main.database.tf (1 line):
	- line 21: # TODO add role assignment (& locks?) for RBAC scoped to the database