module "ows_content_moderation_s3_export_policy_document" {
  source = "git@github.com:theorchard/terraform-iam-policy-templates.git//documents/s3/buckets_with_prefixes?ref=0.4.0"

  buckets = [
    {
      bucket   = var.export_bucket_name
      prefixes = ["content_moderation_export/"]
    }
  ]

  action_types          = ["read", "write", "delete"]
  enable_global_actions = false
}

resource "aws_iam_policy" "ows_content_moderation_s3_export" {
  name   = "S3-${var.environment}-${var.service_name}-content-moderation-export-RW"
  policy = module.ows_content_moderation_s3_export_policy_document.policy.json
}