policy_document" "RDSProxyIAMRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-ddex-general-s3-access-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::107577002119:user/gdsd-ddex-general"]
    }
  }
}

data "aws_iam_policy_document" "gdsp-lcsp-akhq-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::918817604416:role/lcsp-eks-use1-prod-akhq-role",
      ]
    }
  }
}


#data "aws_iam_policy_document" "RDS-role-for-lambda-trust-policy" {
#  statement {
#    sid     = ""
#    effect  = "Allow"
#    actions = ["sts:AssumeRole"]

#    principals {
#     type        = "Service"
#      identifiers = ["lambda.amazonaws.com"]
#   }
#  }
#}

data "aws_iam_policy_document" "globalds_RDS_snapshot_lambda-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds-export.aws.internal"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["export.rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "globaldsp-lcsp-eks-euc1-prod-chd-publish-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::918817604416:role/lcsp-eks-euc1-prod-corso-role"
      ]
    }
  }
}

data "aws_iam_policy_document" "gdsp-prod-eom2app-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRole",
    ]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::799833541840:role/digsysp-digsysp-eai2app01"
      ]
    }
  }
}