data "aws_iam_policy_document" "rekognition_policy" {
  statement {
    effect = "Allow"

    actions = [
      "rekognition:DetectLabels",
      "rekognition:DetectModerationLabels",
    ]

    resources = [
      "*",
    ]
  }
}

resource "aws_iam_policy" "rekognition_policy" {
  name   = "${var.environment}-${var.service_name}-rekognition-policy"
  policy = data.aws_iam_policy_document.rekognition_policy.json
}