resource "opensearch_roles_mapping" "default_role_mapping" {
  role_name   = resource.opensearch_role.default_role.role_name
  description = "Give all users default_role."
  users = [
    "arn:aws:iam::437795906767:user/*",
    resource.opensearch_user.npatel_user.username,
    resource.opensearch_user.mdadhania_user.username,
  ]
  backend_roles = [
    # Todo add lambda role when we have a lambda function.
    "arn:aws:iam::437795906767:role/lambda-${var.environment}-${var.lambda_dd_search_name}",
    "arn:aws:iam::437795906767:role/${var.environment}-${var.ows_vectororder_service}-task-role",
  ]
}

# Map the vectororder_detail_sink_user to vectororder_detail_index_rw role
resource "opensearch_roles_mapping" "vectororder_detail_index_rw_role_mapping" {
  role_name   = resource.opensearch_role.vectororder_detail_index_rw.role_name
  description = "Give vectororder_detail_sink_user RW permission to vectororder_detail_index"
  users = [
    resource.opensearch_user.vectororder_detail_sink_user.username
  ]
}