variable "bucket_name" {
  type        = string
  description = "Name of the bucket to apply policy to."
}

variable "read_arns" {
  type        = list(string)
  description = "List of arns of external IAM entities with read permissions"
  default     = []
}

variable "upload_arns" {
  type        = list(string)
  description = "List of arns of external IAM entities with write permissions."
  default     = []
}

variable "delete_arns" {
  type        = list(string)
  description = "List of arns of external IAM entities with delete permissions"
  default     = []
}

variable "full_access_arns" {
  type        = list(string)
  description = "List of arns of external roles with delete and read-write permissions"
  default     = []
}

variable "encryption_in_transit" {
  type        = bool
  description = "Enforce encryption in transit for the s3 bucket operations"
  default     = true
}