resource "aws_iam_policy_attachment" "grpsd-arvato-policy-attachment" {
  name       = "grpsd-arvato-policy-attachment"
  roles      = [aws_iam_role.grpsd-arvato-role.name]
  policy_arn = "arn:aws:iam::${var.account_id}:policy/grpsd-arvato-policy"
}

resource "aws_iam_policy_attachment" "lambda-monitor-rds-subnet-ips-policy-attachment" {
  name       = "lambda_monitor_rds_subnet_ips_policy_attachment"
  roles      = [aws_iam_role.lambda-monitor-rds-subnet-ips-role.name]
  policy_arn = aws_iam_policy.lambda-monitor-rds-subnet-ips-policy.arn
}

resource "aws_iam_policy_attachment" "openobserve-s3-access" {
  name       = "openobserve-s3-access"
  roles      = [aws_iam_role.openobserve-s3-role.name]
  policy_arn = aws_iam_policy.openobserve-s3-policy.arn
}