module "orchd-jenkins-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.orchd-jenkins-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/AmazonS3FullAccess",
    "arn:aws:iam::aws:policy/AmazonECS_FullAccess",
    "arn:aws:iam::aws:policy/AmazonElasticContainerRegistryPublicFullAccess",
    "arn:aws:iam::662302927201:policy/github-action-policy"
  ]
}

module "orchd-qa-grps-switchboard-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.orchd-qa-grps-switchboard.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/ElasticSearchAPIAccess",
    "arn:aws:iam::${var.account_id}:policy/qa-switchboard-system-access",
    "arn:aws:iam::${var.account_id}:policy/CertsReadOnly",
  ]
}

module "sme-external-access-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-external-access.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/qa-switchboard-system-access",
  ]
}

module "switchboard-github-actions-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.switchboard-github-actions.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPowerUser",
    "arn:aws:iam::aws:policy/CloudFrontReadOnlyAccess",
    "arn:aws:iam::${var.account_id}:policy/roughcuts-s3-policy",
  ]
}