resource "aws_db_instance" "mc-rds-prod-db-01" {
  # checkov:skip=CKV_AWS_161: IAM authentication not enabled for this legacy RDS instance
  # checkov:skip=CKV_AWS_226: Auto-minor-version upgrade disabled intentionally for this RDS instance
  # checkov:skip=CKV2_AWS_30: Query logging not configured for this prod RDS instance
  allocated_storage          = 599
  auto_minor_version_upgrade = false
  backup_retention_period    = 14
  backup_window              = "07:00-07:30"
  ca_cert_identifier         = "rds-ca-rsa2048-g1"
  copy_tags_to_snapshot      = true
  customer_owned_ip_enabled  = false
  db_name                    = "edb"
  db_subnet_group_name       = "mcon-p-02-delivery-rds-sng"
  delete_automated_backups   = true
  deletion_protection        = true
  enabled_cloudwatch_logs_exports = [
    "postgresql", "upgrade"
  ]
  engine                                = "postgres"
  engine_version                        = "17.7"
  iam_database_authentication_enabled   = false
  identifier                            = "mc-rds-prod-db-01"
  instance_class                        = "db.m6g.2xlarge"
  kms_key_id                            = "arn:aws:kms:eu-central-1:638682502729:key/c38ff5eb-7ec7-4cc3-97d4-8f13ef628391"
  license_model                         = "postgresql-license"
  maintenance_window                    = "sat:06:00-sat:06:30"
  max_allocated_storage                 = 850
  monitoring_interval                   = 60
  monitoring_role_arn                   = "arn:aws:iam::638682502729:role/rds-monitoring-role"
  multi_az                              = true
  network_type                          = "IPV4"
  option_group_name                     = "default:postgres-17"
  parameter_group_name                  = "mc-rds-prod-db-01-config-pg17"
  port                                  = 5444
  publicly_accessible                   = false
  skip_final_snapshot                   = true
  storage_encrypted                     = true
  storage_type                          = "gp3"
  apply_immediately                     = true
  allow_major_version_upgrade           = true
  tags = {
    "App"                      = "MCON-DEL"
    "Business-Unit"            = "AOMA-Conversion"
    "Environment"              = "Prod"
    "Owner"                    = "Ralph Capasso"
    "Project-Code"             = "SME-2000-0306C"
    "Project-Name"             = "Media-Conversion-Prod"
    "aws-migration-project-id" = "MPE22602"
    "map-dba"                  = "d-server-01tz6mps1jopod"
    "map-migrated"             = "d-server-01tz6mps1jopod"
    "status"                   = "keepon"
    "workload-type"            = "production"
  }
  tags_all = {
    "App"                      = "MCON-DEL"
    "Business-Unit"            = "AOMA-Conversion"
    "Environment"              = "Prod"
    "Owner"                    = "Ralph Capasso"
    "Project-Code"             = "SME-2000-0306C"
    "Project-Name"             = "Media-Conversion-Prod"
    "aws-migration-project-id" = "MPE22602"
    "map-dba"                  = "d-server-01tz6mps1jopod"
    "map-migrated"             = "d-server-01tz6mps1jopod"
    "status"                   = "keepon"
    "workload-type"            = "production"
  }
  username = "master_rds"
  vpc_security_group_ids = [
    "sg-05b6e990d65b0ca0a",
    "sg-4646072e",
  ]
}