resource "aws_iam_policy" "devops_s3_policy" {
  name        = "DSK_DEVOPS_S3FullAccess"
  path        = "/"

  policy = jsonencode({
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "s3:*",
          "s3-object-lambda:*"
        ],
        "Resource": [
          "arn:aws:s3:::dsk-middleware-backup",
          "arn:aws:s3:::dsk-middleware-backup/*"
        ]
      }
    ]
  })
}