#
#Anthony Vitale Sept 24 2025
# Changed Cluster lsd-rds-pgdbstbmg1-dev-global-cluster-1 from V14 to V17
#
#
# Anthony Vitale Oct 8, 2025 Updated  Clusters lsd-rds-pgdbsibmg1-int-global-cluster-1 to Version V17 
#
#
# Anthony Vitale March 2 2026 
# Change Aurora Clusters auto_minor_version_upgrade to true to Correct Drift
# Change lsd-rds-pgdbsibmg1-int-global-cluster-1 to V17.7 in next maint window
#


resource "aws_rds_cluster" "lsd-rds-pgdbsibmg1-int-global-cluster-1" {
  # checkov:skip=CKV2_AWS_27:Ensure Postgres RDS as aws_rds_cluster has Query Logging enabled
  allocated_storage = 1
  availability_zones = [
    "us-east-1a",
    "us-east-1b",
    "us-east-1d",
  ]
  backtrack_window        = 0
  backup_retention_period = 35
  cluster_identifier      = "lsd-rds-pgdbsibmg1-int-global-cluster-1"
  cluster_members = [
    "lsd-rds-pgdbsibmg1-int-global-instance-2"
  ]
  copy_tags_to_snapshot           = true
  db_cluster_parameter_group_name = "aur-pg-v17-cluster-group-v001"
  db_subnet_group_name            = "grpsnv-d3-rds-sng"
  deletion_protection             = true
  enable_http_endpoint            = false
  enable_local_write_forwarding   = false
  enabled_cloudwatch_logs_exports = [
    "postgresql"
  ]
  engine                              = "aurora-postgresql"
  engine_mode                         = "provisioned"
  engine_version                      = "17.7"
  global_cluster_identifier           = "lsd-rds-pgdbsibmg1-int-global"
  iam_database_authentication_enabled = true
  iam_roles                           = []
  iops                                = 0
  kms_key_id                          = "arn:aws:kms:us-east-1:230315258045:key/efa04e80-b138-435d-aece-85e6f9cb9bce"
  master_username                     = "arfwrdsadmin"
  network_type                        = "IPV4"
  performance_insights_enabled        = true
  port                                = 5432
  preferred_backup_window             = "08:12-08:42"
  preferred_maintenance_window        = "sat:03:10-sat:04:10"
  replication_source_identifier       = "arn:aws:rds:eu-central-1:230315258045:cluster:lsd-rds-pgdbsibmg1-int-01-cluster"
  skip_final_snapshot                 = true
  storage_encrypted                   = true
  tags                                = {}
  tags_all                            = {}
  vpc_security_group_ids = [
    "sg-069667325c843fdb8",
  ]
}

resource "aws_rds_cluster" "lsd-rds-pgdbstbmg1-dev-global-cluster-1" {
  # checkov:skip=CKV2_AWS_27:Ensure Postgres RDS as aws_rds_cluster has Query Logging enabled
  allocated_storage = 1
  availability_zones = [
    "us-east-1a",
    "us-east-1b",
    "us-east-1c",
  ]
  backtrack_window        = 0
  backup_retention_period = 35
  cluster_identifier      = "lsd-rds-pgdbstbmg1-dev-global-cluster-1"
  cluster_members = [
    "lsd-rds-pgdbstbmg1-dev-global-instance-2",
  ]
  copy_tags_to_snapshot           = true
  db_cluster_parameter_group_name = "aur-pg-v17-cluster-group-v001"
  db_subnet_group_name            = "grpsnv-d3-rds-sng"
  deletion_protection             = true
  enable_http_endpoint            = false
  enable_local_write_forwarding   = false
  enabled_cloudwatch_logs_exports = [
    "postgresql"
  ]
  engine                              = "aurora-postgresql"
  engine_mode                         = "provisioned"
  engine_version                      = "17.7"
  global_cluster_identifier           = "lsd-rds-pgdbstbmg1-dev-global"
  iam_database_authentication_enabled = true
  iam_roles                           = []
  iops                                = 0
  kms_key_id                          = "arn:aws:kms:us-east-1:230315258045:key/efa04e80-b138-435d-aece-85e6f9cb9bce"
  master_username                     = "arfwrdsadmin"
  network_type                        = "IPV4"
  performance_insights_enabled        = true
  port                                = 5432
  preferred_backup_window             = "05:00-05:30"
  preferred_maintenance_window        = "sat:03:10-sat:04:10"
  replication_source_identifier       = "arn:aws:rds:eu-central-1:230315258045:cluster:lsd-rds-pgdbstbmg1-dev-01-cluster"
  skip_final_snapshot                 = true
  storage_encrypted                   = true
  tags = {
    "Business-Unit"            = "GRPS"
    "Environment"              = "Dev"
    "Owner"                    = "Richard Mayer"
    "Project-Code"             = "2000-0497G"
    "Project-name"             = "GRPS"
    "aws-migration-project-id" = "MPE22602"
    "map-migrated"             = "d-server-0174a2wn5rache"
    "pdmonitoring"             = "yes"
  }
  tags_all = {
    "Business-Unit"            = "GRPS"
    "Environment"              = "Dev"
    "Owner"                    = "Richard Mayer"
    "Project-Code"             = "2000-0497G"
    "Project-name"             = "GRPS"
    "aws-migration-project-id" = "MPE22602"
    "map-migrated"             = "d-server-0174a2wn5rache"
    "pdmonitoring"             = "yes"
  }
  vpc_security_group_ids = [
    "sg-060720910610cd2e5",
  ]
}