resource "aws_iam_policy" "maxd-glue-policy" {
  name   = "maxd-glue-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-glue-policy.json
}

resource "aws_iam_policy" "sme-max-stg-datalake-ReadOnly" {
  description = "sme-max-stg-datalake-ReadOnly"
  name        = "sme-max-stg-datalake-ReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-stg-datalake-ReadOnly.json
}

resource "aws_iam_policy" "cloudops-BudgetActionDenyPolicy" {
  description = "cloudops-BudgetActionDenyPolicy"
  name        = "cloudops-BudgetActionDenyPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-BudgetActionDenyPolicy.json
}

resource "aws_iam_policy" "sme-max-stg-backfill-datalake" {
  description = "sme-max-stg-backfill-datalake"
  name        = "sme-max-stg-backfill-datalake"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-stg-backfill-datalake.json
}

resource "aws_iam_policy" "iamcustomforlambda" {
  description = "-2038"
  name        = "iamcustomforlambda"
  path        = var.path
  policy      = data.aws_iam_policy_document.iamcustomforlambda.json
}

resource "aws_iam_policy" "maxd-batch-actions" {
  description = "maxd-batch-actions"
  name        = "maxd-batch-actions"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxd-batch-actions.json
}
resource "aws_iam_policy" "s3-datalake-w" {
  description = "s3 da"
  name        = "s3-datalake-w"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-datalake-w.json
}

resource "aws_iam_policy" "aws-config-role-policy" {
  name   = "aws-config-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.aws-config-role-policy.json
}

resource "aws_iam_policy" "ecs_scaler_permissions" {
  name   = "ecs_scaler_permissions"
  path   = var.path
  policy = data.aws_iam_policy_document.ecs_scaler_permissions.json
}

resource "aws_iam_policy" "maxd-apigw-policy" {
  description = "GW policy, restricts all IP expept SME VPN IP. CLOUDOPS-5791"
  name        = "maxd-apigw-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxd-apigw-policy.json
}

resource "aws_iam_policy" "datalake-poc" {
  description = "CLOUDSD-1665"
  name        = "datalake-poc"
  path        = var.path
  policy      = data.aws_iam_policy_document.datalake-poc.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "MSK_Policy" {
  name   = "MSK_Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.MSK_Policy.json
}

resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "maxd-trendmicro_esdomain_policy" {
  description = "Policy for accessing centralized tmds es domain"
  name        = "maxd-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxd-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "Policy for DatadogAWSIntegration"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "maxd-portal-policy" {
  description = "maxd-portal-policy"
  name        = "maxd-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxd-portal-policy.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "readonly-specificbuckets" {
  name   = "readonly-specificbuckets"
  path   = var.path
  policy = data.aws_iam_policy_document.readonly-specificbuckets.json
}

resource "aws_iam_policy" "sme-max-DynamodbRW" {
  description = "sme-max-DynamodbRW"
  name        = "sme-max-DynamodbRW"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-DynamodbRW.json
}

resource "aws_iam_policy" "Test-1" {
  name   = "Test-1"
  path   = var.path
  policy = data.aws_iam_policy_document.Test-1.json
}

resource "aws_iam_policy" "CertificateReadOnlyForSWD" {
  description = "CertificateReadOnlyForSWD"
  name        = "CertificateReadOnlyForSWD"
  path        = var.path
  policy      = data.aws_iam_policy_document.CertificateReadOnlyForSWD.json
}

resource "aws_iam_policy" "maxd-ssm-sec-agent-status-upload" {
  description = "SSM permissions to check security agent status for sme-portal and upload to S3"
  name        = "maxd-ssm-sec-agent-status-upload"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxd-ssm-sec-agent-status-upload.json
}

resource "aws_iam_policy" "order-history-offer-retriever-cw" {
  description = "order-history-offer-retriever-lambda-role Cloud Watch Policy"
  name        = "order-history-offer-retriever-cw"
  path        = var.path
  policy      = data.aws_iam_policy_document.order-history-offer-retriever-cw.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "sme-max-dev-applogs" {
  name   = "sme-max-dev-applogs"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-max-dev-applogs.json
}

resource "aws_iam_policy" "Secretsmanager_list_policy" {
  name   = "Secretsmanager_list_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.Secretsmanager_list_policy.json
}

resource "aws_iam_policy" "lambda-full-no-IAM" {
  name   = "lambda-full-no-IAM"
  path   = var.path
  policy = data.aws_iam_policy_document.lambda-full-no-IAM.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "dms_admin" {
  name   = "dms_admin"
  path   = var.path
  policy = data.aws_iam_policy_document.dms_admin.json
}

resource "aws_iam_policy" "S3-maxd-cm-athena-query-results" {
  description = "Full S3 access on maxd-cm-athena-query-results"
  name        = "S3-maxd-cm-athena-query-results"
  path        = var.path
  policy      = data.aws_iam_policy_document.S3-maxd-cm-athena-query-results.json
}

resource "aws_iam_policy" "DynamoDB_GROUPS-STG_ReadOnly" {
  description = "DynamoDB_GROUPS-STG_ReadOnly"
  name        = "DynamoDB_GROUPS-STG_ReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.DynamoDB_GROUPS-STG_ReadOnly.json
}

resource "aws_iam_policy" "maxohs_spark_emr_policy" {
  description = "Permissions fo rmaxohs-spark-emr cluster"
  name        = "maxohs_spark_emr_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxohs_spark_emr_policy.json
}

resource "aws_iam_policy" "s3-policy-2038" {
  name   = "s3-policy-2038"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-policy-2038.json
}

resource "aws_iam_policy" "maxd-athena-policy" {
  name   = "maxd-athena-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-athena-policy.json
}

resource "aws_iam_policy" "ECR-Policy" {
  name   = "ECR-Policy"
  path   = var.path
  policy = data.aws_iam_policy_document.ECR-Policy.json
}

resource "aws_iam_policy" "s3-write-" {
  name   = "s3-write-"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-write-.json
}

resource "aws_iam_policy" "sme-max-stg-datalake" {
  description = "S3-sme-max-stg-datalake"
  name        = "sme-max-stg-datalake"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-stg-datalake.json
}

resource "aws_iam_policy" "max-1-spark-emr-policy" {
  name   = "max-1-spark-emr-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.max-1-spark-emr-policy.json
}

resource "aws_iam_policy" "digsysd-ec2-api-invoke" {
  description = "digsysd-ec2-api-invoke for maxd-maxohs-etlapp01 role"
  name        = "digsysd-ec2-api-invoke"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-ec2-api-invoke.json
}

resource "aws_iam_policy" "sme-max-dev-dataload-rw" {
  name   = "sme-max-dev-dataload-rw"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-max-dev-dataload-rw.json
}

resource "aws_iam_policy" "sme-max-dev-dataload-s3" {
  name   = "sme-max-dev-dataload-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-max-dev-dataload-s3.json
}

resource "aws_iam_policy" "MaxDevAdmin_Policy" {
  description = "MaxDevAdmin_Policy"
  name        = "MaxDevAdmin_Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.MaxDevAdmin_Policy.json
}

resource "aws_iam_policy" "sme-max-stg-perm-group-store-ReadOnly" {
  description = "sme-max-stg-perm-group-store-ReadOnly"
  name        = "sme-max-stg-perm-group-store-ReadOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-stg-perm-group-store-ReadOnly.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585149656552" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585149656552"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585149656552.json
}

resource "aws_iam_policy" "MaxDevAdmin-Policy" {
  description = "MaxDevAdmin-Policy"
  name        = "MaxDevAdmin-Policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.MaxDevAdmin-Policy.json
}

resource "aws_iam_policy" "sme-max-stg-datalake-dynamodb" {
  description = "sme-max-stg-datalake-dynamodb"
  name        = "sme-max-stg-datalake-dynamodb"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-stg-datalake-dynamodb.json
}

resource "aws_iam_policy" "emr-custom-1" {
  name   = "emr-custom-1"
  path   = var.path
  policy = data.aws_iam_policy_document.emr-custom-1.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1502369789248" {
  name   = "oneClick_flowlogsRole_1502369789248"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1502369789248.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "maxd-aws-config-policy" {
  description = "maxd-aws-config-policy"
  name        = "maxd-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxd-aws-config-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503418026986" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503418026986"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503418026986.json
}

resource "aws_iam_policy" "RDS-Performance-Insights" {
  description = "RDS-Performance-Insights"
  name        = "RDS-Performance-Insights"
  path        = var.path
  policy      = data.aws_iam_policy_document.RDS-Performance-Insights.json
}

resource "aws_iam_policy" "AWSQuickSightS3Policy" {
  description = "Grants Amazon QuickSight read permission to Amazon S3 resources"
  name        = "AWSQuickSightS3Policy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightS3Policy.json
}

resource "aws_iam_policy" "max-dbas" {
  description = "max dbas"
  name        = "max-dbas"
  path        = var.path
  policy      = data.aws_iam_policy_document.max-dbas.json
}

resource "aws_iam_policy" "MaxETLUser" {
  name   = "MaxETLUser"
  path   = var.path
  policy = data.aws_iam_policy_document.MaxETLUser.json
}

resource "aws_iam_policy" "AWSQuickSightRDSPolicy" {
  description = "Grants Amazon QuickSight describe permissions to AWS RDS resources"
  name        = "AWSQuickSightRDSPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightRDSPolicy.json
}

resource "aws_iam_policy" "AllowAuroraToMaxLambdas" {
  description = "AllowAuroraToMaxLambdas"
  name        = "AllowAuroraToMaxLambdas"
  path        = var.path
  policy      = data.aws_iam_policy_document.AllowAuroraToMaxLambdas.json
}

resource "aws_iam_policy" "AllowAuroraToMaxBuckets" {
  description = "AllowAuroraToMaxBuckets"
  name        = "AllowAuroraToMaxBuckets"
  path        = var.path
  policy      = data.aws_iam_policy_document.AllowAuroraToMaxBuckets.json
}

resource "aws_iam_policy" "sme-supply-chain-dev-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1" {
  name   = "sme-supply-chain-dev-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.sme-supply-chain-dev-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1.json
}

resource "aws_iam_policy" "eomtestuser" {
  name   = "eomtestuser"
  path   = var.path
  policy = data.aws_iam_policy_document.eomtestuser.json
}

resource "aws_iam_policy" "MaxDbAdminPolicy" {
  name   = "MaxDbAdminPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.MaxDbAdminPolicy.json
}

resource "aws_iam_policy" "MaxDevAdminPolicy" {
  name   = "MaxDevAdminPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.MaxDevAdminPolicy.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "dr-developers" {
  description = "for DR Developers"
  name        = "dr-developers"
  path        = var.path
  policy      = data.aws_iam_policy_document.dr-developers.json
}

resource "aws_iam_policy" "AWSQuickSightIAMPolicy" {
  description = "Grants Amazon QuickSight list permissions to AWS IAM resources"
  name        = "AWSQuickSightIAMPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightIAMPolicy.json
}

resource "aws_iam_policy" "tagging_policy" {
  name   = "tagging_policy"
  path   = var.path
  policy = data.aws_iam_policy_document.tagging_policy.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "AWSQuickSightRedshiftPolicy" {
  description = "Grants Amazon QuickSight describe permissions to Amazon Redshift resources"
  name        = "AWSQuickSightRedshiftPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightRedshiftPolicy.json
}

resource "aws_iam_policy" "ResourceTags-CreatePermission" {
  name   = "ResourceTags-CreatePermission"
  path   = var.path
  policy = data.aws_iam_policy_document.ResourceTags-CreatePermission.json
}

resource "aws_iam_policy" "max-developers-s3" {
  description = "sme.max.dev.dataload"
  name        = "max-developers-s3"
  path        = var.path
  policy      = data.aws_iam_policy_document.max-developers-s3.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "ecsTaskSSMMessagesPolicy" {
  description = "Policy to allow ECS to send SSM Messages"
  name        = "ecsTaskSSMMessagesPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.ecsTaskSSMMessagesPolicy.json
}

resource "aws_iam_policy" "maxd-s3-user-policy" {
  name   = "maxd-s3-user-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-s3-user-policy.json
}

resource "aws_iam_policy" "sme-max-stg-ecr-permissions" {
  name   = "sme-max-stg-ecr-permissions"
  path   = var.path
  policy = data.aws_iam_policy_document.sme-max-stg-ecr-permissions.json
}


resource "aws_iam_policy" "max2-logs-s3-lamda-role-DescribePolicy" {
  name   = "max2-logs-s3-lamda-role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.max2-logs-s3-lamda-role-DescribePolicy.json
}

resource "aws_iam_policy" "maxd-ecs-task-role-policy" {
  name   = "maxd-ecs-task-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-ecs-task-role-policy.json
}

resource "aws_iam_policy" "maxs-eai-listener-ecs-policy" {
  name   = "maxs-eai-listener-ecs-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxs-eai-listener-ecs-policy.json
}

resource "aws_iam_policy" "maxd-ecr-orderhistory-offer-retriever-policy" {
  name   = "maxd-ecr-orderhistory-offer-retriever-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-ecr-orderhistory-offer-retriever-policy.json
}

resource "aws_iam_policy" "maxd-ecs-policy" {
  name   = "maxd-ecs-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-ecs-policy.json
}

resource "aws_iam_policy" "maxd-ohproc-dbuser-role-policy" {
  name   = "maxd-ohproc-dbuser-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-ohproc-dbuser-role-policy.json
}

resource "aws_iam_policy" "maxd-admin02-custom-policy" {
  name   = "maxd-admin02-custom-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-admin02-custom-policy.json
}

resource "aws_iam_policy" "sme-max-dev-dataload" {
  description = "sme-max-dev-dataload"
  name        = "sme-max-dev-dataload"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-dev-dataload.json
}

resource "aws_iam_policy" "maxd-dula001-policy" {
  name   = "maxd-dula001-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxd-dula001-policy.json
}

resource "aws_iam_policy" "github-actions-policy" {
  name   = "github-actions-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.github-actions-policy.json
}

resource "aws_iam_policy" "max3-reports-batch-compute-env-policy" {
  description = "max3-reports-batch-compute-env-policy"
  name        = "max3-reports-batch-compute-env-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.max3-reports-batch-compute-env-policy.json
}

resource "aws_iam_policy" "max3-reports-processor-policy" {
  description = "Allows access to max3-reports-processor secretsmanager secret"
  name        = "max3-reports-processor-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.max3-reports-processor-policy.json
}

resource "aws_iam_policy" "sam-deploy-max-role-policy" {
  description = "Allows access to cloudwatch logs lambda"
  name        = "sam-deploy-max-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sam-deploy-max-role-policy.json
}

resource "aws_iam_policy" "max3-reports-eventbridge-role-policy" {
  description = "Allows access to event bridge"
  name        = "max3-reports-eventbridge-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.max3-reports-eventbridge-role-policy.json
}

resource "aws_iam_policy" "cmollis-python-dev-policy" {
  description = "Custom policy created to avoid 10 policy per group service quota limit"
  name        = "cmollis-python-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cmollis-python-dev-policy.json
}

resource "aws_iam_policy" "EventBridgeLambdaInvoker-policy" {
  description = "Custom policy created to invoke lambda from event bridge"
  name        = "EventBridgeLambdaInvoker-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.EventBridgeLambdaInvoker-policy.json
}

resource "aws_iam_policy" "presigned-url-creator-dev-policy" {
  description = "Access to s3"
  name        = "presigned-url-creator-dev-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.presigned-url-creator-dev-policy.json
}

resource "aws_iam_policy" "maxd-AWSLoadBalancerControllerIAMPolicy" {
  description = "Ingress Controller Policy"
  name        = "maxd-AWSLoadBalancerControllerIAMPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxd-AWSLoadBalancerControllerIAMPolicy.json
}

resource "aws_iam_policy" "kafka-policy" {
  description = "Ingress Controller Policy"
  name        = "kafka-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.kafka-policy.json
}

resource "aws_iam_policy" "sme-max-stg-dataload" {
  description = "S3 Policy"
  name        = "sme-max-stg-dataload"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-stg-dataload.json
}

resource "aws_iam_policy" "max3-s3-report-policy" {
  description = "max3-s3-report-policy"
  name        = "max3-s3-report-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.max3-s3-report-policy.json
}

resource "aws_iam_policy" "msk-policy" {
  name        = "msk-policy"
  description = "Accessing MSK"
  policy      = data.aws_iam_policy_document.msk-policy.json
}

resource "aws_iam_policy" "sns-policy" {
  name        = "SNS-publish-policy"
  description = "Allow publish to SNS topic"
  path        = var.path
  policy      = data.aws_iam_policy_document.allow_sns_publish.json
}