# Default role mapping for engineering users.
resource "opensearch_roles_mapping" "default_role_mapping" {
  role_name   = resource.opensearch_role.default_role.role_name
  description = "Give engineer users permission to access all indexes."
  users = [
    resource.opensearch_user.npatel_user.username,
  ]
}


# Assign RW permission to os-sink connectors.
resource "opensearch_roles_mapping" "etl_label_index_rw_mapping" {
  role_name   = resource.opensearch_role.etl_label_index_rw.role_name
  description = "Give users RW permission to etl_label_write alias"
  users = [
    resource.opensearch_user.os_sink_etl_label_user.username,
  ]
}