provider "aws" {
  region = "us-east-1"
}

# Caller Identity
data "aws_caller_identity" "current" {}

terraform {
  backend "s3" {
    bucket  = "orcd-terraform-state"
    key     = "qa/lambda-distro-support/update-subaccount-mapping/terraform.tfstate"
    region  = "us-east-1"
    encrypt = "true"
  }
}

module "vpc_info" {
  source      = "git@github.com:theorchard/terraform-vpc-info.git//?ref=3.2.2"
  environment = var.environment
}

module "lambda_update_subaccount_mapping" {
  source                  = "git@github.com:theorchard/terraform-lambda.git?ref=3.1.4"
  application_family      = var.application_family
  environment             = var.environment
  lambda_name             = var.lambda_name
  lambda_description      = "Update subaccount mapping"
  lambda_function_timeout = "300"
  use_container_image     = true
  vpc_id                  = module.vpc_info.vpc_id
  vpc_subnet_ids          = module.vpc_info.default_private_subnet_ids

  iam_managed_policy_attachments = [
    aws_iam_policy.subaccount_mapping_bucket_rw_policy.arn,
  ]

  lambda_function_environment_variables = {
    Environment        = var.environment,
    NEO4J_USERNAME     = var.lambda_name,
    NEO4J_URL          = var.neo4j_url,
    DATABASE_HOSTNAME  = var.database_hostname,
    DATABASE_USER_NAME = var.database_user_name
  }
}

# create datadog dashboards.
module "datadog_lambda_update_subaccount_mapping" {
  source = "git@github.com:theorchard/terraform-datadog.git//modules/lambda?ref=6.19.0"

  environment                       = var.environment
  service_name                      = var.lambda_name
  notification_endpoints            = var.datadog_notification_endpoints
  lambda_invocation_monitor_enabled = true
}

module "multiple_secrets_with_same_settings" {
  source   = "git@github.com:theorchard/terraform-secrets-manager.git//?ref=1.6.1"
  for_each = toset(var.secrets_manager_secret_names)

  environment        = var.environment
  service_name       = var.lambda_name
  secret_name        = each.value
  application_family = var.application_family
}