resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "waf" {
  description = "waf"
  name        = "waf"
  path        = var.path
  policy      = data.aws_iam_policy_document.waf.json
}

resource "aws_iam_policy" "sendRawEmail" {
  description = "ses send raw email"
  name        = "sendRawEmail"
  path        = var.path
  policy      = data.aws_iam_policy_document.sendRawEmail.json
}

resource "aws_iam_policy" "SkyLightSelfServiceAccess" {
  name   = "SkyLightSelfServiceAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.SkyLightSelfServiceAccess.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "mcsecp-portal-policy" {
  description = "SME Media Conversion secure Prod portal policy"
  name        = "mcsecp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mcsecp-portal-policy.json
}

resource "aws_iam_policy" "mcsecp-lambda-mcsec-monthly-usage-stats-policy" {
  description = "Policy for mcsecp-lambda-mcsec-monthly-usage-stats-role"
  name        = "mcsecp-lambda-mcsec-monthly-usage-stats-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mcsecp-lambda-mcsec-monthly-usage-stats-policy.json
}

resource "aws_iam_policy" "DeepSecurity-569fbfad0" {
  name   = "DeepSecurity-569fbfad0"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity-569fbfad0.json
}

resource "aws_iam_policy" "WorkspaceManagerAccess" {
  description = "WorkspaceManagerAccess"
  name        = "WorkspaceManagerAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.WorkspaceManagerAccess.json
}

resource "aws_iam_policy" "mc-sec-RDS_snapshot_lambda-role-policy" {
  name   = "mc-sec-RDS_snapshot_lambda-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.mc-sec-RDS_snapshot_lambda-role-policy.json
}

resource "aws_iam_policy" "mcsecp-aws-config-policy" {
  name   = "mcsecp-aws-config-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.mcsecp-aws-config-policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1584515678855" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1584515678855"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1584515678855.json
}


resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "EC2-Start-Stop" {
  description = "Policy to Start and Stop Ec2 Instances"
  name        = "EC2-Start-Stop"
  path        = var.path
  policy      = data.aws_iam_policy_document.EC2-Start-Stop.json
}

resource "aws_iam_policy" "CWLogs-Put" {
  name   = "CWLogs-Put"
  path   = var.path
  policy = data.aws_iam_policy_document.CWLogs-Put.json
}

resource "aws_iam_policy" "mcsecp--trendmicro_esdomain_policy" {
  description = "For TMDS ELK"
  name        = "mcsecp--trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mcsecp--trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1590572437245" {
  name   = "oneClick_flowlogsRole_1590572437245"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1590572437245.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "SkyLightServiceAccess" {
  name   = "SkyLightServiceAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.SkyLightServiceAccess.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}