module "maxd-s3-stg-datalake-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxd-s3-stg-datalake.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/maxd-athena-policy",
    "arn:aws:iam::${var.account_id}:policy/sme-max-stg-datalake",
    "arn:aws:iam::${var.account_id}:policy/sme-max-DynamodbRW",
    "arn:aws:iam::${var.account_id}:policy/sme-max-stg-datalake-dynamodb",
    "arn:aws:iam::${var.account_id}:policy/maxd-glue-policy",
    "arn:aws:iam::${var.account_id}:policy/sme-max-stg-backfill-datalake",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly",
    aws_iam_policy.sme-max-stg-ecr-permissions.arn,
  ]
}

module "sme-supply-chain-max-dev-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-supply-chain-max-dev.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AWSCloudFormationReadOnlyAccess",
    "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess",
    "arn:aws:iam::${var.account_id}:policy/dms_admin",
    "arn:aws:iam::${var.account_id}:policy/MaxETLUser",
    "arn:aws:iam::${var.account_id}:policy/maxd-batch-actions",
  ]
}

module "maxd-s3-user-group-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxd-s3-user-group.name
  custom_group_policy_arns = [
    aws_iam_policy.maxd-s3-user-policy.arn
  ]
}

module "maxd-ecr-orderhistory-group-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxd-ecr-orderhistory-group.name
  custom_group_policy_arns = [
    aws_iam_policy.maxd-ecr-orderhistory-offer-retriever-policy.arn
  ]
}

module "maxd-dula001-group-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxd-dula001-group.name
  custom_group_policy_arns = [
  aws_iam_policy.maxd-dula001-policy.arn]
}

module "github-actions-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.github-actions.name
  custom_group_policy_arns = [
  aws_iam_policy.github-actions-policy.arn]
}

module "sam-deploy-user-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sam-deploy-user-group.name
  custom_group_policy_arns = [
    aws_iam_policy.sam-deploy-max-role-policy.arn
  ]
}

module "cmollis-python-dev-group-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.cmollis-python-dev-group.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonAthenaFullAccess",
    "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess",
    "arn:aws:iam::aws:policy/AWSGlueConsoleFullAccess",
    "arn:aws:iam::aws:policy/AWSKeyManagementServicePowerUser",
    "arn:aws:iam::aws:policy/ReadOnlyAccess",
    "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryFullAccess",
    "arn:aws:iam::aws:policy/AmazonEMRFullAccessPolicy_v2",
    "arn:aws:iam::aws:policy/AmazonEventBridgeSchedulerFullAccess",
    "arn:aws:iam::aws:policy/CloudWatchReadOnlyAccess",
    aws_iam_policy.cmollis-python-dev-policy.arn,
  ]
}

module "presigned-url-creator-dev-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.presigned-url-creator-dev-group.name
  custom_group_policy_arns = [
    aws_iam_policy.presigned-url-creator-dev-policy.arn
  ]
}

module "sme-max-grps-dev-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-max-grps-dev.name
  custom_group_policy_arns = [
    aws_iam_policy.kafka-policy.arn
  ]
}

module "sme-max-grps-uat-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-max-grps-uat.name
  custom_group_policy_arns = [
    aws_iam_policy.kafka-policy.arn
  ]
}