resource "aws_iam_policy" "qa-switchboard-fargate-ses-send-email-policy" {
  name   = "qa-switchboard-fargate-ses-send-email-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.qa-switchboard-fargate-ses-send-email-policy.json
}

resource "aws_iam_policy" "orchd-aws-config-policy" {
  description = "orchd-aws-config-policy"
  name        = "orchd-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.orchd-aws-config-policy.json
}

resource "aws_iam_policy" "OrchardROAdmin" {
  name   = "OrchardROAdmin"
  path   = var.path
  policy = data.aws_iam_policy_document.OrchardROAdmin.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "SecretsManagerFullAccess" {
  name   = "SecretsManagerFullAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerFullAccess.json
}

resource "aws_iam_policy" "Datadog" {
  name   = "Datadog"
  path   = var.path
  policy = data.aws_iam_policy_document.Datadog.json
}

resource "aws_iam_policy" "oneClick_Cognito_switchboard_usersAuth_Role_1561490302018" {
  name   = "oneClick_Cognito_switchboard_usersAuth_Role_1561490302018"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_switchboard_usersAuth_Role_1561490302018.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1590571154428" {
  name   = "oneClick_flowlogsRole_1590571154428"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1590571154428.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585138552897" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585138552897"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585138552897.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-0d4cdbd9-ebeb-4fb7-b969-b54fc484c539" {
  name   = "AWSLambdaBasicExecutionRole-0d4cdbd9-ebeb-4fb7-b969-b54fc484c539"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-0d4cdbd9-ebeb-4fb7-b969-b54fc484c539.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "S3AccessTosmej-switchboard-endpoint" {
  description = "S3AccessTosmej-switchboard-endpoint"
  name        = "S3AccessTosmej-switchboard-endpoint"
  path        = var.path
  policy      = data.aws_iam_policy_document.S3AccessTosmej-switchboard-endpoint.json
}

resource "aws_iam_policy" "elasticache-qa-order-history-policy" {
  name   = "elasticache-qa-order-history-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.elasticache-qa-order-history-policy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Cost explorer service attached to ReadOnlyInfoSec"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "SecretsMangerSonyAuthAccess" {
  description = "Allows access to the authentication certificate and credentials to connect to the Sony GraphQL endpoint"
  name        = "SecretsMangerSonyAuthAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.SecretsMangerSonyAuthAccess.json
}

resource "aws_iam_policy" "qa-conversion-dynamodb-access" {
  name   = "qa-conversion-dynamodb-access"
  path   = var.path
  policy = data.aws_iam_policy_document.qa-conversion-dynamodb-access.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "OrderHistoryDAXtoDynamoDBPolicy" {
  name   = "OrderHistoryDAXtoDynamoDBPolicy"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.OrderHistoryDAXtoDynamoDBPolicy.json
}


resource "aws_iam_policy" "waf" {
  description = "waf"
  name        = "waf"
  path        = var.path
  policy      = data.aws_iam_policy_document.waf.json
}

resource "aws_iam_policy" "orchd-portal-policy" {
  description = "orchd-portal-policy"
  name        = "orchd-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.orchd-portal-policy.json
}

resource "aws_iam_policy" "qa-switchboard-db-access" {
  description = "Permits access to Switchboard QA Database credential storage"
  name        = "qa-switchboard-db-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.qa-switchboard-db-access.json
}

resource "aws_iam_policy" "AWSLambdaBasicExecutionRole-7545ea22-31b0-490d-9930-c6c4ba397ffc" {
  name   = "AWSLambdaBasicExecutionRole-7545ea22-31b0-490d-9930-c6c4ba397ffc"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaBasicExecutionRole-7545ea22-31b0-490d-9930-c6c4ba397ffc.json
}

resource "aws_iam_policy" "AttachRoletoEC2_Permission" {
  description = "AttachRoletoEC2_Permission"
  name        = "AttachRoletoEC2_Permission"
  path        = var.path
  policy      = data.aws_iam_policy_document.AttachRoletoEC2_Permission.json
}

resource "aws_iam_policy" "qa-switchboard-task-execution-policy" {
  name   = "qa-switchboard-task-execution-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.qa-switchboard-task-execution-policy.json
}

resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "ElasticSearchAPIAccess" {
  description = "ElasticSearchAPIAccess"
  name        = "ElasticSearchAPIAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.ElasticSearchAPIAccess.json
}

resource "aws_iam_policy" "qa-switchboard-system-access" {
  name   = "qa-switchboard-system-access"
  path   = var.path
  policy = data.aws_iam_policy_document.qa-switchboard-system-access.json
}

resource "aws_iam_policy" "AWSGlueServiceRole-crawler" {
  description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!"
  name        = "AWSGlueServiceRole-crawler"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSGlueServiceRole-crawler.json
}

resource "aws_iam_policy" "qa-switchboard-assume-role-access" {
  description = "qa-switchboard-assume-role-access"
  name        = "qa-switchboard-assume-role-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.qa-switchboard-assume-role-access.json
}

resource "aws_iam_policy" "CertsReadOnly" {
  description = "CertsReadOnly"
  name        = "CertsReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.CertsReadOnly.json
}

resource "aws_iam_policy" "qa-ecs-events-policy" {
  name   = "qa-ecs-events-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.qa-ecs-events-policy.json
}

resource "aws_iam_policy" "KinesisFirehoseServicePolicy-aws-waf-logs-kinesis-us-east-1" {
  name   = "KinesisFirehoseServicePolicy-aws-waf-logs-kinesis-us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.KinesisFirehoseServicePolicy-aws-waf-logs-kinesis-us-east-1.json
}

resource "aws_iam_policy" "ElasticSearchFullAccess" {
  name   = "ElasticSearchFullAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.ElasticSearchFullAccess.json
}

resource "aws_iam_policy" "assumeAomaCertAccess" {
  name   = "assumeAomaCertAccess"
  path   = var.path
  policy = data.aws_iam_policy_document.assumeAomaCertAccess.json
}

resource "aws_iam_policy" "orch-switchboard-dev-waf-logging-policy" {
  description = "orch-switchboard-dev-waf-logging-policy"
  name        = "orch-switchboard-dev-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.orch-switchboard-dev-waf-logging-policy.json
}

resource "aws_iam_policy" "smej-message-interceptor-policy" {
  description = "smej-message-interceptor-policy"
  name        = "smej-message-interceptor-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.smej-message-interceptor-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585138471892" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585138471892"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585138471892.json
}

resource "aws_iam_policy" "cloudops-BudgetActionDenyPolicy" {
  description = "cloudops-BudgetActionDenyPolicy"
  name        = "cloudops-BudgetActionDenyPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-BudgetActionDenyPolicy.json
}

resource "aws_iam_policy" "roughcuts-s3-policy" {
  description = "roughcuts-s3-policy"
  name        = "roughcuts-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.roughcuts-s3-policy.json
}

resource "aws_iam_policy" "msk-policy" {
  name        = "msk-policy"
  description = "Accessing MSK"
  policy      = data.aws_iam_policy_document.msk-policy.json
}
resource "aws_iam_policy" "atlantis_terrastate_policy" {
  name   = "${var.environment}-${var.service_name}-terrastate-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.atlantis_terrastate_policy.json
}

resource "aws_iam_policy" "atlantis_secrets_read_policy" {
  name   = "${var.environment}-${var.service_name}-secrets-read-policy"
  policy = data.aws_iam_policy_document.atlantis_secrets_read_policy.json
}

resource "aws_iam_policy" "atlantis_apply_policy_part_one" {
  name   = "${var.environment}-${var.service_name}-apply-part-one-policy"
  policy = data.aws_iam_policy_document.atlantis_apply_policy_part_one.json
}

resource "aws_iam_policy" "atlantis_apply_policy_part_two" {
  name   = "${var.environment}-${var.service_name}-apply-part-two-policy"
  policy = data.aws_iam_policy_document.atlantis_apply_policy_part_two.json
}

resource "aws_iam_policy" "atlantis_kms_delete_policy" {
  name   = "${var.environment}-${var.service_name}-kms-delete-policy"
  policy = data.aws_iam_policy_document.atlantis_kms_delete_policy.json
}

resource "aws_iam_policy" "atlantis_kms_reencrypt_policy" {
  name   = "${var.environment}-${var.service_name}-kms-reencrypt-policy"
  policy = data.aws_iam_policy_document.atlantis_kms_reencrypt_policy.json
}

resource "aws_iam_policy" "atlantis_tf_infra_core_apply_policy" {
  name   = "${var.environment}-${var.service_name}-tf-infra-core-apply-policy"
  policy = data.aws_iam_policy_document.atlantis_tf_infra_core_apply_policy.json
}

resource "aws_iam_policy" "atlantis_invoke_lambdas_policy" {
  name   = "${var.environment}-${var.service_name}-invoke-lambdas-policy"
  policy = data.aws_iam_policy_document.atlantis_invoke_lambdas_policy.json
}

resource "aws_iam_policy" "atlantis_assume_ansible_role_policy" {
  name   = "${var.environment}-${var.service_name}-assume-ansible-role-policy"
  policy = data.aws_iam_policy_document.atlantis_assume_ansible_role_policy.json
}