Create alma-sapinvoices-ui ECR Repository

Why these changes are being introduced:
As part of adding a web-based UI to run the SAP Invoices task, we need
to set up an ECR Repository to store the container images that will
be used in the Lambda function.

How this addresses that need:
* Create a standard ECR Repository with permissions and sample text
for GHA workflows and Makefiles for a Lambda function using a
container for its image

Side effects of this change:
None.

Relevant ticket(s):
* https://mitlibraries.atlassian.net/browse/IN-1011

fix for function name

Author: cabutlermit

almaintegrations-ecrs.tf

@@ -187,6 +187,71 @@ output "sapinvoices_prod_promote_workflow" {
 }
 
 
+################################################################################
+## sapinvoices-ui
+locals {
+  ecr_sapinvoices_ui_function_name = "alma-sapinvoices-ui-${var.environment}"
+}
+module "ecr_sapinvoices_ui" {
+  source            = "./modules/ecr"
+  repo_name         = "alma-sapinvoices-ui"
+  login_policy_arn  = aws_iam_policy.login.arn
+  oidc_arn          = data.aws_ssm_parameter.oidc_arn.value
+  environment       = var.environment
+  tfoutput_ssm_path = var.tfoutput_ssm_path
+  tags = {
+    app-repo = "alma-sapinvoices-ui"
+  }
+}
+
+# Outputs in dev
+output "sapinvoices_ui_dev_build_workflow" {
+  value = var.environment == "prod" || var.environment == "stage" ? null : templatefile("${path.module}/files/dev-build.tpl", {
+    region   = var.aws_region
+    role     = module.ecr_sapinvoices_ui.gha_role
+    ecr      = module.ecr_sapinvoices_ui.repository_name
+    function = local.ecr_sapinvoices_ui_function_name
+    }
+  )
+  description = "Full contents of the dev-build.yml for the alma-sapinvoices-ui repo"
+}
+output "sapinvoices_ui_makefile" {
+  value = var.environment == "prod" || var.environment == "stage" ? null : templatefile("${path.module}/files/makefile.tpl", {
+    ecr_name = module.ecr_sapinvoices_ui.repository_name
+    ecr_url  = module.ecr_sapinvoices_ui.repository_url
+    function = local.ecr_sapinvoices_ui_function_name
+    }
+  )
+  description = "Full contents of the Makefile for the alma-sapinvoices-ui repo (allows devs to push to Dev account only)"
+}
+
+# Outputs in stage
+output "sapinvoices_ui_stage_build_workflow" {
+  value = var.environment == "prod" || var.environment == "dev" ? null : templatefile("${path.module}/files/stage-build.tpl", {
+    region   = var.aws_region
+    role     = module.ecr_sapinvoices_ui.gha_role
+    ecr      = module.ecr_sapinvoices_ui.repository_name
+    function = local.ecr_sapinvoices_ui_function_name
+    }
+  )
+  description = "Full contents of the stage-build.yml for the alma-sapinvoices-ui repo"
+}
+
+# Outputs after promotion to prod
+output "sapinvoices_ui_prod_promote_workflow" {
+  value = var.environment == "stage" || var.environment == "dev" ? null : templatefile("${path.module}/files/prod-promote.tpl", {
+    region     = var.aws_region
+    role_stage = "${module.ecr_sapinvoices_ui.repo_name}-gha-stage"
+    role_prod  = "${module.ecr_sapinvoices_ui.repo_name}-gha-prod"
+    ecr_stage  = "${module.ecr_sapinvoices_ui.repo_name}-stage"
+    ecr_prod   = "${module.ecr_sapinvoices_ui.repo_name}-prod"
+    function   = local.ecr_sapinvoices_ui_function_name
+    }
+  )
+  description = "Full contents of the prod-promote.yml for the alma-sapinvoices-ui repo"
+}
+
+
 ################################################################################
 ## bursar transfer app
 module "ecr_bursar" {