resource "aws_athena_workgroup" "appsec_athena_workgroup" {
  name = "${var.environment}_appsec_workgroup"

  configuration {
    enforce_workgroup_configuration    = true
    publish_cloudwatch_metrics_enabled = true

    result_configuration {
      encryption_configuration {
        encryption_option = "SSE_S3"
      }
    }
  }

  tags = {
    environment        = var.environment
    service_name       = var.lambda_name
    application_family = var.application_family
  }
}

resource "aws_athena_named_query" "query" {
  name        = "${var.environment}_upload_audit_logs_to_s3}"
  description = "${var.environment}_upload_audit_logs_to_s3}"
  workgroup   = aws_athena_workgroup.appsec_athena_workgroup.id
  database    = var.athena_database
  query       = "select * from ${var.athena_database}.${var.glue_datacatalog_table_name} where created_by = ?;"
}