variable "workspace_iam_roles" {
  type = map
  default = {
    nf-sandbox = "arn:aws:iam::721086286010:role/ops-mgmt-admin"
    nf-staging-int = "arn:aws:iam::560269805515:role/ops-mgmt-admin"
    nf-staging-cust = "arn:aws:iam::337684097865:role/ops-mgmt-admin"
    nf-prod-int = "arn:aws:iam::745435643501:role/ops-mgmt-admin"
    nf-prod-cust = "arn:aws:iam::934326957044:role/ops-mgmt-admin"
    nf-staging-west-int = "arn:aws:iam::560269805515:role/ops-mgmt-admin"
  }
}

provider "auth0" {}

provider "aws" {
  region = var.region[terraform.workspace]
  assume_role {
    role_arn = var.workspace_iam_roles[terraform.workspace]
  }
}

provider "aws" {
  alias  = "us-east-1"
  region = "us-east-1"
  assume_role {
    role_arn = var.workspace_iam_roles[terraform.workspace]
  }
}

// failover region
provider "aws" {
  alias  = "ap-south-1"
  region = "ap-south-1"
  assume_role {
    role_arn = var.workspace_iam_roles[terraform.workspace]
  }
}

terraform {
  backend "s3" {
    bucket = "nf-mop-tf-state"
    key = "services/authorization/terraform.tfstate"
    region = "us-east-1"
    encrypt = true
    dynamodb_table = "nf-terraform-state-lock"
  }
}