resource "aws_db_instance" "maxdbdevpq1" {
  #checkov:skip=CKV_AWS_226: Ensure DB instance gets all minor upgrades automatically. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV_AWS_118: Ensure that enhanced monitoring is enabled for Amazon RDS instances. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV_AWS_293: Ensure that AWS database instances have deletion protection enabled. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV2_AWS_60: Ensure RDS instance with copy tags to snapshots is enabled. Migrated existing aws_db_instance as-is.
  availability_zone                   = "eu-central-1a"
  backup_retention_period             = 7
  backup_window                       = "05:00-05:30"
  db_name                             = "maxdb"
  db_subnet_group_name                = "maxoh-s-rds-sng"
  enabled_cloudwatch_logs_exports     = ["audit", "error", "general"]
  engine                              = "aurora-mysql"
  engine_version                      = "8.0.mysql_aurora.3.10.3"
  iam_database_authentication_enabled = true
  identifier                          = "maxdbdevpq1"
  instance_class                      = "db.r5.large"
  kms_key_id                          = "arn:aws:kms:eu-central-1:981599956623:key/c7927774-1bc0-461c-93f1-bb820805097f"
  maintenance_window                  = "tue:03:48-tue:04:18"
  parameter_group_name                = "maxdb-dev-instance-8"
  storage_encrypted                   = true
  username                            = "maxdbadmin"
  vpc_security_group_ids              = ["sg-0cab9316b4125eeb3"]
  skip_final_snapshot                 = true
  apply_immediately                   = null

  tags = {
    Business-Unit = "EOM"
    Environment   = "Dev"
    Project-Code  = "SME-2000-0590E"
    Project-Name  = "Max-Dev"
  }
}

resource "aws_db_instance" "maxdbstage1" {
  #checkov:skip=CKV_AWS_226: Ensure DB instance gets all minor upgrades automatically. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV_AWS_157: Ensure that RDS instances have Multi-AZ enabled. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV_AWS_118: Ensure that enhanced monitoring is enabled for Amazon RDS instances. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV_AWS_293: Ensure that AWS database instances have deletion protection enabled. Migrated existing aws_db_instance as-is.
  #checkov:skip=CKV2_AWS_60: Ensure RDS instance with copy tags to snapshots is enabled. Migrated existing aws_db_instance as-is.
  availability_zone                   = "eu-central-1b"
  backup_retention_period             = 7
  backup_window                       = "05:00-05:30"
  db_name                             = "maxdb"
  db_subnet_group_name                = "maxoh-s-rds-sng"
  enabled_cloudwatch_logs_exports     = ["audit", "error", "general"]
  engine                              = "aurora-mysql"
  engine_version                      = "8.0.mysql_aurora.3.10.3"
  iam_database_authentication_enabled = true
  identifier                          = "maxdbstage1"
  instance_class                      = "db.r5.large"
  kms_key_id                          = "arn:aws:kms:eu-central-1:981599956623:key/c7927774-1bc0-461c-93f1-bb820805097f"
  maintenance_window                  = "mon:03:15-mon:03:45"
  parameter_group_name                = "maxdb-stage-instance-8"
  storage_encrypted                   = true
  username                            = "maxdbadmin"
  vpc_security_group_ids              = ["sg-0cab9316b4125eeb3", "sg-0cf2365f6e71fde8a"]
  skip_final_snapshot                 = true
  apply_immediately                   = null
}

resource "aws_rds_cluster" "maxdbdevpq1-cluster" {
  #checkov:skip=CKV_AWS_326: Ensure that RDS Aurora Clusters have backtracking enabled. Migrated existing aws_rds_cluster as-is.
  availability_zones                  = ["eu-central-1a", "eu-central-1b", "eu-central-1c"]
  backup_retention_period             = 7
  cluster_identifier                  = "maxdbdevpq1-cluster"
  cluster_members                     = ["maxdbdevpq1"]
  database_name                       = "maxdb"
  db_cluster_parameter_group_name     = "maxdb-dev-cluster-8"
  db_subnet_group_name                = "maxoh-s-rds-sng"
  deletion_protection                 = true
  enabled_cloudwatch_logs_exports     = ["audit", "error", "general"]
  engine                              = "aurora-mysql"
  engine_version                      = "8.0.mysql_aurora.3.10.3"
  iam_database_authentication_enabled = true
  iam_roles                           = ["arn:aws:iam::981599956623:role/drRDSLoadFromS3", "arn:aws:iam::981599956623:role/maxRDSLoadFromS3"]
  kms_key_id                          = "arn:aws:kms:eu-central-1:981599956623:key/c7927774-1bc0-461c-93f1-bb820805097f"
  master_username                     = "maxdbadmin"
  storage_encrypted                   = true
  vpc_security_group_ids              = ["sg-0cab9316b4125eeb3"]
  copy_tags_to_snapshot               = true
  enable_global_write_forwarding      = null
  skip_final_snapshot                 = true

  tags = {
    Environment = "MaxdevTestDB"
  }
}

resource "aws_rds_cluster" "maxdbstage1-cluster" {
  #checkov:skip=CKV_AWS_326: Ensure that RDS Aurora Clusters have backtracking enabled. Migrated existing aws_rds_cluster as-is.
  availability_zones                  = ["eu-central-1a", "eu-central-1b", "eu-central-1c"]
  backup_retention_period             = 7
  cluster_identifier                  = "maxdbstage1-cluster"
  cluster_members                     = ["maxdbstage1"]
  database_name                       = "maxdb"
  db_cluster_parameter_group_name     = "maxdb-stage-cluster-8"
  db_subnet_group_name                = "maxoh-s-rds-sng"
  deletion_protection                 = true
  enabled_cloudwatch_logs_exports     = ["audit", "error", "general"]
  engine                              = "aurora-mysql"
  engine_version                      = "8.0.mysql_aurora.3.10.3"
  iam_database_authentication_enabled = true
  iam_roles                           = ["arn:aws:iam::981599956623:role/maxRDSLoadFromS3"]
  kms_key_id                          = "arn:aws:kms:eu-central-1:981599956623:key/c7927774-1bc0-461c-93f1-bb820805097f"
  master_username                     = "maxdbadmin"
  storage_encrypted                   = true
  vpc_security_group_ids              = ["sg-0cab9316b4125eeb3", "sg-0cf2365f6e71fde8a"]
  copy_tags_to_snapshot               = true
  enable_global_write_forwarding      = null
  skip_final_snapshot                 = true

  tags = {
    Environment = "MaxdevStageDB"
  }
}