resource "aws_iam_policy" "spotinst-iam-stack-tbtob-SpotinstManagedPolicy-1LOJ8DN85YO99" {
  description = "Spotinst Account Policy"
  name        = "spotinst-iam-stack-tbtob-SpotinstManagedPolicy-1LOJ8DN85YO99"
  path        = var.path
  policy      = data.aws_iam_policy_document.spotinst-iam-stack-tbtob-SpotinstManagedPolicy-1LOJ8DN85YO99.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "lambda_elasticsearch_execution_policy" {
  description = "lambda_elasticsearch_execution_policy"
  name        = "lambda_elasticsearch_execution_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda_elasticsearch_execution_policy.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "msk-access-policy" {
  name        = "msk-access-policy"
  path   = var.path
  policy      = data.aws_iam_policy_document.msk_access_policy_document.json
}
resource "aws_iam_policy" "mcon-external-msk-policy" {
  name        = "mcon-external-msk-policy"
  path   = var.path
  policy      = data.aws_iam_policy_document.mcon-external-msk-policy.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "TaggingPolicy" {
  name   = "TaggingPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.TaggingPolicy.json
}

resource "aws_iam_policy" "sme-gen-custom" {
  name   = "sme-gen-custom"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-gen-custom.json
}

resource "aws_iam_policy" "eks-full" {
  name   = "eks-full"
  path   = var.path
  policy = data.aws_iam_policy_document.eks-full.json
}

resource "aws_iam_policy" "ECS_RO" {
  description = "ECS policy for deployment through Jenkins"
  name        = "ECS_RO"
  path        = var.path
  policy      = data.aws_iam_policy_document.ECS_RO.json
}

resource "aws_iam_policy" "eksctl-mc-del-prod-cluster-PolicyCloudWatchMetrics" {
  name   = "eksctl-mc-del-prod-cluster-PolicyCloudWatchMetrics"
  path   = var.path
  policy = data.aws_iam_policy_document.eksctl-mc-del-prod-cluster-PolicyCloudWatchMetrics.json
}

resource "aws_iam_policy" "mconp-aws-config-policy" {
  description = "mconp-aws-config-policy"
  name        = "mconp-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-aws-config-policy.json
}

resource "aws_iam_policy" "AssumeRoleWithWebIdentity-Policy" {
  description = "AssumeRoleWithWebIdentity-Policy"
  name        = "AssumeRoleWithWebIdentity-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AssumeRoleWithWebIdentity-Policy.json
}

resource "aws_iam_policy" "mconp-del-s3-source-target-policy" {
  description = "mconp-del-s3-source-target-policy"
  name        = "mconp-del-s3-source-target-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-del-s3-source-target-policy.json
}

resource "aws_iam_policy" "TaggingPolicy1" {
  name   = "TaggingPolicy1"
  path   = var.path
  policy = data.aws_iam_policy_document.TaggingPolicy1.json
}

resource "aws_iam_policy" "oneClick_lambda_basic_execution_1542091158089" {
  name   = "oneClick_lambda_basic_execution_1542091158089"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1542091158089.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1540804995301" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1540804995301"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1540804995301.json
}

resource "aws_iam_policy" "ec2-policy" {
  name   = "ec2-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ec2-policy.json
}

resource "aws_iam_policy" "oneClick_Cognito_mediaconversionprod_usersAuth_Role_1595829493866" {
  name   = "oneClick_Cognito_mediaconversionprod_usersAuth_Role_1595829493866"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_mediaconversionprod_usersAuth_Role_1595829493866.json
}

resource "aws_iam_policy" "flowlogsPolicy" {
  description = "For VPC Flow Logs"
  name        = "flowlogsPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.flowlogsPolicy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "athena-developer-01" {
  name   = "athena-developer-01"
  path   = var.path
  policy = data.aws_iam_policy_document.athena-developer-01.json
  tags = {
    "JIRA" = "CLOUDOPS-8293"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-8293"
  }
}

resource "aws_iam_policy" "mconp-del-s3-source-target" {
  name   = "mconp-del-s3-source-target"
  path   = var.path
  policy = data.aws_iam_policy_document.mconp-del-s3-source-target.json
}

resource "aws_iam_policy" "mconp-trendmicro_esdomain_policy" {
  description = "For TMDS ELK"
  name        = "mconp-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "SecretsManagerAccess" {
  name   = "SecretsManagerAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerAccess.json
}

resource "aws_iam_policy" "BatchReadOnlyPolicy" {
  name   = "BatchReadOnlyPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.BatchReadOnlyPolicy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503399632855" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503399632855"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503399632855.json
}

resource "aws_iam_policy" "mconp-prod-logs-es-alerter-policy" {
  description = "mconp-prod-logs-es-alerter-policy"
  name        = "mconp-prod-logs-es-alerter-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-prod-logs-es-alerter-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503399473425" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503399473425"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503399473425.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "eksctl-mc-del-prod-cluster-PolicyNLB" {
  name   = "eksctl-mc-del-prod-cluster-PolicyNLB"
  path   = var.path
  policy = data.aws_iam_policy_document.eksctl-mc-del-prod-cluster-PolicyNLB.json
}

resource "aws_iam_policy" "aoma-RDS_snapshot_lambda-policy" {
  name   = "aoma-RDS_snapshot_lambda-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aoma-RDS_snapshot_lambda-policy.json
}

resource "aws_iam_policy" "mconp-eks-mconp-del-prod-ns-mc-del-prod-sa-sme-mc-qms-policy" {
  description = "Policy used by the EKS app  sme-mc-qms in mc-del-prod namespace in mconp-del-prod"
  name        = "mconp-eks-mconp-del-prod-ns-mc-del-prod-sa-sme-mc-qms-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-eks-mconp-del-prod-ns-mc-del-prod-sa-sme-mc-qms-policy.json
}

resource "aws_iam_policy" "mconp-prod-athena-s3-targets" {
  description = "mconp-prod-athena-s3-targets for CLOUDOPS-9288"
  name        = "mconp-prod-athena-s3-targets"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-prod-athena-s3-targets.json
}

resource "aws_iam_policy" "mconp-eks-mconp-del-prod-ns-mc-prod-sa-sme-mc-qms-policy" {
  description = "Policy used by the EKS app  sme-mc-qms in mc-prod namespace in mconp-del-prod"
  name        = "mconp-eks-mconp-del-prod-ns-mc-prod-sa-sme-mc-qms-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-eks-mconp-del-prod-ns-mc-prod-sa-sme-mc-qms-policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "mconp-eks-mconp-del-prod-ns-mc-del-prod-sa-sme-mc-asw-policy" {
  description = "Policy used by the EKS app  sme-mc-asw in mc-del-prod namespace in mconp-del-prod"
  name        = "mconp-eks-mconp-del-prod-ns-mc-del-prod-sa-sme-mc-asw-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-eks-mconp-del-prod-ns-mc-del-prod-sa-sme-mc-asw-policy.json
}

resource "aws_iam_policy" "mconp-eks-cluster-creation-policy" {
  description = "Policy for EKS cluster creation"
  name        = "mconp-eks-cluster-creation-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-eks-cluster-creation-policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1447252672929" {
  name   = "oneClick_flowlogsRole_1447252672929"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1447252672929.json
}

resource "aws_iam_policy" "mconp-portal-policy" {
  description = "mconp-portal-policy"
  name        = "mconp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-portal-policy.json
}

resource "aws_iam_policy" "mconp-amp-s3-rw" {
  description = "mconp-amp-s3-rw"
  name        = "mconp-amp-s3-rw"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-amp-s3-rw.json
}

resource "aws_iam_policy" "CloudabilityVerificationPolicy" {
  name   = "CloudabilityVerificationPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityVerificationPolicy.json
}

resource "aws_iam_policy" "sme-media-conversion-prod-waf-logging-policy" {
  description = "sme-media-conversion-prod-waf-logging-policy"
  name        = "sme-media-conversion-prod-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-media-conversion-prod-waf-logging-policy.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "rdsadmin_policy" {
  name   = "rdsadmin_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.rdsadmin_policy.json
}

resource "aws_iam_policy" "sme-amp-rw" {
  description = "sme-amp-rw"
  name        = "sme-amp-rw"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-amp-rw.json
}

resource "aws_iam_policy" "oneClick_Cognito_mediaconversionprod_usersUnauth_Role_1595829493867" {
  name   = "oneClick_Cognito_mediaconversionprod_usersUnauth_Role_1595829493867"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_mediaconversionprod_usersUnauth_Role_1595829493867.json
}

resource "aws_iam_policy" "ALBIngressControllerIAMPolicy" {
  description = "ALBIngressControllerIAMPolicy"
  name        = "ALBIngressControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ALBIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "DeepSecurity-f660abcab" {
  name   = "DeepSecurity-f660abcab"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity-f660abcab.json
}

resource "aws_iam_policy" "TaggingPolicy2" {
  name   = "TaggingPolicy2"
  path   = var.path
  policy = data.aws_iam_policy_document.TaggingPolicy2.json
}

resource "aws_iam_policy" "CloudabilityMonitorResourcesPolicy" {
  name   = "CloudabilityMonitorResourcesPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityMonitorResourcesPolicy.json
}

resource "aws_iam_policy" "iam-policies" {
  name   = "iam-policies"
  path   = var.path
  policy = data.aws_iam_policy_document.iam-policies.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "Billing-RO" {
  name   = "Billing-RO"
  path   = var.path
  policy = data.aws_iam_policy_document.Billing-RO.json
}

resource "aws_iam_policy" "media-conversion-prod-logs-es-policy" {
  description = "Policy to access media-conversion-dev-logs es domain"
  name        = "media-conversion-prod-logs-es-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.media-conversion-prod-logs-es-policy.json
}

resource "aws_iam_policy" "mconp-quicksight-s3-access-policy" {
  description = "Policy to access S3 from Quicksight"
  name        = "mconp-quicksight-s3-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mconp-quicksight-s3-access-policy-document.json
}

resource "aws_iam_policy" "CWLogs-Put" {
  description = "Push logs to Cloudwatch"
  name        = "CWLogs-Put"
  path        = var.path
  policy      = data.aws_iam_policy_document.CWLogs-Put.json
}

resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" {
  description = "AWSLoadBalancerControllerIAMPolicy"
  name        = "AWSLoadBalancerControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "DMS-Policy" {
  name   = "DMS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.DMS-Policy.json
}

resource "aws_iam_policy" "eks-fullaccess" {
  description = "eks-fullaccess"
  name        = "eks-fullaccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.eks-fullaccess.json
}

resource "aws_iam_policy" "lambda-create" {
  name   = "lambda-create"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda-create.json
}

resource "aws_iam_policy" "RDSAdminIAMPassRole" {
  name   = "RDSAdminIAMPassRole"
  path   = var.path
  policy = data.aws_iam_policy_document.RDSAdminIAMPassRole.json
}

resource "aws_iam_policy" "mconp-quicksight-prog" {
  name   = "mconp-quicksight-prog"
  path   = var.path
  policy = data.aws_iam_policy_document.mconp-quicksight-prog.json
  tags = {
    "JIRA" = "CLOUDOPS-14033"
  }
  tags_all = {
    "JIRA" = "CLOUDOPS-14033"
  }
}

resource "aws_iam_policy" "mconp-s3-mlib-policy" {
  name   = "mconp-s3-mlib-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.mconp-s3-mlib-policy.json
}

resource "aws_iam_policy" "mcp-batch-ecs-task-role-policy" {
  name   = "mcp-batch-ecs-task-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.mcp-batch-ecs-task-role-policy.json
}

resource "aws_iam_policy" "delconvp-quicksight-prog-policy" {
  name   = "delconvp-quicksight-prog-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.delconvp-quicksight-prog-policy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy" {
  name   = "KarpenterControllerPolicy"
  description = "Karpenter controller IAM policy"
  path   = var.path
  policy = data.aws_iam_policy_document.KarpenterControllerPolicy.json
}

resource "aws_iam_policy" "RDSProxyIAMPolicy" {
  description = "RDSProxyIAMPolicy"
  name        = "RDSProxyIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSProxyIAMPolicy.json
}

resource "aws_iam_policy" "sme-delp-watermarking-s3-policy" {
  description = "Policy for SME-Delp-Watermarking S3 access"
  name        = "sme-delp-watermarking-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-delp-watermarking-s3-policy.json
}