provider "vault" {
  address = var.vault_address
  token   = var.vault_token
}

provider "kubernetes" {
  host                   = data.aws_eks_cluster.eks_cluster.endpoint
  cluster_ca_certificate = base64decode(data.aws_eks_cluster.eks_cluster.certificate_authority.0.data)
  token                  = data.aws_eks_cluster_auth.eks_cluster.token
}

terraform {
  backend "s3" {
    bucket   = "plutotv-tf-state"
    region   = "us-east-1"
    role_arn = "arn:aws:iam::972525491246:role/terraform_state_access"
  }
}

provider "aws" {
  region = var.region
  assume_role {
    role_arn = "arn:aws:iam::${var.account_id}:role/NewAccountsAdmins"
  }
}

provider "aws" {
  alias  = "ecs"
  region = var.region
  assume_role {
    role_arn = "arn:aws:iam::${var.ecs_account_id}:role/OrganizationAccountAccessRole"
  }
}