resource "aws_db_instance" "mc-rds-dev-db-01" {
  # checkov:skip=CKV_AWS_118: Enhanced monitoring not required for this dev RDS instance
  # checkov:skip=CKV_AWS_157: Multi-AZ not required for this dev RDS instance
  # checkov:skip=CKV_AWS_161: IAM authentication not enabled for this legacy RDS instance
  # checkov:skip=CKV_AWS_226: Auto-minor-version upgrade disabled intentionally for this RDS instance
  # checkov:skip=CKV_AWS_293: Deletion protection not enabled for this dev RDS instance
  # checkov:skip=CKV2_AWS_30: Query logging not configured for this dev RDS instance
  allocated_storage          = 20
  auto_minor_version_upgrade = false
  backup_retention_period    = 7
  backup_window              = "22:01-22:31"
  ca_cert_identifier         = "rds-ca-rsa2048-g1"
  copy_tags_to_snapshot      = true
  customer_owned_ip_enabled  = false
  db_name                    = "temp1"
  db_subnet_group_name       = "sn-rds-conversion-dev"
  delete_automated_backups   = true
  deletion_protection        = false
  enabled_cloudwatch_logs_exports = [
    "postgresql",
    "upgrade",
  ]
  engine                                = "postgres"
  engine_version                        = "17.7"
  iam_database_authentication_enabled   = false
  identifier                            = "mc-rds-dev-db-01"
  instance_class                        = "db.t3.small"
  iops                                  = 3000
  kms_key_id                            = "arn:aws:kms:eu-central-1:104858398257:key/32b56480-36c8-42fc-ad6c-1241026bdf0d"
  license_model                         = "postgresql-license"
  maintenance_window                    = "sat:06:00-sat:06:30"
  max_allocated_storage                 = 35
  monitoring_interval                   = 0
  multi_az                              = false
  network_type                          = "IPV4"
  parameter_group_name                  = "mc-rds-dev-db-config-v17"
  performance_insights_enabled          = false
  performance_insights_retention_period = 0
  port                                  = 5444
  publicly_accessible                   = false
  skip_final_snapshot                   = true
  storage_encrypted                     = true
  storage_throughput                    = 125
  storage_type                          = "gp3"
  apply_immediately                     = true
  allow_major_version_upgrade           = true
  tags = {
    "Business-Unit"            = "AOMA-Conversion"
    "Environment"              = "Dev"
    "Owner"                    = "Ralph Capasso"
    "Project-Code"             = "SME-2000-0306C"
    "Project-Name"             = "Media-Conversion"
    "aws-migration-project-id" = "MPE22602"
    "map-dba"                  = "d-server-01tz6mps1jopod"
    "map-migrated"             = "d-server-01tz6mps1jopod"
    "workload-type"            = "other"
  }
  username = "master_rds"
  vpc_security_group_ids = [
    "sg-efa49e86",
  ]
}
/* 
resource "aws_db_instance" "vantage-domain" {
  allocated_storage                     = 500
  auto_minor_version_upgrade            = false
  availability_zone                     = "eu-central-1a"
  backup_retention_period               = 7
  backup_window                         = "00:32-01:02"
  ca_cert_identifier                    = "rds-ca-rsa2048-g1"
  character_set_name                    = "SQL_Latin1_General_CP1_CI_AS"
  copy_tags_to_snapshot                 = true
  customer_owned_ip_enabled             = false
  db_subnet_group_name                  = "sn-rds-conversion-dev"
  delete_automated_backups              = true
  deletion_protection                   = true
  domain                                = "d-99673b9d7a"
  domain_iam_role_name                  = "rds-directoryservice-access-role"
  enabled_cloudwatch_logs_exports       = []
  engine                                = "sqlserver-se"
  engine_version                        = "13.00.6300.2.v1"
  iam_database_authentication_enabled   = false
  identifier                            = "vantage-domain"
  instance_class                        = "db.m5.xlarge"
  kms_key_id                            = "arn:aws:kms:eu-central-1:104858398257:key/2b82aabd-da10-4723-bab8-6a64f1dc6b5f"
  license_model                         = "license-included"
  maintenance_window                    = "sat:22:51-sat:23:21"
  max_allocated_storage                 = 1000
  monitoring_interval                   = 0
  multi_az                              = false
  network_type                          = "IPV4"
  option_group_name                     = "default:sqlserver-se-13-00"
  parameter_group_name                  = "vantage-parameter-group"
  performance_insights_enabled          = true
  performance_insights_kms_key_id       = "arn:aws:kms:eu-central-1:104858398257:key/2b82aabd-da10-4723-bab8-6a64f1dc6b5f"
  performance_insights_retention_period = 7
  port                                  = 1433
  publicly_accessible                   = false
  skip_final_snapshot                   = true
  storage_encrypted                     = true
  storage_type                          = "gp3"
  tags = {
    "Business-Unit"            = "AOMA-Conversion"
    "Environment"              = "Dev"
    "Owner"                    = "Ralph Capasso"
    "Project-Code"             = "SME-2000-0306C"
    "Project-Name"             = "Media-Conversion"
    "SSS"                      = "IGNORE"
    "aws-migration-project-id" = "MPE22602"
    "map-dba"                  = "d-server-01tz6mps1jopod"
    "map-migrated"             = "d-server-01tz6mps1jopod"
  }
  tags_all = {
    "Business-Unit"            = "AOMA-Conversion"
    "Environment"              = "Dev"
    "Owner"                    = "Ralph Capasso"
    "Project-Code"             = "SME-2000-0306C"
    "Project-Name"             = "Media-Conversion"
    "SSS"                      = "IGNORE"
    "aws-migration-project-id" = "MPE22602"
    "map-dba"                  = "d-server-01tz6mps1jopod"
    "map-migrated"             = "d-server-01tz6mps1jopod"
  }
  username = "vantage"
  vpc_security_group_ids = [
    "sg-011fee53a8b66ede0",
  ]

} */

import {
  to = aws_db_instance.vantage-domain-custom-2022
  id = "vantage-domain-custom-2022"
}

resource "aws_db_instance" "vantage-domain-custom-2022" {
  # checkov:skip=CKV_AWS_118: Enhanced monitoring not required for this dev RDS instance
  # checkov:skip=CKV_AWS_157: Multi-AZ not required for this dev RDS instance
  # checkov:skip=CKV_AWS_226: Auto-minor-version upgrade disabled intentionally for this RDS instance
  # checkov:skip=CKV_AWS_129: Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled
  identifier                  = "vantage-domain-custom-2022"
  engine                      = "custom-sqlserver-se"
  engine_version              = "16.00.4255.1.v1"
  instance_class              = "db.m5.xlarge"
  license_model               = "N/A"
  custom_iam_instance_profile = "AWSRDSCustomSQLServerInstanceProfile"

  db_subnet_group_name = "sn-rds-conversion-dev"
  vpc_security_group_ids = [
    "sg-011fee53a8b66ede0",
    "sg-036937cacb1bdae59",
  ]
  port                 = 1433
  publicly_accessible  = false
  network_type         = "IPV4"
  option_group_name    = "default:custom-sqlserver-se-16-00"
  parameter_group_name = "default.custom-sqlserver-se-16.0"

  storage_type      = "io2"
  allocated_storage = 500
  iops              = 3000
  storage_encrypted = true
  kms_key_id        = "arn:aws:kms:eu-central-1:104858398257:key/32b56480-36c8-42fc-ad6c-1241026bdf0d"

  multi_az                   = false
  deletion_protection        = true
  auto_minor_version_upgrade = false

  backup_retention_period = 7
  backup_window           = "02:24-02:54"
  maintenance_window      = "wed:01:36-wed:02:06"

  copy_tags_to_snapshot           = true
  customer_owned_ip_enabled       = false
  enabled_cloudwatch_logs_exports = []
  skip_final_snapshot             = true

  tags = {
    "Business-Unit" = "AOMA-Conversion"
    "Environment"   = "Dev"
    "Owner"         = "Mandar Padsalgikar"
    "Project-Code"  = "SME-2000-0306C"
    "Project-Name"  = "AOMA-Conversion"
    "Name"          = "vantage-domain-custom-2022"
  }

}
