module "artifacts_bucket" {
  source = "../generic_s3_bucket_with_role"

  # Module specific variables
  name = "portal-shared-artifacts"
  role_assumers = [
    "arn:${var.aws_partition}:iam::${var.aws_account_id}:role/portal-instance-role",
  ]
  extra_principals = [
    aws_iam_role.codebuild_splunk_docs_role.arn
  ]
  tags = var.tags

  # Pass through all variables required by constants.tf
  binaries_bucket                 = var.binaries_bucket
  environment                     = var.environment
  transit_gateway_account_name    = var.transit_gateway_account_name
  dns_info                        = var.dns_info
  c2_accounts                     = var.c2_accounts
  aws_partition                   = var.aws_partition
  aws_partition_alias             = var.aws_partition_alias
  common_services_account         = var.common_services_account
  common_profile                  = var.common_profile
  tfstate_region                  = var.tfstate_region
  aws_region                      = var.aws_region
  ses_region                      = var.ses_region
  account_name                    = var.account_name
  account_alias                   = var.account_alias
  aws_account_id                  = var.aws_account_id
  instance_termination_protection = var.instance_termination_protection
  splunk_prefix                   = var.splunk_prefix
}