# Anthony Vitale Changed April 23 2025
#
# Anthony Vitale Nov 13, 2025 Updated lsp-rds-pgdbspsme1-prod-global-cluster-1 from V14 to V17
#
#
# Anthony Vitale March 2 2026 
# Change Aurora Clusters auto_minor_version_upgrade to true to Correct Drift
#
# Change lsp-rds-pgdbspsme1-prod-global-instance-1 to V17.7 in next maint window
# Removed Comment on lsp-rds-pgdbspsme1-prod-global-cluster-1 enable_global_write_forwarding to set to true although currently is it True in AWS.

resource "aws_rds_cluster" "lsp-rds-pgdbspsme1-prod-global-cluster-1" {
  # checkov:skip=CKV2_AWS_27:Ensure Postgres RDS as aws_rds_cluster has Query Logging enabled
  allocated_storage                   = 1
  allow_major_version_upgrade         = null
  apply_immediately                   = null
  availability_zones                  = ["us-east-1a", "us-east-1b", "us-east-1d"]
  backtrack_window                    = 0
  backup_retention_period             = 35
  cluster_identifier                  = "lsp-rds-pgdbspsme1-prod-global-cluster-1"
  cluster_identifier_prefix           = null
  cluster_members                     = ["lsp-rds-pgdbspsme1-prod-global-instance-1"]
  copy_tags_to_snapshot               = true
  database_name                       = null
  db_cluster_instance_class           = null
  db_cluster_parameter_group_name     = "aur-pg-v17-cluster-group-v001"
  db_instance_parameter_group_name    = null
  db_subnet_group_name                = "grps-p1-rds-sng"
  deletion_protection                 = true
  enable_global_write_forwarding      = true
  enable_http_endpoint                = false
  enabled_cloudwatch_logs_exports     = ["postgresql"]
  engine                              = "aurora-postgresql"
  engine_mode                         = "provisioned"
  engine_version                      = 17.7
  final_snapshot_identifier           = null
  global_cluster_identifier           = "lsp-rds-pgdbspsme1-prod-global"
  iam_database_authentication_enabled = true
  iam_roles                           = []
  iops                                = 0
  kms_key_id                          = "arn:aws:kms:us-east-1:918817604416:key/8aa5112c-73e0-4972-be1b-d189810cfce7"
  manage_master_user_password         = null
  master_password                     = null # sensitive
  master_user_secret_kms_key_id       = null
  master_username                     = "arfwrdsadmin"
  network_type                        = "IPV4"
  port                                = 5432
  preferred_backup_window             = "04:43-05:13"
  preferred_maintenance_window        = "sun:00:00-sun:01:00"
  replication_source_identifier       = "arn:aws:rds:eu-central-1:918817604416:cluster:lsp-rds-pgdbspsme1-prod-01"
  skip_final_snapshot                 = true
  snapshot_identifier                 = null
  source_region                       = null
  storage_encrypted                   = true
  storage_type                        = null
  tags                                = {}
  tags_all                            = {}
  vpc_security_group_ids              = ["sg-006d61968fbe27c9c"]

  lifecycle {
    ignore_changes = [enabled_cloudwatch_logs_exports]
  }

}