resource "aws_iam_policy" "sme-supply-chain-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1" {
  name   = "sme-supply-chain-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.sme-supply-chain-prod-config-role-us-east-1_AWSConfigDeliveryPermissions_us-east-1.json
}

resource "aws_iam_policy" "MaxDMSPolicy" {
  name   = "MaxDMSPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.MaxDMSPolicy.json
}

resource "aws_iam_policy" "AllowAuroraToMaxLambdas" {
  description = "AllowAuroraToMaxLambdas "
  name        = "AllowAuroraToMaxLambdas"
  path        = var.path
  policy      = data.aws_iam_policy_document.AllowAuroraToMaxLambdas.json
}

resource "aws_iam_policy" "s3-datalake-w" {
  description = "s3 da"
  name        = "s3-datalake-w"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-datalake-w.json
}

resource "aws_iam_policy" "MaxAWSSupport" {
  description = "MaxAWSSupport"
  name        = "MaxAWSSupport"
  path        = var.path
  policy      = data.aws_iam_policy_document.MaxAWSSupport.json
}

resource "aws_iam_policy" "MaxDbAdminPolicy" {
  name   = "MaxDbAdminPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.MaxDbAdminPolicy.json
}

resource "aws_iam_policy" "max-p" {
  description = "s3-access"
  name        = "max-p"
  path        = var.path
  policy      = data.aws_iam_policy_document.max-p.json
}

resource "aws_iam_policy" "DatadogAWSIntegrationPolicy" {
  description = "DatadogAWSIntegrationPolicy"
  name        = "DatadogAWSIntegrationPolicy"
  path        = var.path
  policy      = data.aws_iam_policy_document.DatadogAWSIntegrationPolicy.json
}

resource "aws_iam_policy" "SendRawEmail" {
  name   = "SendRawEmail"
  path   = var.path
  policy = data.aws_iam_policy_document.SendRawEmail.json
}

resource "aws_iam_policy" "ResourceTags-CreatePermission" {
  name   = "ResourceTags-CreatePermission"
  path   = var.path
  policy = data.aws_iam_policy_document.ResourceTags-CreatePermission.json
}

resource "aws_iam_policy" "MaxDevAdminPolicy" {
  name   = "MaxDevAdminPolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.MaxDevAdminPolicy.json
}

resource "aws_iam_policy" "AllowAuroraToMaxBuckets" {
  description = "AllowAuroraToMaxBuckets "
  name        = "AllowAuroraToMaxBuckets"
  path        = var.path
  policy      = data.aws_iam_policy_document.AllowAuroraToMaxBuckets.json
}

resource "aws_iam_policy" "MaxETLUser" {
  name   = "MaxETLUser"
  path   = var.path
  policy = data.aws_iam_policy_document.MaxETLUser.json
}

resource "aws_iam_policy" "CloudOpsDenyIAM" {
  description = "IAM Read Only"
  name        = "CloudOpsDenyIAM"
  path        = var.path
  policy      = data.aws_iam_policy_document.CloudOpsDenyIAM.json
}

resource "aws_iam_policy" "GSIRT_AWS_S3AccessLog_Collection" {
  description = "Policy to allow GSIRT to collect S3 Access Logs"
  name        = "GSIRT_AWS_S3AccessLog_Collection"
  path        = var.path
  policy      = data.aws_iam_policy_document.GSIRT_AWS_S3AccessLog_Collection.json
}

resource "aws_iam_policy" "KMS-RO" {
  description = "KMS-RO"
  name        = "KMS-RO"
  path        = var.path
  policy      = data.aws_iam_policy_document.KMS-RO.json
}

resource "aws_iam_policy" "maxp-aws-config-policy" {
  description = "maxp-aws-config-policy"
  name        = "maxp-aws-config-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxp-aws-config-policy.json
}

resource "aws_iam_policy" "maxp-prisma-defender-policy" {
  description = "maxp-prisma-defender-policy"
  name        = "maxp-prisma-defender-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxp-prisma-defender-policy.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1503418186484" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1503418186484"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1503418186484.json
}

resource "aws_iam_policy" "JdbcConnectorConfigRolePolicy2" {
  name   = "JdbcConnectorConfigRolePolicy2"
  path   = var.path
  policy = data.aws_iam_policy_document.JdbcConnectorConfigRolePolicy2.json
}

resource "aws_iam_policy" "oneClick_CloudTrail_CloudWatchLogs_Role_1585149902020" {
  name   = "oneClick_CloudTrail_CloudWatchLogs_Role_1585149902020"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_CloudTrail_CloudWatchLogs_Role_1585149902020.json
}

resource "aws_iam_policy" "wafv2" {
  name   = "wafv2"
  path   = var.path
  policy = data.aws_iam_policy_document.wafv2.json
}

resource "aws_iam_policy" "sme-max-prod-dataload" {
  description = "sme-max-prod-dataload"
  name        = "sme-max-prod-dataload"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-prod-dataload.json
}

resource "aws_iam_policy" "maxp-trendmicro_esdomain_policy" {
  description = "For TMDS ELK "
  name        = "maxp-trendmicro_esdomain_policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxp-trendmicro_esdomain_policy.json
}

resource "aws_iam_policy" "maxp-s3user" {
  description = "-2489"
  name        = "maxp-s3user"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxp-s3user.json
}

resource "aws_iam_policy" "JdbcConnectorConfigRolePolicy1" {
  name   = "JdbcConnectorConfigRolePolicy1"
  path   = var.path
  policy = data.aws_iam_policy_document.JdbcConnectorConfigRolePolicy1.json
}

resource "aws_iam_policy" "R53-Public-logs-CC-COM-S3" {
  name   = "R53-Public-logs-CC-COM-S3"
  path   = var.path
  policy = data.aws_iam_policy_document.R53-Public-logs-CC-COM-S3.json
}

resource "aws_iam_policy" "cloudops-instance-policy" {
  description = "Contains CloudWatchAgentAdminPolicy, AmazonSSMManagedInstanceCore, AmazonEC2ReadOnlyAccess, AmazonVPCReadOnlyAccess, AmazonS3ReadOnlyAccess, AWSCloudTrailReadOnlyAccess, AmazonRDSReadOnlyAccess, CloudWatchReadOnlyAccess"
  name        = "cloudops-instance-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.cloudops-instance-policy.json
}

resource "aws_iam_policy" "sme-max-DynamodbRW" {
  description = "sme-max-DynamodbRW"
  name        = "sme-max-DynamodbRW"
  path        = var.path
  policy      = data.aws_iam_policy_document.sme-max-DynamodbRW.json
}

resource "aws_iam_policy" "GSIRT_AWS_Monitoring_Role-DescribePolicy" {
  name   = "GSIRT_AWS_Monitoring_Role-DescribePolicy"
  path   = var.path
  policy = data.aws_iam_policy_document.GSIRT_AWS_Monitoring_Role-DescribePolicy.json
}

resource "aws_iam_policy" "maxp2-0-processor-ecr-access-policy" {
  name   = "maxp2-0-processor-ecr-access-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxp2-0-processor-ecr-access-policy.json
}

resource "aws_iam_policy" "emr-custom-1" {
  name   = "emr-custom-1"
  path   = var.path
  policy = data.aws_iam_policy_document.emr-custom-1.json
}

resource "aws_iam_policy" "maxp-dataload-policy" {
  description = "maxp-dataload-policy"
  name        = "maxp-dataload-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxp-dataload-policy.json
}

resource "aws_iam_policy" "gracenote-s3" {
  name   = "gracenote-s3"
  path   = var.path
  policy = data.aws_iam_policy_document.gracenote-s3.json
}

resource "aws_iam_policy" "s3-replicate" {
  name   = "s3-replicate"
  path   = var.path
  policy = data.aws_iam_policy_document.s3-replicate.json
}

resource "aws_iam_policy" "AWSLambdaEdgeExecutionRole-46f2e9d7-c857-4b23-a790-8bb3dd48e741" {
  name   = "AWSLambdaEdgeExecutionRole-46f2e9d7-c857-4b23-a790-8bb3dd48e741"
  path   = "/service-role/"
  policy = data.aws_iam_policy_document.AWSLambdaEdgeExecutionRole-46f2e9d7-c857-4b23-a790-8bb3dd48e741.json
}

resource "aws_iam_policy" "orderhistory_certificate_readOnly" {
  description = "orderhistory_certificate_readOnly"
  name        = "orderhistory_certificate_readOnly"
  path        = var.path
  policy      = data.aws_iam_policy_document.orderhistory_certificate_readOnly.json
}

resource "aws_iam_policy" "Iam_create" {
  name   = "Iam_create"
  path   = var.path
  policy = data.aws_iam_policy_document.Iam_create.json
}

resource "aws_iam_policy" "quicksight_full" {
  name   = "quicksight_full"
  path   = var.path
  policy = data.aws_iam_policy_document.quicksight_full.json
}

resource "aws_iam_policy" "s3-sme-max-prod-replay-datalake-replication" {
  description = "CLOUDOPS-9697"
  name        = "s3-sme-max-prod-replay-datalake-replication"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-sme-max-prod-replay-datalake-replication.json
}

resource "aws_iam_policy" "digsysd-ec2-api-invoke" {
  description = "digsysd-ec2-api-invoke for maxffp-etlapp01"
  name        = "digsysd-ec2-api-invoke"
  path        = var.path
  policy      = data.aws_iam_policy_document.digsysd-ec2-api-invoke.json
}

resource "aws_iam_policy" "maxp-portal-policy" {
  description = "maxp-portal-policy"
  name        = "maxp-portal-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.maxp-portal-policy.json
}

resource "aws_iam_policy" "AWSQuickSightRDSPolicy" {
  description = "Grants Amazon QuickSight describe permissions to AWS RDS resources"
  name        = "AWSQuickSightRDSPolicy"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSQuickSightRDSPolicy.json
}

resource "aws_iam_policy" "AWSGlueServiceRole-testgluerole" {
  description = "This policy will be used for Glue Crawler and Job execution. Please do NOT delete!"
  name        = "AWSGlueServiceRole-testgluerole"
  path        = "/service-role/"
  policy      = data.aws_iam_policy_document.AWSGlueServiceRole-testgluerole.json
}

resource "aws_iam_policy" "JdbcConnectorConfigRolePolicy5" {
  name   = "JdbcConnectorConfigRolePolicy5"
  path   = var.path
  policy = data.aws_iam_policy_document.JdbcConnectorConfigRolePolicy5.json
}

resource "aws_iam_policy" "JdbcConnectorConfigRolePolicy3" {
  name   = "JdbcConnectorConfigRolePolicy3"
  path   = var.path
  policy = data.aws_iam_policy_document.JdbcConnectorConfigRolePolicy3.json
}

resource "aws_iam_policy" "s3-sme-max-prod-datalake" {
  description = "sme-max-prod-datalake"
  name        = "s3-sme-max-prod-datalake"
  path        = var.path
  policy      = data.aws_iam_policy_document.s3-sme-max-prod-datalake.json
}

resource "aws_iam_policy" "oneClick_lambda_basic_execution_1487062851295" {
  name   = "oneClick_lambda_basic_execution_1487062851295"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_lambda_basic_execution_1487062851295.json
}

resource "aws_iam_policy" "max-1-spark-emr-policy" {
  name   = "max-1-spark-emr-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.max-1-spark-emr-policy.json
}

resource "aws_iam_policy" "lamda_s3-policy" {
  name   = "lamda_s3-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.lamda_s3-policy.json
}

resource "aws_iam_policy" "oneClick_flowlogsRole_1495092568364" {
  name   = "oneClick_flowlogsRole_1495092568364"
  path   = var.path
  policy = data.aws_iam_policy_document.oneClick_flowlogsRole_1495092568364.json
}

resource "aws_iam_policy" "AWS_Allow_Inspector_Assessment" {
  name   = "AWS_Allow_Inspector_Assessment"
  path   = var.path
  policy = data.aws_iam_policy_document.AWS_Allow_Inspector_Assessment.json
}

resource "aws_iam_policy" "DeepSecurity" {
  name   = "DeepSecurity"
  path   = var.path
  policy = data.aws_iam_policy_document.DeepSecurity.json
}

resource "aws_iam_policy" "DynamoDB_ReadOnly_GROUPS-PRD" {
  description = "DynamoDB_ReadOnly_GROUPS-PRD"
  name        = "DynamoDB_ReadOnly_GROUPS-PRD"
  path        = var.path
  policy      = data.aws_iam_policy_document.DynamoDB_ReadOnly_GROUPS-PRD.json
}


resource "aws_iam_policy" "cost-explore-ro" {
  description = "Read cost explorer service"
  name        = "cost-explore-ro"
  path        = var.path
  policy      = data.aws_iam_policy_document.cost-explore-ro.json
}

resource "aws_iam_policy" "maxp-dsrv-dsp-policy" {
  name   = "maxp-dsrv-dsp-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxp-dsrv-dsp-policy.json
}

resource "aws_iam_policy" "JdbcConnectorConfigRolePolicy0" {
  name   = "JdbcConnectorConfigRolePolicy0"
  path   = var.path
  policy = data.aws_iam_policy_document.JdbcConnectorConfigRolePolicy0.json
}

resource "aws_iam_policy" "maxp-ecs-task-role-policy" {
  name   = "maxp-ecs-task-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxp-ecs-task-role-policy.json
}

resource "aws_iam_policy" "maxp-ecs-task-execution-role-policy" {
  name   = "maxp-ecs-task-execution-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxp-ecs-task-execution-role-policy.json
}

resource "aws_iam_policy" "AmazonEMR-LambdaExecutionRole-policy" {
  name   = "AmazonEMR-LambdaExecutionRole-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.AmazonEMR-LambdaExecutionRole-policy.json
}

resource "aws_iam_policy" "maxp-ohproc-dbuser-policy" {
  name   = "maxp-ohproc-dbuser-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxp-ohproc-dbuser-policy.json
}


resource "aws_iam_policy" "maxp-admin02-custom-policy" {
  name   = "maxp-admin02-custom-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxp-admin02-custom-policy.json
}

resource "aws_iam_policy" "maxp-dsrv-process-ecs-role-policy" {
  name   = "maxp-dsrv-process-ecs-role-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.maxp-dsrv-process-ecs-role-policy.json
}

resource "aws_iam_policy" "max3-s3-report-policy" {
  name   = "max3-s3-report-policy"
  path   = var.path
  policy = data.aws_iam_policy_document.max3-s3-report-policy.json
}


resource "aws_iam_policy" "sam-deploy-max-role-policy" {
  description = "Allows access to cloudwatch logs lambda"
  name        = "sam-deploy-max-role-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.sam-deploy-max-role-policy.json
}


resource "aws_iam_policy" "max3-reports-batch-compute-env-policy" {
  description = "max3-reports-batch-compute-env-policy"
  name        = "max3-reports-batch-compute-env-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.max3-reports-batch-compute-env-policy.json
}

resource "aws_iam_policy" "lambda-s3-policy" {
  description = "Allows access to cloudwatch logs lambda"
  name        = "lambda-s3-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.lambda-s3-policy.json
}

resource "aws_iam_policy" "EventBridgeLambdaInvoker-policy" {
  description = "Custom policy created to invoke lambda from event bridge"
  name        = "EventBridgeLambdaInvoker-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.EventBridgeLambdaInvoker-policy.json
}

resource "aws_iam_policy" "presigned-url-creator-prod-policy" {
  description = "Access to s3"
  name        = "presigned-url-creator-prod-policy"
  path        = var.path
  policy      = data.aws_iam_policy_document.presigned-url-creator-prod-policy.json
}

resource "aws_iam_policy" "AthenaReadOnly-MaxProdDatalake" {
  name        = "AthenaReadOnly-MaxProdDatalake"
  description = "Policy allowing read-only access to maxproddatalake in Athena"
  policy      = data.aws_iam_policy_document.AthenaReadOnly-MaxProdDatalake-policy.json
}

resource "aws_iam_policy" "msk-policy" {
  name        = "msk-policy"
  description = "Accessing MSK"
  policy      = data.aws_iam_policy_document.msk-policy.json
}

resource "aws_iam_policy" "max-prod-AmazonEKSloadbalancercontrollerroler-policy" {
  description = null
  name        = "max-prod-AmazonEKSloadbalancercontrollerroler-policy"
  name_prefix = null
  path        = var.path
  policy      = data.aws_iam_policy_document.max-prod-AmazonEKSloadbalancercontrollerroler-policy.json
}