resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-40688fad-c356-4e92-80c4-206cabf61ea2" { name = "AWSLambdaBasicExecutionRole-40688fad-c356-4e92-80c4-206cabf61ea2" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-40688fad-c356-4e92-80c4-206cabf61ea2.json } resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" { description = "Policy to allow GSIRT to collect S3 Access Logs" name = "GSIRT_AWS_S3AccessLog_Collection" path = var.path policy = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json } resource "aws_iam_policy" "lambda_elasticsearch_execution_policy" { description = "lambda_elasticsearch_execution_policy" name = "lambda_elasticsearch_execution_policy" path = var.path policy = data.aws_iam_policy_document.lambda_elasticsearch_execution_policy.json } resource "aws_iam_policy" "CloudOpsDenyIAM" { description = "IAM Read Only" name = "CloudOpsDenyIAM" path = var.path policy = data.aws_iam_policy_document.CloudOpsDenyIAM.json } resource "aws_iam_policy" "RDSProxyIAMPolicy" { description = "RDSProxyIAMPolicy" name = "RDSProxyIAMPolicy" path = var.path policy = data.aws_iam_policy_document.RDSProxyIAMPolicy.json } resource "aws_iam_policy" "msk-access-policy" { name = "msk-access-policy" path = var.path policy = data.aws_iam_policy_document.msk_access_policy_document.json } resource "aws_iam_policy" "mcon-external-msk-policy" { name = "mcon-external-msk-policy" path = var.path policy = data.aws_iam_policy_document.mcon-external-msk-policy.json } resource "aws_iam_policy" "ECS-RO" { name = "ECS-RO" path = var.path policy = data.aws_iam_policy_document.ECS-RO.json } resource "aws_iam_policy" "Decode" { name = "Decode" path = var.path policy = data.aws_iam_policy_document.Decode.json } resource "aws_iam_policy" "mcons-del-s3-source-target-policy" { description = "mcons-del-s3-source-target-policy" name = "mcons-del-s3-source-target-policy" path = var.path policy = data.aws_iam_policy_document.mcons-del-s3-source-target-policy.json } resource "aws_iam_policy" "AssumeRoleWithWebIdentity-Policy" { description = "AssumeRoleWithWebIdentity-Policy" name = "AssumeRoleWithWebIdentity-Policy" path = var.path policy = data.aws_iam_policy_document.AssumeRoleWithWebIdentity-Policy.json } resource "aws_iam_policy" "mcond-eks-mcond-del-dev-ns-mc-dev-sa-sme-mc-qms-policy" { description = "Policy used by the EKS app sme-mc-qms in mc-dev namespace in mcond-del-dev" name = "mcond-eks-mcond-del-dev-ns-mc-dev-sa-sme-mc-qms-policy" path = var.path policy = data.aws_iam_policy_document.mcond-eks-mcond-del-dev-ns-mc-dev-sa-sme-mc-qms-policy.json } resource "aws_iam_policy" "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy0" { name = "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy0" path = var.path policy = data.aws_iam_policy_document.SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy0.json } resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" { name = "AWS_Allow_Inspector_Assessment" path = var.path policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json } resource "aws_iam_policy" "sme-delivery-source-access" { description = "sme-delivery-source-access" name = "sme-delivery-source-access" path = var.path policy = data.aws_iam_policy_document.sme-delivery-source-access.json } resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540804727342" { name = "oneClick_CloudTrail_CloudWatchLogs_Role_1540804727342" path = var.path policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540804727342.json } resource "aws_iam_policy" "For_RDS_Enhanced_Monitoring" { name = "For_RDS_Enhanced_Monitoring" path = var.path policy = data.aws_iam_policy_document.For_RDS_Enhanced_Monitoring.json } resource "aws_iam_policy" "eksctl-mc-del-dev-cluster-PolicyCloudWatchMetrics" { name = "eksctl-mc-del-dev-cluster-PolicyCloudWatchMetrics" path = var.path policy = data.aws_iam_policy_document.eksctl-mc-del-dev-cluster-PolicyCloudWatchMetrics.json } resource "aws_iam_policy" "mcond-portal-policy" { description = "mcond-portal-policy" name = "mcond-portal-policy" path = var.path policy = data.aws_iam_policy_document.mcond-portal-policy.json } resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503416241648" { name = "oneClick_CloudTrail_CloudWatchLogs_Role_1503416241648" path = var.path policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503416241648.json } resource "aws_iam_policy" "mcond-aws-config-policy" { description = "mcond-aws-config-policy" name = "mcond-aws-config-policy" path = var.path policy = data.aws_iam_policy_document.mcond-aws-config-policy.json } resource "aws_iam_policy" "vault-temp-iam" { name = "vault-temp-iam" path = var.path policy = data.aws_iam_policy_document.vault-temp-iam.json } resource "aws_iam_policy" "s3-amp-rw" { name = "s3-amp-rw" path = var.path policy = data.aws_iam_policy_document.s3-amp-rw.json } resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540804501388" { name = "oneClick_CloudTrail_CloudWatchLogs_Role_1540804501388" path = var.path policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540804501388.json } resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" { name = "GSIRT_AWS_Monitoring_Role-DescribePolicy" path = var.path policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json } resource "aws_iam_policy" "s3-delivery-ro" { description = "s3-delivery-ro" name = "s3-delivery-ro" path = var.path policy = data.aws_iam_policy_document.s3-delivery-ro.json } resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" { description = "DatadogAWSIntegrationPolicy" name = "DatadogAWSIntegrationPolicy" path = var.path policy = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json } resource "aws_iam_policy" "s3-conversion" { description = "s3-conversion" name = "s3-conversion" path = var.path policy = data.aws_iam_policy_document.s3-conversion.json } resource "aws_iam_policy" "cloudops-instance-policy" { description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess" name = "cloudops-instance-policy" path = var.path policy = data.aws_iam_policy_document.cloudops-instance-policy.json } resource "aws_iam_policy" "root" { name = "root" path = var.path policy = data.aws_iam_policy_document.root.json } resource "aws_iam_policy" "media-conversion-dev-logs-es-policy" { description = "Policy for accessing media-conversion-dev-logs-es" name = "media-conversion-dev-logs-es-policy" path = var.path policy = data.aws_iam_policy_document.media-conversion-dev-logs-es-policy.json } resource "aws_iam_policy" "mcond-ssm-sec-agent-status-upload" { description = "SSM permissions to check security agent status for sme-portal and upload to S3" name = "mcond-ssm-sec-agent-status-upload" path = var.path policy = data.aws_iam_policy_document.mcond-ssm-sec-agent-status-upload.json } resource "aws_iam_policy" "sme-delivery-uat-source-policy" { description = "sme-delivery-uat-source-policy" name = "sme-delivery-uat-source-policy" path = var.path policy = data.aws_iam_policy_document.sme-delivery-uat-source-policy.json } resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-bbb4bd83-8e6d-46ca-9456-afd9ba536cec" { name = "AWSLambdaBasicExecutionRole-bbb4bd83-8e6d-46ca-9456-afd9ba536cec" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-bbb4bd83-8e6d-46ca-9456-afd9ba536cec.json } resource "aws_iam_policy" "mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-asw-policy" { description = "Policy used by the EKS app sme-mc-asw in mc-del-dev namespace in mcond-del-dev2" name = "mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-asw-policy" path = var.path policy = data.aws_iam_policy_document.mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-asw-policy.json } resource "aws_iam_policy" "ALBIngressControllerIAMPolicy" { description = "ALBIngressControllerIAMPolicy" name = "ALBIngressControllerIAMPolicy" path = var.path policy = data.aws_iam_policy_document.ALBIngressControllerIAMPolicy.json } resource "aws_iam_policy" "mcond-amp-s3-rw" { name = "mcond-amp-s3-rw" path = var.path policy = data.aws_iam_policy_document.mcond-amp-s3-rw.json } resource "aws_iam_policy" "AWSQuickSightS3Policy" { description = "Grants Amazon QuickSight read permission to Amazon S3 resources" name = "AWSQuickSightS3Policy" path = "/service-role/" policy = data.aws_iam_policy_document.AWSQuickSightS3Policy.json } resource "aws_iam_policy" "oneClick_Cognito_mediaconversiondevAuth_Role_1591820587208" { name = "oneClick_Cognito_mediaconversiondevAuth_Role_1591820587208" path = var.path policy = data.aws_iam_policy_document.oneClick_Cognito_mediaconversiondevAuth_Role_1591820587208.json } resource "aws_iam_policy" "mcond-telestream-cloud" { name = "mcond-telestream-cloud" path = var.path policy = data.aws_iam_policy_document.mcond-telestream-cloud.json } resource "aws_iam_policy" "mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-qms-policy" { description = "Policy used by the EKS app sme-mc-qms in mc-del-dev namespace in mcond-del-dev2" name = "mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-qms-policy" path = var.path policy = data.aws_iam_policy_document.mcond-del-dev2-ns-mc-del-dev-sa-sme-mc-qms-policy.json } resource "aws_iam_policy" "mcond-del-dev2-ns-mc-dev-sa-sme-mc-qms-policy" { description = "Policy used by the EKS app sme-mc-qms in mc-dev namespace in mcond-del-dev2" name = "mcond-del-dev2-ns-mc-dev-sa-sme-mc-qms-policy" path = var.path policy = data.aws_iam_policy_document.mcond-del-dev2-ns-mc-dev-sa-sme-mc-qms-policy.json } resource "aws_iam_policy" "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy1" { name = "SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy1" path = var.path policy = data.aws_iam_policy_document.SecretsManagerRDSPostgreSQLRotationMultiUserRolePolicy1.json } resource "aws_iam_policy" "IAMPASSROLE" { name = "IAMPASSROLE" path = var.path policy = data.aws_iam_policy_document.IAMPASSROLE.json } resource "aws_iam_policy" "rdsAdmin_policy" { name = "rdsAdmin_policy" path = var.path policy = data.aws_iam_policy_document.rdsAdmin_policy.json } resource "aws_iam_policy" "flowlogsPolicy" { description = "For VPC Flow Logs" name = "flowlogsPolicy" path = var.path policy = data.aws_iam_policy_document.flowlogsPolicy.json } resource "aws_iam_policy" "mcons-del-s3-source-target" { name = "mcons-del-s3-source-target" path = var.path policy = data.aws_iam_policy_document.mcons-del-s3-source-target.json } resource "aws_iam_policy" "wafv2" { name = "wafv2" path = var.path policy = data.aws_iam_policy_document.wafv2.json } resource "aws_iam_policy" "DevAdmin" { name = "DevAdmin" path = var.path policy = data.aws_iam_policy_document.DevAdmin.json } resource "aws_iam_policy" "mcond-dev-logs-es-alerter-policy" { description = "mcond-dev-logs-es-alerter" name = "mcond-dev-logs-es-alerter-policy" path = var.path policy = data.aws_iam_policy_document.mcond-dev-logs-es-alerter-policy.json } resource "aws_iam_policy" "aoma-RDS_snapshot_lambda-policy" { name = "aoma-RDS_snapshot_lambda-policy" path = var.path policy = data.aws_iam_policy_document.aoma-RDS_snapshot_lambda-policy.json } resource "aws_iam_policy" "delp-mcond-s3-source-target" { description = "edia Conversion Accessing sme-delivery-dev-source + sme-delivery-dev-target in sme-aoma-delivery-prod" name = "delp-mcond-s3-source-target" path = var.path policy = data.aws_iam_policy_document.delp-mcond-s3-source-target.json } resource "aws_iam_policy" "mcond-eks-mcond-del-dev-ns-mc-del-stage-sa-sme-mc-qms-policy" { description = "Policy used by the EKS app sme-mc-qms in mc-del-stage namespace in mcond-del-dev" name = "mcond-eks-mcond-del-dev-ns-mc-del-stage-sa-sme-mc-qms-policy" path = var.path policy = data.aws_iam_policy_document.mcond-eks-mcond-del-dev-ns-mc-del-stage-sa-sme-mc-qms-policy.json } resource "aws_iam_policy" "eks_full_admin" { name = "eks_full_admin" path = var.path policy = data.aws_iam_policy_document.eks_full_admin.json } resource "aws_iam_policy" "cost-explore-ro" { description = "Read cost explorer service" name = "cost-explore-ro" path = var.path policy = data.aws_iam_policy_document.cost-explore-ro.json } resource "aws_iam_policy" "s3-delivery-rw" { description = "s3-delivery-rw" name = "s3-delivery-rw" path = var.path policy = data.aws_iam_policy_document.s3-delivery-rw.json } resource "aws_iam_policy" "mcond-eks-mcond-del-dev-ns-mc-stage-sa-sme-mc-qms-policy" { description = "Policy used by the EKS app sme-mc-qms in mc-stage namespace in mcond-del-dev" name = "mcond-eks-mcond-del-dev-ns-mc-stage-sa-sme-mc-qms-policy" path = var.path policy = data.aws_iam_policy_document.mcond-eks-mcond-del-dev-ns-mc-stage-sa-sme-mc-qms-policy.json } resource "aws_iam_policy" "eksctl-mc-del-dev-cluster-PolicyNLB" { name = "eksctl-mc-del-dev-cluster-PolicyNLB" path = var.path policy = data.aws_iam_policy_document.eksctl-mc-del-dev-cluster-PolicyNLB.json } resource "aws_iam_policy" "s3AccessForVantageServer" { name = "s3AccessForVantageServer" path = var.path policy = data.aws_iam_policy_document.s3AccessForVantageServer.json } resource "aws_iam_policy" "oneClick_flowlogsRole_1502366448658" { name = "oneClick_flowlogsRole_1502366448658" path = var.path policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1502366448658.json } resource "aws_iam_policy" "CWLogs-Put" { name = "CWLogs-Put" path = var.path policy = data.aws_iam_policy_document.CWLogs-Put.json } resource "aws_iam_policy" "DeepSecurity-1d31f078b" { name = "DeepSecurity-1d31f078b" path = var.path policy = data.aws_iam_policy_document.DeepSecurity-1d31f078b.json } resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" { description = "AWSLoadBalancerControllerIAMPolicy" name = "AWSLoadBalancerControllerIAMPolicy" path = var.path policy = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json } resource "aws_iam_policy" "mcons-amp-S3-RW-policy" { name = "mcons-amp-S3-RW-policy" path = var.path policy = data.aws_iam_policy_document.mcons-amp-S3-RW-policy.json } resource "aws_iam_policy" "sme-media-conversion-dev-waf-logging-policy" { description = "sme-media-conversion-dev-waf-logging-policy" name = "sme-media-conversion-dev-waf-logging-policy" path = var.path policy = data.aws_iam_policy_document.sme-media-conversion-dev-waf-logging-policy.json } resource "aws_iam_policy" "RDSAdminPolicyForTerraform" { description = "RDSAdminPolicyForTerraform" name = "RDSAdminPolicyForTerraform" path = var.path policy = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json } resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" { description = "Access s3 bucket in core cloud shared account" name = "KubeCostFederatedRoleIAMPolicy" path = var.path policy = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json } resource "aws_iam_policy" "mcond-amp-ust-stage" { name = "mcond-amp-ust-stage" path = var.path policy = data.aws_iam_policy_document.mcond-amp-ust-stage.json } resource "aws_iam_policy" "sme-delivery-stage-source-s3-access" { description = "sme-delivery-stage-source-s3-access" name = "sme-delivery-stage-source-s3-access" path = var.path policy = data.aws_iam_policy_document.sme-delivery-stage-source-s3-access.json } resource "aws_iam_policy" "mcond-del-arvato-s3-access" { description = "mcond-del-arvato-s3-access" name = "mcond-del-arvato-s3-access" path = var.path policy = data.aws_iam_policy_document.mcond-del-arvato-s3-access.json } resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-ae4342d6-c45f-4860-aaf1-a28301651665" { description = "" name = "AWSLambdaBasicExecutionRole-ae4342d6-c45f-4860-aaf1-a28301651665" path = "/service-role/" policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-ae4342d6-c45f-4860-aaf1-a28301651665.json } resource "aws_iam_policy" "sme-mc-stage-migration-s3-access" { description = "Grants full access to sme-mc-stage-migration s3 bucket" name = "sme-mc-stage-migration-s3-access" path = var.path policy = data.aws_iam_policy_document.sme-mc-stage-migration-s3-access.json } resource "aws_iam_policy" "KarpenterControllerPolicy" { name = "KarpenterControllerPolicy" description = "Karpenter controller IAM policy" path = var.path policy = data.aws_iam_policy_document.KarpenterControllerPolicy.json } resource "aws_iam_policy" "s3-policy" { name = "s3-policy" description = "s3 bucket access" path = var.path policy = data.aws_iam_policy_document.s3-policy.json } resource "aws_iam_policy" "mcon-dev-openobserve-s3-policy" { description = "Policy for OpenObserve S3 access" name = "mcon-dev-openobserve-s3-policy" path = var.path policy = data.aws_iam_policy_document.mcon-dev-openobserve-s3-policy.json } resource "aws_iam_policy" "sme-deld-watermarking-us-east-1-s3-policy" { description = "Policy for SME-Deld-Watermarking S3 access" name = "sme-deld-watermarking-us-east-1-s3-policy" path = var.path policy = data.aws_iam_policy_document.sme-deld-watermarking-us-east-1-s3-policy.json } resource "aws_iam_policy" "rds-custom-s3-backup" { name = "rds-custom-s3-backup" description = "Custom S3 backup policy for RDS" path = var.path policy = data.aws_iam_policy_document.rds_custom_s3_backup.json }