module "grps-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.grps.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonMSKReadOnlyAccess",
    "arn:aws:iam::${var.account_id}:policy/ProdJWTSecretAccess",
    "arn:aws:iam::${var.account_id}:policy/sme-orch-ddex",
    "arn:aws:iam::${var.account_id}:policy/CertsReadOnly",
    "arn:aws:iam::${var.account_id}:policy/prod-switchboard-db-secret-access",
    "arn:aws:iam::${var.account_id}:policy/ElasticSearchAPIAccess",
  ]
}

module "sme-orch-ddex-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-orch-ddex.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/sme-orch-ddex",
  ]
}

module "ProdOrderHistoryAPI-policy-attachments" {
  source     = "./modules/iam-group-policy-attachments"
  group_name = aws_iam_group.ProdOrderHistoryAPI.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly",
    "arn:aws:iam::aws:policy/AWSCertificateManagerPrivateCAFullAccess",
    "arn:aws:iam::${var.account_id}:policy/aoma_max_cert_access",
    "arn:aws:iam::${var.account_id}:policy/ProdOrderHistoryAPI_ECSRole",
    "arn:aws:iam::${var.account_id}:policy/SecretsMangerSonyAuthAccess",
  ]
}