provider "snowflake" {
  account_name = var.account
  role         = "PROD_ATLANTIS"
}

terraform {
  backend "s3" {
    bucket  = "orcd-terraform-state"
    key     = "prod/snowflake/delphi/security-integrations/oauth/airtable/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

# Airtable Sony Music Enterprise OU with Music Catalog base
# Migrated from the Orchard Snowflake account to Delphi.
resource "snowflake_oauth_integration_for_custom_clients" "sony_music_enterprise_music_catalog" {
  name                         = "AIRTABLE_SONY_MUSIC_ENTERPRISE_MUSIC_CATALOG"
  oauth_client_type            = "CONFIDENTIAL"
  oauth_redirect_uri           = "https://airtable.com/integration/authorize/eatY89uUyfSoAncQS/callback"
  oauth_issue_refresh_tokens   = true
  oauth_refresh_token_validity = 7776000 # 90 days in seconds
  oauth_use_secondary_roles    = "IMPLICIT"
  blocked_roles_list           = var.blocked_roles
  enabled                      = true
  comment                      = "Airtable OAuth integration for Sony Music Enterprise OU with Music Catalog base (migrated from Orchard account)"
}