locals {
  # If you want to use any of the variables in _this_ file, you have to load them here.
  # However, they will all be available as inputs to the module loaded in terraform.source
  # below.
  environment_vars = read_terragrunt_config(find_in_parent_folders("env.hcl"))
  partition_vars   = read_terragrunt_config(find_in_parent_folders("partition.hcl"))
  region_vars      = read_terragrunt_config(find_in_parent_folders("region.hcl"))
  account_vars     = read_terragrunt_config(find_in_parent_folders("account.hcl"))
  global_vars      = read_terragrunt_config(find_in_parent_folders("globals.hcl"))
}

# Terragrunt will copy the Terraform configurations specified by the source parameter, along with any files in the
# working directory, into a temporary folder, and execute your Terraform commands in that folder.
terraform {
  # Double slash is intentional and required to show root of modules
  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/s3_bucket_writer_role?ref=v5.0.0"
}

# Include all settings from the root terragrunt.hcl file
include {
  path = find_in_parent_folders()
}

dependencies {
  paths = [
    "../008-xdr-binaries",
    "../../../../prod/aws/mdr-prod-c2/072-salt-master-inventory-role",
    "../../../../test/aws/mdr-test-c2/072-salt-master-inventory-role",
  ]
}

dependency "prod-salt-master" {
  config_path = "../../../../prod/aws-us-gov/mdr-prod-c2/071-instance-salt-master"
}

dependency "test-salt-master" {
  config_path = "../../../../test/aws-us-gov/mdr-test-c2/071-instance-salt-master"
}

dependency "bucket" {
  config_path = "../008-xdr-binaries"
}

dependency "prod-user" {
  config_path = "../../../../prod/aws/mdr-prod-c2/072-salt-master-inventory-role"
}

dependency "test-user" {
  config_path = "../../../../test/aws/mdr-test-c2/072-salt-master-inventory-role"
}


# These are the variables we have to pass in to use the module specified in the terragrunt source above
inputs = {
  # All of the inputs from the inherited hcl files are available automatically
  # (via the `inputs` section of the root `terragrunt.hcl`). However, modules
  # will be more flexible if you specify particular input values.
  tags = {
    Purpose   = "Read/Write access to afsxdr-binaries s3 bucket"
    Terraform = "aws/${basename(get_parent_terragrunt_dir())}/${path_relative_to_include()}/"
  }

  bucket      = dependency.bucket.outputs.arn
  name        = "afsxdr-binaries_writers"
  description = "Write access to the s3 bucket for afsxdr-binaries"
  trusted_arns = [
    "arn:aws:iam::477548533976:role/salt-master-instance-role", # Legacy prod salt master
    "arn:aws:iam::527700175026:role/salt-master-instance-role", # Legacy test salt master
    dependency.test-user.outputs.salt-master-c2-commercial-user-arn,
    dependency.prod-user.outputs.salt-master-c2-commercial-user-arn,
  ]

  kms_key_ids = [
    dependency.bucket.outputs.kms_key_arn
  ]
}
terraform_version_constraint  = "= 1.1.6"
terragrunt_version_constraint = "= 0.36.2"