module "amp-dev-origin-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.amp-dev-origin.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/sme-dev-origin-amp-s3",
  ]
}

module "amp-stage-origin-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.amp-stage-origin.name
  custom_group_policy_arns = [
  ]
}

module "msrvd-jenkins-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrvd-jenkins.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/AmazonECS_FullAccess",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
    "arn:aws:iam::aws:policy/AmazonEKSClusterPolicy",
    "arn:aws:iam::aws:policy/AmazonEKSServicePolicy",
    "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy",
  ]
}

module "msrvd-mc-mlib-dev-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrvd-mc-mlib-dev.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/msrvd-mc-mlib-dev",
  ]
}

module "msrvd-rds-temp-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrvd-rds-temp.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonRDSFullAccess",
    "arn:aws:iam::aws:policy/ReadOnlyAccess",
  ]
}

module "msrvs-mc-mlib-stage-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrvs-mc-mlib-stage.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/msrvs-mc-mlib-stage",
  ]
}

module "sme-media-services-dev-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-media-services-dev.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/sme-dev-origin-promommx",
    "arn:aws:iam::${var.account_id}:policy/sme-dev-origin-medialib",
    "arn:aws:iam::${var.account_id}:policy/sme-stage-origin-medialib",
    "arn:aws:iam::${var.account_id}:policy/sme-stage-origin-dx3",
    "arn:aws:iam::${var.account_id}:policy/sme-stage-origin-promommx",
    "arn:aws:iam::${var.account_id}:policy/promo-stage",
    "arn:aws:iam::${var.account_id}:policy/msrvd-mc-promo-dev",
    "arn:aws:iam::aws:policy/CloudFrontFullAccess",
    "arn:aws:iam::aws:policy/service-role/AWSConfigRulesExecutionRole",
    "arn:aws:iam::aws:policy/AmazonSQSFullAccess",
  ]
}