resource "aws_iam_policy" "mcsecd-trendmicro_esdomain_policy" {
  description = "Policy for accessing centralized tmds es domain"
  name        = "mcsecd-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mcsecd-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}


resource "aws_iam_policy" "DeepSecurity-be17ab605" {
  name   = "DeepSecurity-be17ab605"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity-be17ab605.json
}


resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "waf" {
  description = "waf"
  name        = "waf"
  path        = var.path
  policy      = data.aws_iam_policy_document.waf.json
}

resource "aws_iam_policy" "mc-sec-RDS_snapshot_lambda-role-policy" {
  name   = "mc-sec-RDS_snapshot_lambda-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.mc-sec-RDS_snapshot_lambda-role-policy.json
}

resource "aws_iam_policy" "SkyLightServiceAccess" {
  name   = "SkyLightServiceAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.SkyLightServiceAccess.json
}

resource "aws_iam_policy" "SkyLightSelfServiceAccess" {
  name   = "SkyLightSelfServiceAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.SkyLightSelfServiceAccess.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585144710181" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585144710181"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585144710181.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "mcsecd-aws-config-policy" {
  name   = "mcsecd-aws-config-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.mcsecd-aws-config-policy.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "mcsecd-portal-policy" {
  description = "sme-mc-sec-dev-portal-policy"
  name        = "mcsecd-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mcsecd-portal-policy.json
}


resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585144581241" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585144581241"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585144581241.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1580740332529" {
  name   = "oneClick_flowlogsRole_1580740332529"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1580740332529.json
}

resource "aws_iam_policy" "IAMPassRole" {
  description = "IAMPassRole"
  name        = "IAMPassRole"
  path        = var.path
  policy      = data.aws_iam_policy_document.IAMPassRole.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "RDSProxyIAMPolicy" {
  name   = "RDSProxyIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.RDSProxyIAMPolicy.json
}