provider "snowflake" {
  account_name = var.account
  role         = "PROD_ATLANTIS"
}

terraform {
  backend "s3" {
    bucket  = "orcd-terraform-state"
    key     = "prod/snowflake/delphidev/network-policies/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

resource "snowflake_network_policy" "policies" {
  for_each = var.policies
  name     = each.key
  comment  = each.value.comment != "" ? each.value.comment : each.key

  allowed_ip_list = each.value.ip_addresses
}