module "amp-prod-origin-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.amp-prod-origin.name
  custom_group_policy_arns = [
  ]
}

module "dx3_prod-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.dx3_prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/dx3-prod-s3",
    "arn:aws:iam::${var.account_id}:policy/dx3-prod",
  ]
}

module "ggproddbdata-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.ggproddbdata.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess",
  ]
}

module "mc_dx3_prod-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mc_dx3_prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/mc-dx3-prod",
  ]
}

module "msrvp-ath-warehouse-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrvp-ath-warehouse.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/MediaService-RDS_snapshot_lambda-role-policy",
    "arn:aws:iam::aws:policy/AmazonAthenaFullAccess"
  ]
}

module "mc_mlib_prod-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mc_mlib_prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/mc-mlib-prod",
  ]
}

module "mc_promo_prod-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mc_promo_prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/mc-promo-prod",
  ]
}

module "mpub_prod-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.mpub_prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/mpub-prod",
    "arn:aws:iam::${var.account_id}:policy/mpub-prod-ses",
  ]
}

module "msrv-s3-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrv-s3.name
  custom_group_policy_arns = [
    aws_iam_policy.cloudwatch-fullaccess-policy.arn,
    aws_iam_policy.s3-fullaccess-policy.arn,
    ]
}

module "msrvp-jenkins-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrvp-jenkins.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/AmazonECS_FullAccess",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
    "arn:aws:iam::${var.account_id}:policy/msrvp-mpub-prod-policy"
  ]
}

module "msrv_prod-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.msrv_prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/msrv_prod_sqs",
    "arn:aws:iam::${var.account_id}:policy/msrv-prod-ses",
    "arn:aws:iam::${var.account_id}:policy/msrv_prod_cf",
  ]
}

module "promo_prod-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.promo_prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/promo-prod-s3",
    "arn:aws:iam::${var.account_id}:policy/promo-prod",
  ]
}

module "sme-media-service-rs-dw-01-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-media-service-rs-dw-01.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess",
    "arn:aws:iam::${var.account_id}:policy/sme-media-service-rs-dw-01",
  ]
}