[PRMP-1400] missing indexes

Author: NogaNHS

infrastructure/README.md

@@ -219,7 +219,7 @@
 | [aws_iam_role_policy.mesh_sns_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource |
 | [aws_iam_role_policy.mesh_ssm_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource |
 | [aws_iam_role_policy.sns_failure_feedback](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource |
-| [aws_iam_role_policy.test_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource |
+| [aws_iam_role_policy.splunk_access_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy) | resource |
 | [aws_iam_role_policy_attachment.backup_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |
 | [aws_iam_role_policy_attachment.cross_account_backup_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |
 | [aws_iam_role_policy_attachment.cross_account_copy_policy](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iam_role_policy_attachment) | resource |

infrastructure/audit.tf

@@ -20,9 +20,10 @@ resource "aws_iam_role" "splunk_sqs_forwarder" {
   assume_role_policy = data.aws_iam_policy_document.splunk_trust_policy.json
 }
 
-resource "aws_iam_role_policy" "test_policy" {
-  name = "${var.environment}_splunk_access_policy"
-  role = aws_iam_role.splunk_sqs_forwarder.id
+resource "aws_iam_role_policy" "splunk_access_policy" {
+  name  = "${var.environment}_splunk_access_policy"
+  count = local.is_sandbox ? 0 : 1
+  role  = aws_iam_role.splunk_sqs_forwarder[0].id
   policy = jsonencode({
     Version = "2012-10-17"
     Statement = [

infrastructure/mesh-forwarder.tf

@@ -125,33 +125,38 @@ resource "aws_iam_role" "mesh_forwarder" {
 }
 
 resource "aws_iam_role_policy" "mesh_kms_policy" {
+  count  = local.is_mesh_forwarder_enable ? 1 : 0
   name   = "${var.environment}-${var.mesh_component_name}-kms"
-  role   = aws_iam_role.mesh_forwarder.id
+  role   = aws_iam_role.mesh_forwarder[0].id
   policy = data.aws_iam_policy_document.kms_policy_doc.json
 }
 
 resource "aws_iam_role_policy" "mesh_ecr_policy" {
+  count  = local.is_mesh_forwarder_enable ? 1 : 0
   name   = "${var.environment}-${var.mesh_component_name}-ecr"
-  role   = aws_iam_role.mesh_forwarder.id
+  role   = aws_iam_role.mesh_forwarder[0].id
   policy = data.aws_iam_policy_document.ecr_policy_doc.json
 }
 
 resource "aws_iam_role_policy" "mesh_logs_policy" {
+  count  = local.is_mesh_forwarder_enable ? 1 : 0
   name   = "${var.environment}-${var.mesh_component_name}-logs"
   policy = data.aws_iam_policy_document.logs_policy_doc.json
-  role   = aws_iam_role.mesh_forwarder.id
+  role   = aws_iam_role.mesh_forwarder[0].id
 }
 
 resource "aws_iam_role_policy" "mesh_ssm_policy" {
+  count  = local.is_mesh_forwarder_enable ? 1 : 0
   name   = "${var.environment}-${var.mesh_component_name}-ssm"
   policy = data.aws_iam_policy_document.ssm_policy_doc.json
-  role   = aws_iam_role.mesh_forwarder.id
+  role   = aws_iam_role.mesh_forwarder[0].id
 }
 
 resource "aws_iam_role_policy" "mesh_sns_policy" {
+  count  = local.is_mesh_forwarder_enable ? 1 : 0
   name   = "${var.environment}-${var.mesh_component_name}-sns"
   policy = data.aws_iam_policy_document.sns_policy_doc[0].json
-  role   = aws_iam_role.mesh_forwarder.id
+  role   = aws_iam_role.mesh_forwarder[0].id
 }
 
 data "aws_iam_policy_document" "ecs-assume-role-policy" {
@@ -222,8 +227,9 @@ resource "aws_iam_role" "ecs_execution" {
 }
 
 resource "aws_iam_role_policy" "ecs_execution" {
+  count  = local.is_mesh_forwarder_enable ? 1 : 0
   name   = "${var.environment}-${var.mesh_component_name}-ecs-execution"
-  role   = aws_iam_role.ecs_execution.id
+  role   = aws_iam_role.ecs_execution[0].id
   policy = data.aws_iam_policy_document.ecs_execution[0].json
 }
 
@@ -353,7 +359,7 @@ resource "aws_iam_role" "sns_failure_feedback_role" {
 resource "aws_iam_role_policy" "sns_failure_feedback" {
   name   = "${var.environment}-${var.mesh_component_name}-sns-failure-feedback"
   policy = data.aws_iam_policy_document.sns_failure_feedback_policy.json
-  role   = aws_iam_role.sns_failure_feedback_role.id
+  role   = aws_iam_role.sns_failure_feedback_role[0].id
 }
 
 data "aws_iam_policy_document" "sns_service_assume_role_policy" {