resource "aws_iam_policy" "root" {
  name   = "root"
  path   = var.path
  policy = data.aws_iam_policy_document.root.json
}

resource "aws_iam_policy" "orchp-trendmicro_esdomain_policy" {
  description = "For TMDS ELK"
  name        = "orchp-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.orchp-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "oneClick_Cognito_switchboardAuth_Role_1575910121634" {
  name   = "oneClick_Cognito_switchboardAuth_Role_1575910121634"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_switchboardAuth_Role_1575910121634.json
}

resource "aws_iam_policy" "ProdOrderHistoryAPI_ECSRole" {
  description = "ProdOrderHistoryAPI_ECSRole"
  name        = "ProdOrderHistoryAPI_ECSRole"
  path        = var.path
  policy      = data.aws_iam_policy_document.ProdOrderHistoryAPI_ECSRole.json
}

resource "aws_iam_policy" "ProdJWTSecretAccess" {
  description = "ProdJWTSecretAccess"
  name        = "ProdJWTSecretAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.ProdJWTSecretAccess.json
}

resource "aws_iam_policy" "SecretsManagerRDSMySQLRotationSingleUserRolePolicy0" {
  name   = "SecretsManagerRDSMySQLRotationSingleUserRolePolicy0"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerRDSMySQLRotationSingleUserRolePolicy0.json
}



resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "orchardROadminPolicy" {
  description = "orchardROadminPolicy"
  name        = "orchardROadminPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.orchardROadminPolicy.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}


resource "aws_iam_policy" "oneClick_Cognito_switchboardUnauth_Role_1575910121634" {
  name   = "oneClick_Cognito_switchboardUnauth_Role_1575910121634"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_Cognito_switchboardUnauth_Role_1575910121634.json
}

resource "aws_iam_policy" "swbrdp-acm-ro" {
  name   = "swbrdp-acm-ro"
  path   = var.path
  policy = data.aws_iam_policy_document.swbrdp-acm-ro.json
}

resource "aws_iam_policy" "sme-orch-ddex" {
  description = "For S3 sme-orch-ddex only"
  name        = "sme-orch-ddex"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-orch-ddex.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "CertsReadOnly" {
  description = "CertsReadOnly"
  name        = "CertsReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.CertsReadOnly.json
}


resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess,AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "orchp-aws-config-policy" {
  name   = "orchp-aws-config-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.orchp-aws-config-policy.json
}

resource "aws_iam_policy" "aoma_max_cert_access" {
  name   = "aoma_max_cert_access"
  path   = var.path
  policy = data.aws_iam_policy_document.aoma_max_cert_access.json
}

resource "aws_iam_policy" "DeepSecurity-d509fe25d" {
  name   = "DeepSecurity-d509fe25d"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity-d509fe25d.json
}

resource "aws_iam_policy" "waf" {
  description = "waf"
  name        = "waf"
  path        = var.path
  policy      = data.aws_iam_policy_document.waf.json
}

resource "aws_iam_policy" "orchp-portal-policy" {
  name   = "orchp-portal-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.orchp-portal-policy.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  name   = "CloudOpsDenyIAM"
  path   = var.path
  policy = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "prod-switchboard-db-secret-access" {
  description = "prod-switchboard-db-secret-access"
  name        = "prod-switchboard-db-secret-access"
  path        = var.path
  policy      = data.aws_iam_policy_document.prod-switchboard-db-secret-access.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_ECS_Switchboard_Notifications" {
  name   = "AWS_Events_Invoke_ECS_Switchboard_Notifications"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_ECS_Switchboard_Notifications.json
}

resource "aws_iam_policy" "oneClick_lambda_elasticsearch_execution_1579633933256" {
  name   = "oneClick_lambda_elasticsearch_execution_1579633933256"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_elasticsearch_execution_1579633933256.json
}

resource "aws_iam_policy" "SecretsManagerRDSMySQLRotationSingleUserRolePolicy1" {
  name   = "SecretsManagerRDSMySQLRotationSingleUserRolePolicy1"
  path   = var.path
  policy = data.aws_iam_policy_document.SecretsManagerRDSMySQLRotationSingleUserRolePolicy1.json
}

resource "aws_iam_policy" "AWS_Events_Invoke_Inspector_Assessment_Template" {
  name   = "AWS_Events_Invoke_Inspector_Assessment_Template"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWS_Events_Invoke_Inspector_Assessment_Template.json
}

resource "aws_iam_policy" "ElasticSearchAPIAccess" {
  description = "ElasticSearchAPIAccess"
  name        = "ElasticSearchAPIAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.ElasticSearchAPIAccess.json
}

resource "aws_iam_policy" "SecretsMangerSonyAuthAccess" {
  description = "SecretsMangerSonyAuthAccess"
  name        = "SecretsMangerSonyAuthAccess"
  path        = var.path
  policy      = data.aws_iam_policy_document.SecretsMangerSonyAuthAccess.json
}

resource "aws_iam_policy" "SESSendEmailOnly" {
  description = "SESSendEmailOnly"
  name        = "SESSendEmailOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.SESSendEmailOnly.json
}


resource "aws_iam_policy" "orch-switchboard-prod-waf-logging-policy" {
  description = "orch-switchboard-prod-waf-logging-policy"
  name        = "orch-switchboard-prod-waf-logging-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.orch-switchboard-prod-waf-logging-policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1590572244662" {
  name   = "oneClick_flowlogsRole_1590572244662"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1590572244662.json
}

resource "aws_iam_policy" "sme-prod-switchboard-task-execution-policy" {
  name   = "sme-prod-switchboard-task-execution-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-prod-switchboard-task-execution-policy.json
}

resource "aws_iam_policy" "DAXtoDynamoDBPolicy" {
  name   = "DAXtoDynamoDBPolicy"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.DAXtoDynamoDBPolicy.json
}

resource "aws_iam_policy" "AssumeRoleKafka-digsysp-dra-01" {
  name   = "AssumeRoleKafka-digsysp-dra-01"
  path   = var.path
  policy = data.aws_iam_policy_document.AssumeRoleKafka-digsysp-dra-01.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1575980979712" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1575980979712"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1575980979712.json
}

resource "aws_iam_policy" "sme-stage-switchboard-task-execution-policy" {
  name   = "sme-stage-switchboard-task-execution-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-stage-switchboard-task-execution-policy.json
}

resource "aws_iam_policy" "SMEJMessageInterceptorPolicy" {
  description = "SMEJMessageInterceptorPolicy"
  name        = "SMEJMessageInterceptorPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.SMEJMessageInterceptorPolicy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1576589768144" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1576589768144"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1576589768144.json
}

resource "aws_iam_policy" "sme-prod-switchboard-secretsmanager-policy" {
  name   = "sme-prod-switchboard-secretsmanager-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-prod-switchboard-secretsmanager-policy.json
}

resource "aws_iam_policy" "msk-policy" {
  name        = "msk-policy"
  description = "Accessing MSK"
  policy      = data.aws_iam_policy_document.msk-policy.json
}

resource "aws_iam_policy" "atlantis_terrastate_policy" {
  name   = "${var.environment}-${var.service_name}-terrastate-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.atlantis_terrastate_policy.json
}

resource "aws_iam_policy" "atlantis_secrets_read_policy" {
  name   = "${var.environment}-${var.service_name}-secrets-read-policy"
  policy = data.aws_iam_policy_document.atlantis_secrets_read_policy.json
}

resource "aws_iam_policy" "atlantis_kms_reencrypt_policy" {
  name   = "${var.environment}-${var.service_name}-kms-reencrypt-policy"
  policy = data.aws_iam_policy_document.atlantis_kms_reencrypt_policy.json
}