data "aws_iam_policy_document" "AnsibleAWSServiceAccess-LCS-D-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-tower01",
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
        "arn:aws:iam::943540511943:role/AnsibleDevCrossAccountAccess",
      ]
    }
  }
}

data "aws_iam_policy_document" "AWSBackupDefaultServiceRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["backup.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonEKS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonElasticFileSystem-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticfilesystem.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonElasticsearchService-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["es.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonGuardDuty-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["guardduty.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonInspector2-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["inspector2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAmazonSSM-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ssm.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForAutoScaling-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["autoscaling.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForBackup-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["backup.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForCloudFormationStackSetsOrgMember-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["member.org.stacksets.cloudformation.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForElasticLoadBalancing-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["elasticloadbalancing.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForFMS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["fms.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForKafka-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["kafka.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForMarketplaceLicenseManagement-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["license-management.marketplace.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForOrganizations-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["organizations.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForRDS-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForRoute53Resolver-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["route53resolver.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForSSO-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["sso.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForSupport-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["support.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForTrustedAdvisor-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["trustedadvisor.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWSServiceRoleForVPCTransitGateway-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["transitgateway.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "AWS_Events_Invoke_Inspector_Assessment_Template-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["events.amazonaws.com"]
    }
  }
}



data "aws_iam_policy_document" "CognitoAccessForAmazonES-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["es.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "Cognito_grps_kibana_usersAuth_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "cognito-identity.amazonaws.com:aud"
      values   = ["eu-central-1:a98131c6-363d-4908-85ea-febef2df2b44"]
    }

    condition {
      test     = "ForAnyValue:StringLike"
      variable = "cognito-identity.amazonaws.com:amr"
      values   = ["authenticated"]
    }

    principals {
      type        = "Federated"
      identifiers = ["cognito-identity.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "cognito-identity.amazonaws.com:aud"
      values   = ["us-east-1:10915b09-0672-4a59-a138-165073fa74aa"]
    }

    condition {
      test     = "ForAnyValue:StringLike"
      variable = "cognito-identity.amazonaws.com:amr"
      values   = ["authenticated"]
    }

    principals {
      type        = "Federated"
      identifiers = ["cognito-identity.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "DatadogAWSIntegrationRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["d5c68907c05b41d594aabad67fc9acb4"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::464622532012:root"]
    }
  }
}

data "aws_iam_policy_document" "DeepSecurity-d8739381f-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["F409846A-5B8E-3609-1237-28D6556B4B4F"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::147995105371:root"]
    }
  }
}

data "aws_iam_policy_document" "DeepSecuritySetup-d8739381f-LambdaExecutionRole-1SE8TOH25G8T0-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "flowlogsRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["vpc-flow-logs.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "grps-dba-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/avitale",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/grpsd-avitale",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/horv001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pap03",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/rmayer1",
        aws_iam_user.grpsd-avitale.arn
      ]
    }
  }
}

data "aws_iam_policy_document" "grps-dev-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/simo065",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/feke001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/reti003",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/budd001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/ajto001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mari105",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/rmayer1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/mull013",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/fint001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/meye002",
        "arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-bastion02",
        aws_iam_user.grps-dev.arn
      ]
    }
  }
}

data "aws_iam_policy_document" "grps-lamda-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/rmayer1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/avitale",
      ]
    }
  }
}

data "aws_iam_policy_document" "grpsd-amazonEKSloadbalancercontrollerrole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/A2D990F2066BE9CD8C8340D787755C69:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/A2D990F2066BE9CD8C8340D787755C69:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::918817604416:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/A2D990F2066BE9CD8C8340D787755C69"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/0C9CE4CD7B159C3E0707D4D13201470E:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/0C9CE4CD7B159C3E0707D4D13201470E:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::918817604416:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/0C9CE4CD7B159C3E0707D4D13201470E"]
    }
  }
}

data "aws_iam_policy_document" "GSIRT_AWS_Monitoring_Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::797906716436:role/splunk_ec2_api_server_role"]
    }
  }
}

data "aws_iam_policy_document" "labcpyd-eks-grpsd-rdx-sa-grps-java-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/81540508D435CD66BD617DFAA7BB1B8F:sub"
      values   = ["system:serviceaccount:rdx:grps-java"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/81540508D435CD66BD617DFAA7BB1B8F"]
    }
  }
}

data "aws_iam_policy_document" "labcpyd-eks-sme-label-copy-schedule-dev-euc1-cluster-01-sa-rdx-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values = [
        "system:serviceaccount:rdx-federation:rdx",
        "system:serviceaccount:stage-federation-rdx:federation",
        "system:serviceaccount:dev-federation-rdx:federation",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
}

data "aws_iam_policy_document" "lambdaGRPS-S3-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lbcpy-schd-eks-efs-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"

      values = [
        "system:serviceaccount:stage-grps-dra:grps",
        "system:serviceaccount:stage-grps-rdx:grps",
        "system:serviceaccount:dev-grps-rdx:grps",
        "system:serviceaccount:dev-grps-dra:grps",
        "system:serviceaccount:dev-grps-rr:grps",
        "system:serviceaccount:stage-grps-rr:grps",
        "system:serviceaccount:kube-system:efs-csi-controller-sa",
        "system:serviceaccount:dev-grps-grpsweb:grps",
        "system:serviceaccount:stage-grps-grpsweb:grps",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
}

data "aws_iam_policy_document" "lbcpyd-amazonEKSIngresscontrollerrole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.region-code.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.region-code.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/A7B009A5183F67FDDF87428CA41C74B1:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/A7B009A5183F67FDDF87428CA41C74B1:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/A7B009A5183F67FDDF87428CA41C74B1"]
    }
  }
}

data "aws_iam_policy_document" "lbcpyd-amazonEKSIngresscontrollerrole-eks-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/A7B009A5183F67FDDF87428CA41C74B1:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/A7B009A5183F67FDDF87428CA41C74B1:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/A7B009A5183F67FDDF87428CA41C74B1"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values   = ["system:serviceaccount:kube-system:aws-load-balancer-controller"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "lbcpyd-eks-grpsd-rdx-sa-secretmanager-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-west-2.amazonaws.com/id/81540508D435CD66BD617DFAA7BB1B8F:sub"
      values   = ["system:serviceaccount:rdx:grps-java"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-west-2.amazonaws.com/id/81540508D435CD66BD617DFAA7BB1B8F"]
    }
  }
}

data "aws_iam_policy_document" "lbcpyd-lambda-elasticsearch-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lbcpyd-rdx-eks-developer-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbmonitor01"]
    }
  }
}

data "aws_iam_policy_document" "lblschd-aws-config-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["config.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lblschd-portal-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-reports01",
        "arn:aws:iam::476717493283:role/ccshr-cip-reports01",
        "arn:aws:iam::476717493283:role/clshrd-p-clshrd-portal01",
        "arn:aws:iam::476717493283:role/ccshr-cip-portal01",
      ]
    }
  }
}

data "aws_iam_policy_document" "lblschd-prometheus-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-clshrd-prometheus"]
    }
  }
}

data "aws_iam_policy_document" "lblschd-trendmicro_esdomain_role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-ddex-eks-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values = [
        "system:serviceaccount:ddex-watcher-stage:ddex-watcher",
        "system:serviceaccount:dev-ddex-watcher:ddex-watcher",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02",
        aws_iam_user.grps-dev.arn
      ]
    }
  }
}

data "aws_iam_policy_document" "lcsd-EKS-Service-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["eks.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-sme-lcsdev-euc1-cluster-01-sa-ddex-watcher-stage-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"

      values = [
        "system:serviceaccount:ddex-watcher-qa:ddex-watcher",
        "system:serviceaccount:stage-ddex-watcher:ddex-watcher",
        "system:serviceaccount:stage-ddex-watcher-fuga:ddex-watcher",
        "system:serviceaccount:stage-ddex-watcher-audiosalad:ddex-watcher",
        "system:serviceaccount:stage-ddex-watcher-supraphon:ddex-watcher",
        "system:serviceaccount:stage-ddex-watcher-bytedance:ddex-watcher",
        "system:serviceaccount:stage-ddex-watcher-general:ddex-watcher",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::230315258045:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-EKS-worker-node-Role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-application02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-application03-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-gitrun01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-int-pgbouncer02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-pgb-test01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-pgbouncer02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-pgb_test01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-utilities01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsd2-utilities02-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-grpsnvd3-application01-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "logs_check-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "OrganizationAccountAccessRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::970903126758:root"]
    }
  }
}

data "aws_iam_policy_document" "PrismaCloudReadOnlyRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    condition {
      test     = "StringEquals"
      variable = "sts:ExternalId"
      values   = ["1b0e3676-4871-42c1-b89c-236247125d77"]
    }

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::188619942792:root"]
    }
  }
}

data "aws_iam_policy_document" "rds-monitoring-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["monitoring.rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "ReadOnlyExtern-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/anierho",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/rmayer1",
        "arn:aws:iam::943540511943:role/ReadOnlyInfoSec",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/sasi001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/avitale",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/hont002",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/liou001",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/veru005",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/npatel1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/thom027",
      ]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/ccshr-ec2-eksmngr"]
    }
  }
}

data "aws_iam_policy_document" "SecretsManagerRDSPostgreS-SecretsManagerRDSPostgre-1SEPCTZWS7BZG-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "RDS-Secret-Rotation-Super-SecretsManagerRDSPostgre-1XGWSEWRJREOW-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "SecretsManagerRDSPostgreS-SecretsManagerRDSPostgre-2KFTDSJWP4G9-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "SecretsManagerRDSPostgreS-SecretsManagerRDSPostgre-QQIDWXTM9XGY-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "RDS-Secret-Rotation-Norma-SecretsManagerRDSPostgre-V6DYHZACJ60-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "sme-eros-rdx-eks-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values = [
        "system:serviceaccount:dev-eros-rdx:eros",
        "system:serviceaccount:stage-eros-rdx:eros",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
}

data "aws_iam_policy_document" "sme-labelcopy-schedule-dev-gen-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::476717493283:role/clshrd-p-cloudopsff-dbmonitor01"]
    }
  }
}

data "aws_iam_policy_document" "stacksets-exec-681219392bfdde9951179cb20ffea4ef-trust-policy" {
  statement {
    sid     = "1"
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::970903126758:role/aws-service-role/stacksets.cloudformation.amazonaws.com/AWSServiceRoleForCloudFormationStackSetsOrgAdmin"]
    }
  }
}

data "aws_iam_policy_document" "labcpyd-eks-lcsd-euc1-cluster-01-sa-grps-postgres-localdb-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values = [
        "system:serviceaccount:grps-localdb:grps-postgres-localdb",
        "system:serviceaccount:localdb-pgdbstbmg1:localdb-pgdbstbmg1"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-euc1-dev-corso-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:stage-corso:corso"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:dev-corso:corso"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-euc1-stage-corso-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:stage-corso:corso"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}


data "aws_iam_policy_document" "grps-test-deploy-stage-sme-eks-dev-euc1-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values = [
        "system:serviceaccount:test:test"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-github-actions-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "token.actions.githubusercontent.com:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringLike"
      variable = "token.actions.githubusercontent.com:sub"
      values   = ["repo:SME-GRPS/*"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/token.actions.githubusercontent.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-rmayer1-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"

      identifiers = [
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/rmayer1",
        "arn:aws:sts::358364484590:assumed-role/AWS_SSO/pvenkat"
      ]
    }
  }
}

data "aws_iam_policy_document" "AmazonEKS_EBS_CSI_DriverRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:kube-system:ebs-csi-controller-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
}

data "aws_iam_policy_document" "KubeCostFederatedRole-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values   = ["system:serviceaccount:kubecost:kubecost-s3-access-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "KubeCostFederatedRoleEU-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:kubecost:kubecost-s3-access-sa"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
}

data "aws_iam_policy_document" "lbcpyd-pganalyze-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:pganalyze:pganalyze"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-euc1-pganalyze-deployment-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:pganalyze:pganalyze-collector"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:pganalyze:collector-dev"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }

}

data "aws_iam_policy_document" "lcsd-eks-euc1-pganalyze-collector-prod-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:pganalyze:pganalyze-collector"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:pganalyze:collector-prod"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["rds.amazonaws.com"]
    }
  }

}

data "aws_iam_policy_document" "lcsd-eks-euc1-dev-akita-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:dev-akita:akita"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-euc1-stage-akita-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:stage-akita:akita"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-euc1-dev-prometheus-role-trust-policy" {

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:dev-prometheus:prometheus"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-use1-dev-prometheus-role-trust-policy" {

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values   = ["system:serviceaccount:dev-prometheus:prometheus"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-euc1-dev-shollie-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:dev-shollie:shollie"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-euc1-stage-shollie-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:stage-shollie:shollie"]
    }

    principals {
      type = "Federated"
      identifiers = [
        "arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"
      ]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "jodconverter-deploy-dev-sme-eks-euc1-role-trust-policy" {

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:dev-jodconverter:jodconverter"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "jodconverter-deploy-dev-sme-eks-use1-role-trust-policy" {

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values   = ["system:serviceaccount:dev-jodconverter:jodconverter"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "KarpenterControllerRole-label-copy-dev-use1-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:TagSession",
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["pods.eks.amazonaws.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRoleWithWebIdentity"
    ]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values   = ["system:serviceaccount:kube-system:karpenter"]
    }
  }
}

data "aws_iam_policy_document" "KarpenterControllerRole-label-copy-dev-euc1-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:TagSession",
      "sts:AssumeRole",
    ]

    principals {
      type        = "Service"
      identifiers = ["pods.eks.amazonaws.com"]
    }
  }

  statement {
    sid    = ""
    effect = "Allow"
    actions = [
      "sts:AssumeRoleWithWebIdentity"
    ]

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:aud"
      values   = ["sts.amazonaws.com"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.eu-central-1.amazonaws.com/id/16378F7CEED9D9B4BAC6ED56433C1599:sub"
      values   = ["system:serviceaccount:kube-system:karpenter"]
    }
  }
}

data "aws_iam_policy_document" "labcpyd-eks-sme-label-copy-schedule-dev-use1-cluster-01-sa-rdx-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values = [
        "system:serviceaccount:stage-federation-rdx:federation",
        "system:serviceaccount:dev-federation-rdx:federation",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "grps-testpod-sme-eks-use1-dev-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values = [
        "system:serviceaccount:dev-test:test"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "grpsd-localenv-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::943540511943:role/vault-uat-iam-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "grpsd-rrmobile-wo-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::943540511943:role/vault-uat-iam-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "grpsd-arvato-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["ec2.amazonaws.com"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "AWS"
      identifiers = [
        "arn:aws:iam::943540511943:role/vault-uat-iam-role",
      ]
    }
  }
}

data "aws_iam_policy_document" "lambda-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "Service"
      identifiers = ["lambda.amazonaws.com"]
    }
  }
}

data "aws_iam_policy_document" "eks-use1-dev-ghrunner-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values = [
        "system:serviceaccount:dev-ghrunner:ghrunner"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-use1-dev-akhq-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values = [
        "system:serviceaccount:dev-akhq:akhq"
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-use1-uat-federation_rdx-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values = [
        "system:serviceaccount:uat-federation-rdx:federation",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-use1-uat-shollie-role-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values   = ["system:serviceaccount:uat-shollie:shollie"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-use1-dev-efs-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"

      values = [
        "system:serviceaccount:dev-grps-rr:grps",
        "system:serviceaccount:kube-system:efs-csi-controller-sa",
        "system:serviceaccount:stage-grps-rr:grps",
        "system:serviceaccount:dev-grps-grpsweb:grps",
        "system:serviceaccount:stage-grps-grpsweb:grps",
        "system:serviceaccount:uat-grps-rdx:grps",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::230315258045:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "lbcpy-schd-eks-use1-efs-role-trust-policy" {
  statement {
    sid    = ""
    effect = "Allow"

    actions = [
      "sts:AssumeRoleWithWebIdentity",
      "sts:AssumeRole",
    ]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"

      values = [
        "system:serviceaccount:dev-grps-rdx:grps",
        "system:serviceaccount:stage-grps-rdx:grps",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-eks-use1-akita-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values = [
        "system:serviceaccount:dev-akita:akita",
        "system:serviceaccount:stage-akita:akita",
        "system:serviceaccount:uat-akita:akita",
      ]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }

  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type        = "AWS"
      identifiers = ["arn:aws:iam::${var.account_id}:role/lcsd-grpsd2-application02"]
    }
  }
}

data "aws_iam_policy_document" "lcsd-file-repo-euc1-replication-trust-policy" {
  statement {
    effect  = "Allow"
    actions = ["sts:AssumeRole"]

    principals {
      type = "Service"
      identifiers = [
        "s3.amazonaws.com",
        "batchoperations.s3.amazonaws.com"
      ]
    }
  }
}

data "aws_iam_policy_document" "openobserve-trust-policy" {
  statement {
    sid     = ""
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity"]

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:sub"
      values   = ["system:serviceaccount:openobserve:openobserve"]
    }

    condition {
      test     = "StringEquals"
      variable = "oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5:aud"
      values   = ["sts.amazonaws.com"]
    }

    principals {
      type        = "Federated"
      identifiers = ["arn:aws:iam::${var.account_id}:oidc-provider/oidc.eks.us-east-1.amazonaws.com/id/D431FAFCB5F089497935C7904F4E70A5"]
    }
  }
}