resource "aws_db_instance" "mc-rds-dev" {
  #checkov:skip=CKV2_AWS_30: Ensure Postgres RDS as aws_db_instance has Query Logging enabled
  #checkov:skip=CKV_AWS_226: Ensure DB instance gets all minor upgrades automatically
  #checkov:skip=CKV_AWS_161: Ensure RDS database has IAM authentication enabled
  #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled
  #checkov:skip=CKV_AWS_118: Ensure that enhanced monitoring is enabled for Amazon RDS instances
  allocated_storage                     = 20
  auto_minor_version_upgrade            = false
  availability_zone                     = "eu-central-1b"
  backup_retention_period               = 7
  backup_window                         = "00:59-01:29"
  ca_cert_identifier                    = "rds-ca-rsa2048-g1"
  copy_tags_to_snapshot                 = true
  customer_owned_ip_enabled             = false
  db_name                               = "mconversion"
  db_subnet_group_name                  = "mcsec-d1-rds-sng"
  delete_automated_backups              = true
  deletion_protection                   = true
  enabled_cloudwatch_logs_exports       = ["postgresql", "upgrade"]
  engine                                = "postgres"
  engine_version                        = "17.7"
  iam_database_authentication_enabled   = false
  identifier                            = "mc-rds-dev"
  instance_class                        = "db.t3.medium"
  iops                                  = 3000
  kms_key_id                            = "arn:aws:kms:eu-central-1:715641587426:key/019d398f-00fc-4752-b0b5-37167eb3b115"
  license_model                         = "postgresql-license"
  max_allocated_storage                 = 35
  monitoring_interval                   = 0
  multi_az                              = false
  network_type                          = "IPV4"
  parameter_group_name                  = "mc-rds-dev-pg17-parameters"
  performance_insights_enabled          = true
  performance_insights_kms_key_id       = "arn:aws:kms:eu-central-1:715641587426:key/447f8b5c-186c-4356-ad5f-489051720fa0"
  performance_insights_retention_period = 7
  port                                  = 5432
  publicly_accessible                   = false
  skip_final_snapshot                   = true
  storage_encrypted                     = true
  storage_throughput                    = 125
  storage_type                          = "gp3"
  apply_immediately                     = true
  allow_major_version_upgrade           = true
  tags = {
    "Business-Unit" = "AOMA-Conversion-Sec"
    "Business-unit" = "AOMA Conversion Sec"
    "Env"           = "Prod"
    "Environment"   = "Dev"
    "Name"          = "mc-dev-rds"
    "Owner"         = "Ted Gulesserian"
    "Project-Code"  = "SME-2000-0306C"
    "Project-Name"  = "AOMA-Conversion"
    "Project-code"  = "SME - 2000-0306C"
    "Project-name"  = "AOMA Conversion"
    "map-migrated"  = "migKNBMDMW06I"
  }
  username = "master_rds"
  vpc_security_group_ids = [
    "sg-02f2ef52a569b2e3d",
  ]

}

resource "aws_db_instance" "mcsec-d1-arvato-rds" {
  #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled
  #checkov:skip=CKV_AWS_118: Ensure that enhanced monitoring is enabled for Amazon RDS instances
  allocated_storage          = 50
  auto_minor_version_upgrade = true
  availability_zone          = "eu-central-1b"
  backup_retention_period    = 7
  backup_window              = "23:11-23:41"
  ca_cert_identifier         = "rds-ca-rsa2048-g1"
  character_set_name         = "SQL_Latin1_General_CP1_CI_AS"
  copy_tags_to_snapshot      = true
  customer_owned_ip_enabled  = false
  db_subnet_group_name       = "mcsec-d1-rds-sng"
  delete_automated_backups   = true
  deletion_protection        = true
  domain                     = "d-9967204f55"
  domain_iam_role_name       = "rds-directoryservice-access-role"
  enabled_cloudwatch_logs_exports = [
    "agent",
    "error",
  ]
  engine                                = "sqlserver-se"
  engine_version                        = "13.00.6300.2.v1"
  iam_database_authentication_enabled   = false
  identifier                            = "mcsec-d1-arvato-rds"
  instance_class                        = "db.t3.xlarge"
  kms_key_id                            = "arn:aws:kms:eu-central-1:715641587426:key/447f8b5c-186c-4356-ad5f-489051720fa0"
  license_model                         = "license-included"
  maintenance_window                    = "mon:17:01-mon:17:31"
  max_allocated_storage                 = 0
  monitoring_interval                   = 0
  multi_az                              = false
  network_type                          = "IPV4"
  option_group_name                     = "default:sqlserver-se-13-00"
  parameter_group_name                  = "vantage-parameter-group"
  performance_insights_enabled          = false
  performance_insights_retention_period = 0
  port                                  = 1433
  publicly_accessible                   = false
  skip_final_snapshot                   = true
  storage_encrypted                     = true
  apply_immediately                     = false
  storage_type                          = "gp3"
  tags = {
    "Business-Unit" = "AOMA-Conversion-Sec"
    "Business-unit" = "AOMA Conversion Sec"
    "Environment"   = "Dev"
    "Owner"         = "Ted Gulesserian"
    "Project-Code"  = "SME-2000-0306C"
    "Project-Name"  = "AOMA-Conversion"
    "Project-code"  = "SME - 2000-0306C"
    "Project-name"  = "AOMA Conversion"
    "SSS"           = "IGNORE"
  }
  tags_all = {
    "Business-Unit" = "AOMA-Conversion-Sec"
    "Business-unit" = "AOMA Conversion Sec"
    "Environment"   = "Dev"
    "Owner"         = "Ted Gulesserian"
    "Project-Code"  = "SME-2000-0306C"
    "Project-Name"  = "AOMA-Conversion"
    "Project-code"  = "SME - 2000-0306C"
    "Project-name"  = "AOMA Conversion"
    "SSS"           = "IGNORE"
  }
  username = "vantage"
  vpc_security_group_ids = [
    "sg-03d95daf3d6fa546a",
  ]

}