resource "aws_iam_policy" "labelcpy-prod-ses-access-policy" {
  description = "labelcpy-prod-ses-access-policy"
  name        = "labelcpy-prod-ses-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.labelcpy-prod-ses-access-policy.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1590571596154" {
  name   = "oneClick_flowlogsRole_1590571596154"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1590571596154.json
}

resource "aws_iam_policy" "SecretsManagerRDSPostgreSQLRotationSingleUserRolePolicy0" {
  name   = "SecretsManagerRDSPostgreSQLRotationSingleUserRolePolicy0"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerRDSPostgreSQLRotationSingleUserRolePolicy0.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "oneClick_Cognito_grps_prod_kibana_usersAuth_Role_1636469663387" {
  name   = "oneClick_Cognito_grps_prod_kibana_usersAuth_Role_1636469663387"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_grps_prod_kibana_usersAuth_Role_1636469663387.json
}

resource "aws_iam_policy" "grpsp-localenv-access-policy" {
  description = "grpsp-localenv-access-policy"
  name        = "grpsp-localenv-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.grpsp-localenv-access-policy.json
}

resource "aws_iam_policy" "grpsp-rmayer1" {
  name   = "grpsp-rmayer1"
  path   = var.path
  policy = data.aws_iam_policy_document.grpsp-rmayer1.json
}

resource "aws_iam_policy" "grps-sybase-exports" {
  description = "s3-grps-sybase-exports"
  name        = "grps-sybase-exports"
  path        = var.path
  policy      = data.aws_iam_policy_document.grps-sybase-exports.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "DeepSecurity-358d91440" {
  name   = "DeepSecurity-358d91440"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity-358d91440.json
}

resource "aws_iam_policy" "lcsp-ddex-eks-prod-access-policy" {
  description = "lcsp-ddex-eks-prod-access-policy"
  name        = "lcsp-ddex-eks-prod-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lcsp-ddex-eks-prod-access-policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "lsp-rds-pgdbspbmg1-prod_policy" {
  description = "Policy for accessing cloudwatch log groups"
  name        = "lsp-rds-pgdbspbmg1-prod_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lsp-rds-pgdbspbmg1-prod_policy.json
}

resource "aws_iam_policy" "lblschd-lcs-prod-grps-localenv-S3-ReadOnly-policy" {
  name   = "lblschd-lcs-prod-grps-localenv-S3-ReadOnly-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lblschd-lcs-prod-grps-localenv-S3-ReadOnly-policy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "lblschp-aws-config-policy" {
  name   = "lblschp-aws-config-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lblschp-aws-config-policy.json
}



resource "aws_iam_policy" "max-partner-data" {
  description = "For access to S3 sme-labelcopy-schedule-max-partner-data"
  name        = "max-partner-data"
  path        = var.path
  policy      = data.aws_iam_policy_document.max-partner-data.json
  tags = {
    "JIRA" = "CLOUDOPS-8260"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-8260"
  }
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "grps-prod-policy" {
  description = "grps-prod-policy"
  name        = "grps-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.grps-prod-policy.json
}

resource "aws_iam_policy" "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy2" {
  name   = "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy2"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy2.json
}

resource "aws_iam_policy" "lblschp-portal-policy" {
  description = "Cloudops portal policy"
  name        = "lblschp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lblschp-portal-policy.json
}

resource "aws_iam_policy" "lblschd-lcs-prod-grps-localenv-S3-policy" {
  name   = "lblschd-lcs-prod-grps-localenv-S3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lblschd-lcs-prod-grps-localenv-S3-policy.json
}

resource "aws_iam_policy" "kms_access" {
  name   = "kms_access"
  path   = var.path
  policy = data.aws_iam_policy_document.kms_access.json
}


resource "aws_iam_policy" "EFSFull" {
  name   = "EFSFull"
  path   = var.path
  policy = data.aws_iam_policy_document.EFSFull.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "rds-db-connect-1" {
  name   = "rds-db-connect-1"
  path   = var.path
  policy = data.aws_iam_policy_document.rds-db-connect-1.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  name   = "CloudOpsDenyIAM"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "waf" {
  description = "waf"
  name        = "waf"
  path        = var.path
  policy      = data.aws_iam_policy_document.waf.json
}

resource "aws_iam_policy" "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy3" {
  name   = "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy3"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy3.json
}

resource "aws_iam_policy" "SecretsManagerRDSPostgreSQLRotationSingleUserRolePolicy1" {
  name   = "SecretsManagerRDSPostgreSQLRotationSingleUserRolePolicy1"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerRDSPostgreSQLRotationSingleUserRolePolicy1.json
}

resource "aws_iam_policy" "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy1" {
  name   = "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy1"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy1.json
}


resource "aws_iam_policy" "Elasticsearch-policy" {
  description = "Elasticsearch-policy"
  name        = "Elasticsearch-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.Elasticsearch-policy.json
}



resource "aws_iam_policy" "labcpyp-trustedAdvisor-ReadOnly" {
  name   = "labcpyp-trustedAdvisor-ReadOnly"
  path   = var.path
  policy = data.aws_iam_policy_document.labcpyp-trustedAdvisor-ReadOnly.json
}

resource "aws_iam_policy" "labcpyp-secrets_manager_database_policy" {
  name   = "labcpyp-secrets_manager_database_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.labcpyp-secrets_manager_database_policy.json
}

resource "aws_iam_policy" "labcpyp-secrets_manager_non-database_policy" {
  name   = "labcpyp-secrets_manager_non-database_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.labcpyp-secrets_manager_non-database_policy.json
}

resource "aws_iam_policy" "cloudops-secrets-manager-database-deny" {
  name   = "cloudops-secrets-manager-database-deny"
  path   = var.path
  policy = data.aws_iam_policy_document.cloudops-secrets-manager-database-deny.json
}

resource "aws_iam_policy" "lcs-grps_rdx-eks-ecr-prod-role-policy" {
  name   = "lcs-grps_rdx-eks-ecr-prod-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcs-grps_rdx-eks-ecr-prod-role-policy.json
}

resource "aws_iam_policy" "lcs-federation_rdx-eks-ecr-prod-role-policy" {
  name   = "lcs-federation_rdx-eks-ecr-prod-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcs-federation_rdx-eks-ecr-prod-role-policy.json
}

resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" {
  name   = "AWSLoadBalancerControllerIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "lcsp-github-actions-policy" {
  name   = "lcsp-github-actions-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-github-actions-policy.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}
resource "aws_iam_policy" "globaldsp-lcsp-eks-euc1-prod-assume-role-access-policy" {
  description = "globaldsp-lcsp-eks-euc1-prod-assume-role-access-policy"
  name        = "globaldsp-lcsp-eks-euc1-prod-assume-role-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.globaldsp-lcsp-eks-euc1-prod-assume-role-access-policy.json
  tags = {
    "JIRA" = "CLOUDOPS-14407"
  }
}

resource "aws_iam_policy" "lcsp-eks-euc1-pganalyze-collector-prod-policy" {
  name   = "lcsp-eks-euc1-pganalyze-collector-prod-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-eks-euc1-pganalyze-collector-prod-policy.json
}

resource "aws_iam_policy" "LBcontroller-test-policy" {
  description = "Policy used by the EKS app"
  name        = "LBcontroller-test-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.LBcontroller-test-policy.json
}

resource "aws_iam_policy" "AmazonEKS_EFS_CSI_Driver_Policy" {
  name   = "AmazonEKS_EFS_CSI_Driver_Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.AmazonEKS_EFS_CSI_Driver_Policy.json
}

resource "aws_iam_policy" "AssumeRoleWithWebIdentity" {
  name   = "AssumeRoleWithWebIdentity"
  path   = var.path
  policy = data.aws_iam_policy_document.AssumeRoleWithWebIdentity.json
  tags = {
    eiso-exception = "aws.04.10"
  }
}

resource "aws_iam_policy" "lambda-monitor-rds-subnet-ips-policy" {
  name        = "lambda-monitor-rds-subnet-ips-policy"
  description = "Policy for Lambda function to monitor RDS subnet IPs"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda-monitor-rds-subnet-ips-policy.json
}

resource "aws_iam_policy" "lcsp-prod-rdx-chd-ro-access-policy" {
  description = "lcsp-prod-rdx-chd-ro-access-policy"
  name        = "lcsp-prod-rdx-chd-ro-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lcsp-prod-rdx-chd-ro-access-policy.json
}

resource "aws_iam_policy" "lcsp-eks-use1-prod-akhq-secrets-manager-policy" {
  name   = "lcsp-eks-use1-prod-akhq-secrets-manager-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-eks-use1-prod-akhq-secrets-manager-policy.json
}

resource "aws_iam_policy" "lcsp-eks-use1-prod-akhq-S3-ReadOnly-policy" {
  name   = "lcsp-eks-use1-prod-akhq-S3-ReadOnly-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-eks-use1-prod-akhq-S3-ReadOnly-policy.json
}

resource "aws_iam_policy" "lcsp-eks-use1-prod-akhq-access-policy" {
  name   = "lcsp-eks-use1-prod-akhq-access-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-eks-use1-prod-akhq-access-policy.json
}

resource "aws_iam_policy" "lcsp-eks-euc1-prometheus-secretmanager-ro-policy" {
  name   = "lcsp-eks-euc1-prometheus-secretmanager-ro-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-eks-euc1-prometheus-secretmanager-ro.json
}

resource "aws_iam_policy" "lcsp-eks-use1-prometheus-secretmanager-ro-policy" {
  name   = "lcsp-eks-use1-prometheus-secretmanager-ro-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-eks-use1-prometheus-secretmanager-ro.json
}

resource "aws_iam_policy" "grps-prod-lambda-fullaccess-policy" {
  name   = "grps-prod-lambda-fullaccess-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.grps-prod-lambda-fullaccess-policy.json
}

resource "aws_iam_policy" "grps-prod-cloudwatch-fullaccess-policy" {
  name   = "grps-prod-cloudwatch-fullaccess-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.grps-prod-cloudwatch-fullaccess-policy.json
}

resource "aws_iam_policy" "grps-prod-cloudwatch-logs-fullaccess-policy" {
  name   = "grps-prod-cloudwatch-logs-fullaccess-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.grps-prod-cloudwatch-logs-fullaccess-policy.json
}

resource "aws_iam_policy" "grps-prod-sns-fullaccess-policy" {
  name   = "grps-prod-sns-fullaccess-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.grps-prod-sns-fullaccess-policy.json
}

resource "aws_iam_policy" "grps-testpod-sme-eks-use1-prod-policy" {
  name   = "grps-testpod-sme-eks-use1-prod-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.grps-testpod-sme-eks-use1-prod-policy.json
}

resource "aws_iam_policy" "grps-testpod-sme-eks-euc1-prod-policy" {
  name   = "grps-testpod-sme-eks-euc1-prod-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.grps-testpod-sme-eks-euc1-prod-policy.json
}

resource "aws_iam_policy" "grps-dba-prod" {
  name   = "grps-dba-prod"
  path   = var.path
  policy = data.aws_iam_policy_document.grps-dba-prod.json
}
resource "aws_iam_policy" "lcsp-contract-agreements-policy" {
  name   = "lcsp-contract-agreements-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-contract-agreements-policy.json
}
resource "aws_iam_policy" "lcsp-backend-svcs-policy" {
  name   = "lcsp-backend-svcs-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lcsp-backend-svcs-policy.json
}