module "arvato-elk-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.arvato-elk.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/CloudWatchLogsFullAccess",
    "arn:aws:iam::aws:policy/AmazonESFullAccess",
    "arn:aws:iam::${var.account_id}:policy/media-conversion-dev-logs-es-policy",
  ]
}

module "mcond-amp-s3-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mcond-amp-s3.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/mcond-amp-s3-rw",
  ]
}

module "mcond-arvato-ecr-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mcond-arvato-ecr-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly",
    "arn:aws:iam::aws:policy/CloudWatchFullAccess",
  ]
}

module "mcond-jenkins-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mcond-jenkins-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy",
    "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::${var.account_id}:policy/CloudOpsDenyIAM",
    "arn:aws:iam::aws:policy/AmazonEKSServicePolicy",
    "arn:aws:iam::${var.account_id}:policy/ECS-RO",
    "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy",
    "arn:aws:iam::aws:policy/service-role/AWSLambdaRole",
    "arn:aws:iam::${var.account_id}:policy/eks_full_admin",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
  ]
}

module "mcond-lambda-user-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mcond-lambda-user.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonS3FullAccess",
    "arn:aws:iam::aws:policy/AmazonAthenaFullAccess",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
  ]
}

module "mcond-sme-eks-del-dev-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mcond-sme-eks-del-dev.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy",
    "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy",
    "arn:aws:iam::${var.account_id}:policy/CloudOpsDenyIAM",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser",
    "arn:aws:iam::aws:policy/AmazonEKSServicePolicy",
    "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy",
  ]
}

module "mcond-telestream-cloud-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mcond-telestream-cloud.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/mcond-telestream-cloud",
  ]
}

module "mcons-amp-s3-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mcons-amp-s3.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/mcons-amp-S3-RW-policy",
  ]
}

module "vantage-delivery-dev-s3-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.vantage-delivery-dev-s3-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/s3-amp-rw",
    "arn:aws:iam::${var.account_id}:policy/s3-delivery-ro",
    "arn:aws:iam::${var.account_id}:policy/s3-conversion",
    "arn:aws:iam::${var.account_id}:policy/s3-delivery-rw",
  ]
}

module "vantage-delivery-stage-s3-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.vantage-delivery-stage-s3-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/s3-delivery-ro",
    "arn:aws:iam::${var.account_id}:policy/s3-conversion",
    "arn:aws:iam::${var.account_id}:policy/s3-delivery-rw",
  ]
}