module "cf-templates-f6y5lr6gc7rr-eu-central-1" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "cf-templates-f6y5lr6gc7rr-eu-central-1"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "cf-templates-f6y5lr6gc7rr-eu-central-1"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    Classification           = "internal-use-only"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "gdsp-fuga-prod-assets" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "gdsp-fuga-prod-assets"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.gdsp-fuga-prod-assets.json
  attach_deny_insecure_transport_policy = false
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Name           = "gdsp-fuga-prod-assets"
    Business-Unit  = "GRPS"
    Environment    = "Prod"
    Name           = "cf-templates-f6y5lr6gc7rr-eu-central-1"
    Owner          = "Richard Mayer"
    Project-Code   = "2000-0497G"
    Project-Name   = "GRPS"
    Classification = "internal-use-only"
    Terraform      = "True"
    Purpose        = "APP-SUPPORT"
    Team-Name      = "GRPS"
  }
}

module "sme-grps-p1-vpc-flowlogs" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-grps-p1-vpc-flowlogs"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-grps-p1-vpc-flowlogs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Name           = "sme-grps-p1-vpc-flowlogs"
    Environment    = "Prod"
    Classification = "internal-use-only"
    Owner          = "Richard Mayer"
    Project-Code   = "2000-0497G"
    Project-Name   = "GRPS"
    Terraform      = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-grps-p2-vpc-flowlogs" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-grps-p2-vpc-flowlogs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-grps-p2-vpc-flowlogs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-grps-p2-vpc-flowlogs"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    Classification           = "internal-use-only"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-grps-sybase-exports" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-grps-sybase-exports"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-grps-sybase-exports.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-grps-sybase-exports"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Classification           = "internal-use-only"
    Terraform                = "True"
  Purpose = "APP-SUPPORT" }
}

module "sme-labelcopy-schedule-max-partner-data" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-labelcopy-schedule-max-partner-data"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-max-partner-data.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Business-Unit            = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-labelcopy-schedule-max-partner-data"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Classification           = "internal-use-only"
    Terraform                = "True"
  Purpose = "APP-SUPPORT" }
}

module "sme-labelcopy-schedule-prod-athena-out" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-labelcopy-schedule-prod-athena-out"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-labelcopy-schedule-prod-athena-out"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Business-Unit            = "GRPS"
    Environment              = "Prod"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    Classification           = "internal-use-only"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-labelcopy-schedule-prod-awsconfig" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_18: Ensure the S3 bucket has access logging enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV2_AWS_6: Ensure that S3 bucket has a Public Access block. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV2_AWS_61: Ensure that an S3 bucket has a lifecycle configuration. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-labelcopy-schedule-prod-awsconfig"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-prod-awsconfig.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-labelcopy-schedule-prod-awsconfig"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Classification           = "internal-use-only"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-labelcopy-schedule-prod-cf-euc1-logs" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-labelcopy-schedule-prod-cf-euc1-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod-cf-euc1-logs/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-labelcopy-schedule-prod-cf-euc1-logs"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Classification           = "internal-use-only"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-labelcopy-schedule-prod-ct-euc1-logs" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-labelcopy-schedule-prod-ct-euc1-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod-ct-euc1-logs/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-prod-ct-euc1-logs.json
  attach_deny_insecure_transport_policy = false //var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Classification           = "internal-use-only"
    Environment              = "Prod"
    Name                     = "sme-labelcopy-schedule-prod-ct-euc1-logs"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-labelcopy-schedule-prod-elb-euc1-logs" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-labelcopy-schedule-prod-elb-euc1-logs"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-prod-elb-euc1-logs.json
  attach_deny_insecure_transport_policy = false //var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Classification           = "internal-use-only"
    Name                     = "sme-labelcopy-schedule-prod-elb-euc1-logs"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-labelcopy-schedule-prod-elb-use1-logs01" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-labelcopy-schedule-prod-elb-use1-logs01"
  versioning = {
    enabled = false
  }

  providers = {
    aws = aws
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-use1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-prod-elb-use1-logs01.json
  attach_deny_insecure_transport_policy = false //var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Classification           = "internal-use-only"
    Name                     = "sme-labelcopy-schedule-prod-elb-use1-logs01"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}


module "sme-labelcopy-schedule-prod-euc1-s3-inventory" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 4.0.0"
  bucket  = "sme-labelcopy-schedule-prod-euc1-s3-inventory"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod/"
    target_object_key_format = {
      partitioned_prefix = {
        partition_date_source = "EventTime"
      }
    }
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-prod-euc1-s3-inventory.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "sme-labelcopy-schedule-prod-euc1-s3-inventory"
    Classification           = "internal-use-only"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Business-Unit            = "GRPS"
    Environment              = "Prod"
    Owner                    = "Richard Mayer"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-labelcopy-schedule-prod-s3-euc1-logs" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-labelcopy-schedule-prod-s3-euc1-logs"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-prod-s3-euc1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    Classification           = "internal-use-only"
    USE                      = "LOGGING"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "LOGGING" }
}

module "sme-labelcopy-schedule-prod-s3-use1-logs" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-labelcopy-schedule-prod-s3-use1-logs"
  versioning = {
    enabled = true
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-labelcopy-schedule-prod-s3-use1-logs.json
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    Classification           = "internal-use-only"
    USE                      = "LOGGING"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "LOGGING" }
}

module "sme-labelcopy-schedule-prod-ssm-out" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-labelcopy-schedule-prod-ssm-out"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-labelcopy-schedule-prod-ssm-out/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Business-Unit = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-labelcopy-schedule-prod-ssm-out"
    Classification           = "internal-use-only"
    Owner                    = "Richard Mayer"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Terraform                = "True"
  Purpose = "CLOUDOPS" }
}

module "sme-lcs-prod-grps-localenv" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "sme-lcs-prod-grps-localenv"
  versioning = {
    enabled = true
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = var.server_side_encryption_configuration
  logging = {
    target_bucket = "sme-labelcopy-schedule-prod-s3-euc1-logs"
    target_prefix = "sme-lcs-prod-grps-localenv/"
  }
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = var.attach_policy
  policy                                = data.aws_iam_policy_document.sme-lcs-prod-grps-localenv.json
  attach_deny_insecure_transport_policy = false
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = {
    Business-Unit            = "GRPS"
    Environment              = "Prod"
    Name                     = "sme-lcs-prod-grps-localenv"
    Owner                    = "Viktor Fekete"
    Project-Code             = "2000-0497G"
    Project-Name             = "GRPS"
    aws-migration-project-id = "MPE22602"
    map-migrated             = "d-server-0174a2wn5rache"
    Classification           = "secret"
    Terraform                = "True"
    Purpose                  = "APP-SUPPORT"
    Team-Name                = "GRPS"
  }
}

module "lcs-prod-es-01-snapshots" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "lcs-prod-es-01-snapshots"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }
  server_side_encryption_configuration = {
    rule = {
      bucket_key_enabled = true
      apply_server_side_encryption_by_default = {
        kms_master_key_id = "arn:aws:kms:eu-central-1:918817604416:alias/aws/s3"
        sse_algorithm     = "aws:kms"
      }
    }
  }
  logging                               = {}
  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = false
  attach_require_latest_tls_policy      = false

  tags = {
    Name           = "lcs-prod-es-01-snapshots"
    Owner          = "Viktor Fekete"
    Project-Code   = "2000-0497G"
    Terraform      = "False"
    Project-Name   = "GRPS"
    Classification = "internal-use-only"
    Environment    = "Prod"
    Purpose        = "APP-SUPPORT"
    Business-Unit  = "GRPS"
  }
}

module "lcsp-akhq-jks" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "lcsp-akhq-jks"
  versioning = {
    enabled = false
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "lcsp-akhq-jks"
    Business-unit  = "GRPS"
    Environment    = "prod"
    Owner          = "Richard Mayer"
    Project-code   = "2000-0497G"
    Project-name   = "GRPS"
    Terraform      = "True"
    Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}

module "lcsp-mediaservices" {
  #checkov:skip=CKV_TF_1: Ensure Terraform module sources use a commit hash. Using version-pinned registry module.
  #checkov:skip=CKV_AWS_19: Ensure the S3 bucket has server-side-encryption enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_21: Ensure the S3 bucket has versioning enabled. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_145: Ensure that S3 Buckets are encrypted with KMS. Migrated existing S3 bucket as-is.
  #checkov:skip=CKV_AWS_300: Ensure S3 lifecycle configuration covers all storage classes. Migrated existing S3 bucket as-is.
  source  = "terraform-aws-modules/s3-bucket/aws"
  version = "~> 3.11.0"
  bucket  = "lcsp-mediaservices"
  versioning = {
    enabled = false
  }
  providers = {
    aws = aws.eu-central-1
  }

  server_side_encryption_configuration = var.server_side_encryption_configuration

  object_ownership                      = "BucketOwnerEnforced"
  object_lock_enabled                   = false
  block_public_acls                     = var.block_public_acls
  ignore_public_acls                    = var.ignore_public_acls
  restrict_public_buckets               = var.restrict_public_buckets
  block_public_policy                   = var.block_public_policy
  force_destroy                         = var.force_destroy
  attach_policy                         = false
  attach_deny_insecure_transport_policy = var.attach_deny_insecure_transport_policy
  attach_require_latest_tls_policy      = var.attach_require_latest_tls_policy

  tags = { Name = "lcsp-mediaservices"
    Business-unit  = "GRPS"
    Environment    = "prod"
    Owner          = "Richard Mayer"
    Project-code   = "2000-0497G"
    Project-name   = "GRPS"
    Terraform      = "True"
    Classification = "internal-use-only"
  Purpose = "APP-SUPPORT" }
}