resource "aws_iam_policy" "s3-list-get-put-delete-object-policy" {
  description = "S3 bucket policy for list bucket, put object, get object, delete object"
  name        = "s3-list-get-put-delete-object-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-list-get-put-delete-object-policy.json
}

resource "aws_iam_policy" "sme-media-services-dev-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1" {
  name   = "sme-media-services-dev-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.sme-media-services-dev-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1.json
}

resource "aws_iam_policy" "sme-dev-origin-amp-bucket-access" {
  description = "sme-dev-origin-amp-bucket-access"
  name        = "sme-dev-origin-amp-bucket-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-dev-origin-amp-bucket-access.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "tagging_policy" {
  name   = "tagging_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.tagging_policy.json
}

resource "aws_iam_policy" "CloudsearchAllAccess" {
  name   = "CloudsearchAllAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudsearchAllAccess.json
}

resource "aws_iam_policy" "aomadevcrossaccount" {
  name   = "aomadevcrossaccount"
  path   = var.path
  policy = data.aws_iam_policy_document.aomadevcrossaccount.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "MSRVD-NAT-POLICY" {
  name   = "MSRVD-NAT-POLICY"
  path   = var.path
  policy = data.aws_iam_policy_document.MSRVD-NAT-POLICY.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "dynamodblimitedaccess" {
  name   = "dynamodblimitedaccess"
  path   = var.path
  policy = data.aws_iam_policy_document.dynamodblimitedaccess.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585145002684" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585145002684"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585145002684.json
}

resource "aws_iam_policy" "RDSProxyIAMPolicy" {
  description = "Allows you to grant RDS access to additional resources on your behalf"
  name        = "RDSProxyIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSProxyIAMPolicy.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}


resource "aws_iam_policy" "msrvd-mpub-stage-policy" {
  description = "msrvd-mpub-stage-policy"
  name        = "msrvd-mpub-stage-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd-mpub-stage-policy.json
}

resource "aws_iam_policy" "msrvd-msrv-dev" {
  name   = "msrvd-msrv-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.msrvd-msrv-dev.json
}
resource "aws_iam_policy" "sme-dev-origin-medialib" {
  name   = "sme-dev-origin-medialib"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-dev-origin-medialib.json
}


resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503463609279" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503463609279"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503463609279.json
}

resource "aws_iam_policy" "MandoUserPolicyForStandaloneAccounts" {
  name   = "MandoUserPolicyForStandaloneAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoUserPolicyForStandaloneAccounts.json
}

resource "aws_iam_policy" "msrvs-mc-mlib-stage" {
  name   = "msrvs-mc-mlib-stage"
  path   = var.path
  policy = data.aws_iam_policy_document.msrvs-mc-mlib-stage.json
}

resource "aws_iam_policy" "msrvs-msrv-stage" {
  name   = "msrvs-msrv-stage"
  path   = var.path
  policy = data.aws_iam_policy_document.msrvs-msrv-stage.json
}

resource "aws_iam_policy" "flowlogsPolicy" {
  description = "For VPC Flow Logs"
  name        = "flowlogsPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.flowlogsPolicy.json
}

resource "aws_iam_policy" "sme-dev-origin-amp-s3" {
  name   = "sme-dev-origin-amp-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-dev-origin-amp-s3.json
}

resource "aws_iam_policy" "sme-stage-origin-amp-s3" {
  name   = "sme-stage-origin-amp-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-stage-origin-amp-s3.json
}

resource "aws_iam_policy" "AWSIngressControllerIAMPolicy" {
  description = "AWSIngressControllerIAMPolicy"
  name        = "AWSIngressControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.AWSIngressControllerIAMPolicy.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "cloudops-BudgetActionDenyPolicy" {
  description = "cloudops-BudgetActionDenyPolicy"
  name        = "cloudops-BudgetActionDenyPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-BudgetActionDenyPolicy.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "sme-dev-origin-promommx" {
  name   = "sme-dev-origin-promommx"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-dev-origin-promommx.json
}

resource "aws_iam_policy" "sme-media-services-dev-waf-logging-policy" {
  description = "sme-media-services-dev-waf-logging-policy"
  name        = "sme-media-services-dev-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-media-services-dev-waf-logging-policy.json
}

resource "aws_iam_policy" "msrv-amp-aoma-S3-dev" {
  name   = "msrv-amp-aoma-S3-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.msrv-amp-aoma-S3-dev.json
}


resource "aws_iam_policy" "wafv2admin" {
  name   = "wafv2admin"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2admin.json
}


resource "aws_iam_policy" "PostgreSQL-Credentials-Rotation-Policy" {
  description = "PostgreSQL-Credentials-Rotation-Policy"
  name        = "PostgreSQL-Credentials-Rotation-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.PostgreSQL-Credentials-Rotation-Policy.json
}

resource "aws_iam_policy" "msrvd-aws-config-policy" {
  description = "msrvd-aws-config-policy"
  name        = "msrvd-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd-aws-config-policy.json
}


resource "aws_iam_policy" "oneClick_lambda_basic_execution_1493667115368" {
  name   = "oneClick_lambda_basic_execution_1493667115368"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1493667115368.json
}

resource "aws_iam_policy" "msrv-amp-s3-dev" {
  name   = "msrv-amp-s3-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.msrv-amp-s3-dev.json
}

resource "aws_iam_policy" "mc-mlib-dev" {
  name   = "mc-mlib-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.mc-mlib-dev.json
}

resource "aws_iam_policy" "msrvd-mc-mlib-dev" {
  name   = "msrvd-mc-mlib-dev"
  path   = var.path
  policy = data.aws_iam_policy_document.msrvd-mc-mlib-dev.json
}

resource "aws_iam_policy" "msrvd-eks-varnishsecretaccess-policy" {
  description = "msrvd-eks-varnishsecretaccess-policy"
  name        = "msrvd-eks-varnishsecretaccess-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd-eks-varnishsecretaccess-policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "promo-stage" {
  description = "promo-stage"
  name        = "promo-stage"
  path        = var.path
  policy      = data.aws_iam_policy_document.promo-stage.json
}

resource "aws_iam_policy" "ECR-Policy" {
  name   = "ECR-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ECR-Policy.json
}

resource "aws_iam_policy" "msrvd-mc-promo-dev" {
  description = "msrvd-mc-promo-dev "
  name        = "msrvd-mc-promo-dev"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd-mc-promo-dev.json
}

resource "aws_iam_policy" "msrvd-mpub-dev-policy" {
  description = "msrvd-mpub-dev-policy"
  name        = "msrvd-mpub-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd-mpub-dev-policy.json
}

resource "aws_iam_policy" "MandoEnablePolicyForManagementAccounts" {
  name   = "MandoEnablePolicyForManagementAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoEnablePolicyForManagementAccounts.json
}

resource "aws_iam_policy" "sme-stage-origin-dx3" {
  name   = "sme-stage-origin-dx3"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-stage-origin-dx3.json
}

resource "aws_iam_policy" "MandoUserPolicyForOrganizationMembers" {
  name   = "MandoUserPolicyForOrganizationMembers"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoUserPolicyForOrganizationMembers.json
}

resource "aws_iam_policy" "For_RDS_Enhanced_Monitoring" {
  name   = "For_RDS_Enhanced_Monitoring"
  path   = var.path
  policy = data.aws_iam_policy_document.For_RDS_Enhanced_Monitoring.json
}

resource "aws_iam_policy" "MandoServiceLinkedRoleAnalogPolicy" {
  name   = "MandoServiceLinkedRoleAnalogPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoServiceLinkedRoleAnalogPolicy.json
}

resource "aws_iam_policy" "mlibd-mcon-s3-policy" {
  name   = "mlibd-mcon-s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.mlibd-mcon-s3-policy.json
}


resource "aws_iam_policy" "MediaService-RDS_snapshot_lambda-role-policy" {
  name   = "MediaService-RDS_snapshot_lambda-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.MediaService-RDS_snapshot_lambda-role-policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1630900171166" {
  name   = "oneClick_flowlogsRole_1630900171166"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1630900171166.json
}

resource "aws_iam_policy" "AWSGlueServiceRole-wafv2-logs" {
  description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!"
  name        = "AWSGlueServiceRole-wafv2-logs"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSGlueServiceRole-wafv2-logs.json
}

resource "aws_iam_policy" "MandoManagementPolicyForDesignatedAdministrators" {
  name   = "MandoManagementPolicyForDesignatedAdministrators"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoManagementPolicyForDesignatedAdministrators.json
}

resource "aws_iam_policy" "MandoFullAccessPolicyForStandaloneAccounts" {
  name   = "MandoFullAccessPolicyForStandaloneAccounts"
  path   = var.path
  policy = data.aws_iam_policy_document.MandoFullAccessPolicyForStandaloneAccounts.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-e1f55ff2-d2c3-47a5-8f01-49e9c73cff5c" {
  name   = "AWSLambdaBasicExecutionRole-e1f55ff2-d2c3-47a5-8f01-49e9c73cff5c"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-e1f55ff2-d2c3-47a5-8f01-49e9c73cff5c.json
}

resource "aws_iam_policy" "msrvd-dx3-dev" {
  description = "Media Service DX3 DEV for AWS S3 Buckets"
  name        = "msrvd-dx3-dev"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd-dx3-dev.json
}

resource "aws_iam_policy" "KinesisFirehoseServicePolicy-aws-waf-logs-media-services-dev-us-east-1" {
  name   = "KinesisFirehoseServicePolicy-aws-waf-logs-media-services-dev-us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.KinesisFirehoseServicePolicy-aws-waf-logs-media-services-dev-us-east-1.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "DMS-Policy" {
  name   = "DMS-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.DMS-Policy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "sme-stage-origin-promommx" {
  name   = "sme-stage-origin-promommx"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-stage-origin-promommx.json
}

resource "aws_iam_policy" "msrvd-portal-policy" {
  description = "msrvd-portal-policy"
  name        = "msrvd-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd-portal-policy.json
}

resource "aws_iam_policy" "sme-stage-origin-medialib" {
  name   = "sme-stage-origin-medialib"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-stage-origin-medialib.json
}

resource "aws_iam_policy" "sme-dev-origin-amp-s3-role" {
  name   = "sme-dev-origin-amp-s3-role"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-dev-origin-amp-s3-role.json
}

resource "aws_iam_policy" "msrvd-mcon-dev-mlib-policy" {
  name   = "msrvd-mcon-dev-mlib-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.msrvd-mcon-dev-mlib-policy.json
}
resource "aws_iam_policy" "msrvd-mcon-stage-mlib-policy" {
  name   = "msrvd-mcon-stage-mlib-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.msrvd-mcon-stage-mlib-policy.json
}

resource "aws_iam_policy" "msrvd2-report1b01" {
  description = "Policy for DevAdmin role "
  name        = "msrvd2-report1b01"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvd2-report1b01.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "sme-stage-origin-dx3-s3-access" {
  description = "Grants access to sme-stage-origin-dx3 s3 bucket"
  name        = "sme-stage-origin-dx3-s3-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-stage-origin-dx3-s3-access.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy" {
  name        = "KarpenterControllerPolicy"
  description = "Karpenter controller IAM policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KarpenterControllerPolicy.json
}

resource "aws_iam_policy" "msrv-github-actions-lambda-policy" {
  description = "Lambda deployment policy for GH Actions Role"
  name        = "msrv-github-actions-lambda-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv-github-actions-lambda-policy.json
}

resource "aws_iam_policy" "msrv-github-actions-ecr-policy" {
  description = "ECR policy for GH Actions Role"
  name        = "msrv-github-actions-ecr-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv-github-actions-ecr-policy.json
}

resource "aws_iam_policy" "msrv-github-actions-secretsmanager-policy" {
  description = "Secretsmanager policy for GH Actions Role"
  name        = "msrv-github-actions-secretsmanager-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv-github-actions-secretsmanager-policy.json
}

resource "aws_iam_policy" "msrv-github-actions-eks-policy" {
  description = "EKS policy for GH Actions Role"
  name        = "msrv-github-actions-eks-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv-github-actions-eks-policy.json
}

resource "aws_iam_policy" "lambda_elasticsearch_execution_policy" {
  description = "lambda_elasticsearch_execution_policy"
  name        = "lambda_elasticsearch_execution_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda_elasticsearch_execution_policy.json
}

resource "aws_iam_policy" "lambda-rds-log-backup-policy" {
  description = "lambda-rds-log-backup-policy"
  name        = "lambda-rds-log-backup-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda-rds-log-backup-policy.json
}

resource "aws_iam_policy" "MediaService-RDS_snapshot_lambda-sns-role-policy" {
  description = "MediaService-RDS_snapshot_lambda-sns-role-policy"
  name        = "MediaService-RDS_snapshot_lambda-sns-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.MediaService-RDS_snapshot_lambda-sns-role-policy.json
}


resource "aws_iam_policy" "s3-fullaccess-policy" {
  description = "s3-fullaccess-policy"
  name        = "s3-fullaccess-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-fullaccess-policy.json
}

resource "aws_iam_policy" "s3-mediaservices-qa-access-policy" {
  description = "S3-mediaservices-qa-access-policy"
  name        = "S3-mediaservices-qa-access-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.mediaservices-qa-access-policy.json
}