data "aws_iam_policy" "raw_assets_s3_bucket_readonly_policy" {
  name = "S3-${local.raw_assets_s3_bucket}-RO"
}

data "aws_iam_policy" "raw_assets_s3_bucket_putitem_policy" {
  name = "S3-${local.raw_assets_s3_bucket}-PutItem"
}

data "aws_iam_policy" "mezzanine_assets_s3_bucket_readonly_policy" {
  name = "S3-${local.mezzanine_assets_s3_bucket}-RO"
}

resource "aws_iam_policy" "mezzanine_assets_s3_bucket_putitem_policy" {
  name        = "S3-${local.mezzanine_assets_s3_bucket}-PutItem"
  description = "S3-${local.mezzanine_assets_s3_bucket}-PutItem"

  policy = jsonencode({
    Version = "2012-10-17",
    Statement = [
      {
        Effect = "Allow",
        Action = [
          "s3:PutObject"
        ],
        Resource = "arn:aws:s3:::${local.mezzanine_assets_s3_bucket}/*"
      }
    ]
  })
}