resource "aws_iam_policy" "CloudHealth-ReadOnly-Assets" {
  name   = "CloudHealth-ReadOnly-Assets"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudHealth-ReadOnly-Assets.json
}

resource "aws_iam_policy" "BotMetric-Security-and-Automation" {
  name   = "BotMetric-Security-and-Automation"
  path   = var.path
  policy = data.aws_iam_policy_document.BotMetric-Security-and-Automation.json
}

resource "aws_iam_policy" "StatesExecutionPolicy-eu-central-1" {
  description = "IAM policy for use with Amazon States"
  name        = "StatesExecutionPolicy-eu-central-1"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.StatesExecutionPolicy-eu-central-1.json
}

resource "aws_iam_policy" "sme-media-services-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1" {
  name   = "sme-media-services-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.sme-media-services-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-7b405058-c82e-45ce-a4b9-d28fc627f13d" {
  name   = "AWSLambdaBasicExecutionRole-7b405058-c82e-45ce-a4b9-d28fc627f13d"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-7b405058-c82e-45ce-a4b9-d28fc627f13d.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "aws-s3-list-get-put-delete-object-policy" {
  description = "s3-list-get-put-delete-object-policy"
  name        = "aws-s3-list-get-put-delete-object-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.aws-s3-list-get-put-delete-object-policy.json
}

resource "aws_iam_policy" "s3-list-get-put-delete-object-policy" {
  description = "S3 bucket policy for list bucket, put object, get object, delete object"
  name        = "s3-list-get-put-delete-object-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-list-get-put-delete-object-policy.json
}

resource "aws_iam_policy" "ecs-task-definition" {
  description = "ecs-task-definition"
  name        = "ecs-task-definition"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecs-task-definition.json
}



resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  name   = "DatadogAWSIntegrationPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1" {
  name   = "config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1.json
}

resource "aws_iam_policy" "ecs-create-service" {
  description = "ecs-create-service"
  name        = "ecs-create-service"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecs-create-service.json
}

resource "aws_iam_policy" "Botmetric-CostAnlysis" {
  name   = "Botmetric-CostAnlysis"
  path   = var.path
  policy = data.aws_iam_policy_document.Botmetric-CostAnlysis.json
}

resource "aws_iam_policy" "mlib-prod" {
  description = "mlib-prod"
  name        = "mlib-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mlib-prod.json
}

resource "aws_iam_policy" "mc-promo-prod" {
  description = "mc-promo-prod"
  name        = "mc-promo-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mc-promo-prod.json
}

resource "aws_iam_policy" "CloudabilityMonitorResourcesPolicy" {
  name   = "CloudabilityMonitorResourcesPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityMonitorResourcesPolicy.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "CloudabilityVerificationPolicy" {
  name   = "CloudabilityVerificationPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudabilityVerificationPolicy.json
}

resource "aws_iam_policy" "mpub-prod" {
  description = "mpub-prod"
  name        = "mpub-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mpub-prod.json
}

resource "aws_iam_policy" "promo-prod-s3" {
  description = "promo-prod-s3"
  name        = "promo-prod-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.promo-prod-s3.json
}

resource "aws_iam_policy" "Billing-RO" {
  name   = "Billing-RO"
  path   = var.path
  policy = data.aws_iam_policy_document.Billing-RO.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "mc-dx3-prod" {
  description = "mc-dx3-prod"
  name        = "mc-dx3-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mc-dx3-prod.json
}

resource "aws_iam_policy" "mc-archive-prod" {
  description = "mc-archive-prod"
  name        = "mc-archive-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mc-archive-prod.json
}


resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1487351159755" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1487351159755"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1487351159755.json
}

resource "aws_iam_policy" "dms-policy" {
  name   = "dms-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.dms-policy.json
}

resource "aws_iam_policy" "sme-origin-amp-s3" {
  description = "sme-origin-amp-s3"
  name        = "sme-origin-amp-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-origin-amp-s3.json
}

resource "aws_iam_policy" "dx3-prod" {
  description = "dx3-prod"
  name        = "dx3-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.dx3-prod.json
}

resource "aws_iam_policy" "msrv_prod_cf" {
  description = "msrv_prod_cf"
  name        = "msrv_prod_cf"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv_prod_cf.json
}

resource "aws_iam_policy" "dx3-prod-s3" {
  description = "dx3-prod-s3"
  name        = "dx3-prod-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.dx3-prod-s3.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1498163816369" {
  name   = "oneClick_flowlogsRole_1498163816369"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1498163816369.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "mc-amp-prod" {
  description = "mc-amp-prod"
  name        = "mc-amp-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mc-amp-prod.json
}

resource "aws_iam_policy" "msrv_prod_sqs" {
  description = "msrv_prod_sqs"
  name        = "msrv_prod_sqs"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv_prod_sqs.json
}

resource "aws_iam_policy" "msrv-prod-ses" {
  description = "msrv-prod-ses"
  name        = "msrv-prod-ses"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv-prod-ses.json
}


resource "aws_iam_policy" "archivep-mcon-s3-role-policy" {
  name   = "archivep-mcon-s3-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.archivep-mcon-s3-role-policy.json
}

resource "aws_iam_policy" "amp-prod" {
  description = "amp-prod"
  name        = "amp-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.amp-prod.json
}

resource "aws_iam_policy" "postgresp" {
  name   = "postgresp"
  path   = var.path
  policy = data.aws_iam_policy_document.postgresp.json
}


resource "aws_iam_policy" "For_RDS_Enhanced_Monitoring" {
  name   = "For_RDS_Enhanced_Monitoring"
  path   = var.path
  policy = data.aws_iam_policy_document.For_RDS_Enhanced_Monitoring.json
}

resource "aws_iam_policy" "msrvp-aws-config-policy" {
  description = "msrvp-aws-config-policy"
  name        = "msrvp-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvp-aws-config-policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}


resource "aws_iam_policy" "promo-prod" {
  description = "promo-prod"
  name        = "promo-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.promo-prod.json
}

resource "aws_iam_policy" "sme-gen-custom" {
  name   = "sme-gen-custom"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-gen-custom.json
}



resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "AWSLoadBalancerControllerIAMPolicy" {
  name   = "AWSLoadBalancerControllerIAMPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "rdsproxy" {
  name   = "rdsproxy"
  path   = var.path
  policy = data.aws_iam_policy_document.rdsproxy.json
}

resource "aws_iam_policy" "msrvp-portal-policy" {
  description = "msrvp-portal-policy"
  name        = "msrvp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvp-portal-policy.json
}

resource "aws_iam_policy" "sme-media-service-rs-dw-01" {
  description = "sme-media-service-rs-dw-01"
  name        = "sme-media-service-rs-dw-01"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-media-service-rs-dw-01.json
}

resource "aws_iam_policy" "MediaService-RDS_snapshot_lambda-role-policy" {
  name   = "MediaService-RDS_snapshot_lambda-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.MediaService-RDS_snapshot_lambda-role-policy.json
}

resource "aws_iam_policy" "sme-media-services-prod-waf-logging-policy" {
  description = "sme-media-services-prod-waf-logging-policy"
  name        = "sme-media-services-prod-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-media-services-prod-waf-logging-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585146616556" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585146616556"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585146616556.json
}

resource "aws_iam_policy" "oneClick_lambda_basic_execution_1493667115368" {
  name   = "oneClick_lambda_basic_execution_1493667115368"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1493667115368.json
}

resource "aws_iam_policy" "ssrv-prod-ses-policy" {
  name   = "ssrv-prod-ses-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ssrv-prod-ses-policy.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "msrvp-eks-varnish-secret-access" {
  name   = "msrvp-eks-varnish-secret-access"
  path   = var.path
  policy = data.aws_iam_policy_document.msrvp-eks-varnish-secret-access.json
}

resource "aws_iam_policy" "mc-mlib-prod" {
  description = "mc-mlib-prod"
  name        = "mc-mlib-prod"
  path        = var.path
  policy      = data.aws_iam_policy_document.mc-mlib-prod.json
}

resource "aws_iam_policy" "msrv-report-prod-s3" {
  description = "msrv-report-prod-s3"
  name        = "msrv-report-prod-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv-report-prod-s3.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "mpub-prod-ses" {
  description = "mpub-prod-ses"
  name        = "mpub-prod-ses"
  path        = var.path
  policy      = data.aws_iam_policy_document.mpub-prod-ses.json
}

resource "aws_iam_policy" "DevAdmin-policy" {
  description = "Policy for DevAdmin role "
  name        = "DevAdmin-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DevAdmin-policy.json
}

resource "aws_iam_policy" "RDSAdminPolicyForTerraform" {
  description = "RDSAdminPolicyForTerraform"
  name        = "RDSAdminPolicyForTerraform"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDSAdminPolicyForTerraform.json
}

resource "aws_iam_policy" "KubeCostFederatedRoleIAMPolicy" {
  description = "Access s3 bucket in core cloud shared account"
  name        = "KubeCostFederatedRoleIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.KubeCostFederatedRoleIAMPolicy.json
}

resource "aws_iam_policy" "msrvp-mpub-prod-policy" {
  description = "msrvp-mpub-prod-policy"
  name        = "msrvp-mpub-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvp-mpub-prod-policy.json
}

resource "aws_iam_policy" "msrvp-prod-aoma-da-contactsheet-policy" {
  description = "msrvp-prod-aoma-da-contactsheet-policy"
  name        = "msrvp-prod-aoma-da-contactsheet-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrvp-prod-aoma-da-contactsheet-policy.json
}

resource "aws_iam_policy" "KarpenterControllerPolicy-msrvp-prod" {
  name   = "KarpenterControllerPolicy-msrvp-prod"
  description = "Karpenter controller IAM policy"
  path   = var.path
  policy = data.aws_iam_policy_document.KarpenterControllerPolicy-msrvp-prod.json
}

resource "aws_iam_policy" "cicd-actions-policy" {
  name   = "cicd-actions-policy"
  description = "Github Access"
  path   = var.path
  policy = data.aws_iam_policy_document.cicd-actions-policy.json
}

resource "aws_iam_policy" "lambda-cicd-actions-policy" {
  name   = "lambda-cicd-actions-policy"
  description = "Github Access"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda-cicd-actions-policy.json
}

resource "aws_iam_policy" "athena-fullaccess-policy" {
  description = "Athena full access policy"
  name        = "athena-fullaccess-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.athena-fullaccess-policy.json
}

resource "aws_iam_policy" "sns-fullaccess-policy" {
  description = "SNS full access policy"
  name        = "sns-fullaccess-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sns-fullaccess-policy.json
}

resource "aws_iam_policy" "s3-fullaccess-policy" {
  description = "S3 full access policy"
  name        = "s3-fullaccess-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-fullaccess-policy.json
}

resource "aws_iam_policy" "cloudwatch-fullaccess-policy" {
  description = "CloudWatch full access policy"
  name        = "cloudwatch-fullaccess-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudwatch-fullaccess-policy.json
}

resource "aws_iam_policy" "rds-fullaccess-policy" {
  description = "RDS full access policy"
  name        = "rds-fullaccess-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.rds-fullaccess-policy.json
}

resource "aws_iam_policy" "msrv-prod-secret-manager-policy" {
  description = "Secret Manager policy to access MSRV related entities"
  name        = "secretmanagers-msrv-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.msrv-prod-secret-manager.json
}