module "gracenote-s3-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.gracenote-s3.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/gracenote-s3",
  ]
}

module "maxp-dataload-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxp-dataload.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/maxp-dataload-policy",
  ]
}

module "maxp-s3-prd-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxp-s3-prd.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/maxp-s3user",
    "arn:aws:iam::${var.account_id}:policy/maxp2-0-processor-ecr-access-policy",
    "arn:aws:iam::${var.account_id}:policy/sme-max-DynamodbRW",
  ]
}

module "sme-supply-chain-max-prod-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sme-supply-chain-max-prod.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/MaxETLUser",
    "arn:aws:iam::${var.account_id}:policy/AllowAuroraToMaxLambdas",
    "arn:aws:iam::${var.account_id}:policy/MaxDMSPolicy",
    "arn:aws:iam::${var.account_id}:policy/AllowAuroraToMaxBuckets",
    "arn:aws:iam::${var.account_id}:policy/KMS-RO",
    "arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole",
  ]
}

module "maxp-datalake" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxp-datalake.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/s3-sme-max-prod-datalake",
    "arn:aws:iam::${var.account_id}:policy/s3-sme-max-prod-replay-datalake-replication",
    "arn:aws:iam::aws:policy/service-role/AWSQuicksightAthenaAccess",
  ]
}

module "maxp-athena-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.maxp-athena.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/MaxDMSPolicy",
    "arn:aws:iam::${var.account_id}:policy/MaxDevAdminPolicy",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
    "arn:aws:iam::aws:policy/AmazonAthenaFullAccess",
    "arn:aws:iam::aws:policy/AmazonS3FullAccess",
  ]
}

module "github-actions-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.github-actions.name
  custom_group_policy_arns = [
    "arn:aws:iam::${var.account_id}:policy/maxp2-0-processor-ecr-access-policy",
    "arn:aws:iam::504436705349:policy/maxp-ecs-task-role-policy",
    "arn:aws:iam::504436705349:policy/maxp-ecs-task-execution-role-policy",
    "arn:aws:iam::504436705349:policy/sme-max-DynamodbRW"
  ]
}

module "sam-deploy-user-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.sam-deploy-user-group.name
  custom_group_policy_arns = [
    aws_iam_policy.sam-deploy-max-role-policy.arn
  ]
}

module "presigned-url-creator-prod-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.presigned-url-creator-prod-group.name
  custom_group_policy_arns = [
    aws_iam_policy.presigned-url-creator-prod-policy.arn
  ]
}

module "MaxProdDatalake-policy-attachments" {
  source     = "../../modules/iam-group-policy-attachments"
  group_name = aws_iam_group.MaxProdDatalake.name
  custom_group_policy_arns = [
    "arn:aws:iam::aws:policy/AmazonAthenaFullAccess",
    "arn:aws:iam::aws:policy/AmazonS3ReadOnlyAccess",
    "arn:aws:iam::aws:policy/AWSLambda_FullAccess",
    aws_iam_policy.AthenaReadOnly-MaxProdDatalake.arn

  ]
}