# Managed policies ===========================================================

resource "aws_iam_policy" "this" {
  for_each = var.policies

  name        = each.value.name
  description = each.value.description
  path        = each.value.path
  policy      = each.value.policy

  tags = local.tags
}

# Permission boundary policies -----------------------------------------------

resource "aws_iam_policy" "boundary" {
  for_each = var.permission_boundaries

  name        = each.value.name
  description = each.value.description
  path        = each.value.path
  policy      = each.value.policy

  tags = merge(local.tags, { Purpose = "PermissionBoundary" })
}