resource "aws_iam_policy" "api_s3_policy" {
  name        = "DSK_API_S3FullAccess"
  path        = "/"

  policy = jsonencode({
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "s3:*",
          "s3-object-lambda:*"
        ],
        "Resource": [
          "arn:aws:s3:::dsk-metering",
          "arn:aws:s3:::dsk-metering/*",
          "arn:aws:s3:::dsk-alert-images",
          "arn:aws:s3:::dsk-alert-images/*"
        ]
      }
    ]
  })
}