module "grpsd-avitale-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.grpsd-avitale.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/CloudWatchFullAccess",
    "arn:aws:iam::aws:policy/AWSDirectoryServiceFullAccess",
    "arn:aws:iam::aws:policy/AWSCertificateManagerPrivateCAFullAccess",
    "arn:aws:iam::aws:policy/AWSCertificateManagerFullAccess",
    "arn:aws:iam::${var.account_id}:policy/RDS-Copy-Snapshot-Deny",
    "arn:aws:iam::${var.account_id}:policy/WorkspaceFullAccess",
    "arn:aws:iam::${var.account_id}:policy/rds-db-connect-1",
    "arn:aws:iam::${var.account_id}:policy/grps-dba-dev",
    "arn:aws:iam::${var.account_id}:policy/lcsd-ddex-role-sts",
  ]
}

module "grpsd-localenv-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.grpsd-localenv.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/grpsd-localenv-access-policy",
  ]
}

module "grpsd-polly-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.grpsd-polly.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/ReadOnlyAccess",
    "arn:aws:iam::aws:policy/AmazonPollyFullAccess",
  ]
}

module "lbcpyd-rrmobile-wo-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.lbcpyd-rrmobile-wo.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/lbcpyd-rrmobile-wo-policy",
  ]
}
module "grpsd_dudi001-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.grpsd_dudi001.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/grpsd-dudi001-secretsmanager-read",
  ]
}

module "lbcpyd-test-user-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.lbcpyd-test-user.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/lbcpyd-test-user-s3-access",
  ]
}