resource "vault_auth_backend" "approle" {
   type = "approle"
}

resource "vault_approle_auth_backend_role" "unifi" {
  backend = vault_auth_backend.approle.path
  role_name = "unifi-role"
  token_policies = ["default", "networking"]
}

resource "vault_approle_auth_backend_role "iot" {
  backend = vault_auth_backend.approle.path
  role_name = "iot-role"
  token_policies = ["default", "iot"]
}

resource "vault_approle_auth_backend_role "infra_tools" {
  backend = vault_auth_backend.approle.path
  role_name = "infra-role"
  token_policies = ["default", "infra_tools"]
}