provider "aws" {
  region = var.aws_region
}

# Terraform backends cannot contain interpolations
terraform {
  backend "s3" {
    bucket  = "orcd-terraform-state"
    key     = "prod/iam/groups/performance-rights-managers/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

resource "aws_iam_group" "group" {
  name = "performance-rights-managers"
}

resource "aws_iam_group_membership" "group_membership" {
  name  = "group-membership"
  group = aws_iam_group.group.name
  users = [
    "mhermalyn",
    "mtowles",
    "abinyaminova",
    "ogalileu"
  ]
}

data "aws_iam_policy" "policy" {
  name = "S3-prod-performance-rights-usage-policy"
}

resource "aws_iam_group_policy_attachment" "reports_usage_policy" {
  group      = aws_iam_group.group.name
  policy_arn = data.aws_iam_policy.policy.arn
}