variable "read_arns" {
  type        = list(string)
  description = "List of arns of external IAM entities with read permissions"
  default     = []
}

variable "upload_arns" {
  type        = list(string)
  description = "List of arns of external IAM entities with write permissions."
  default     = []
}

variable "delete_arns" {
  type        = list(string)
  description = "List of arns of external IAM entities with delete permissions"
  default     = []
}

variable "full_access_arns" {
  type        = list(string)
  description = "List of arns of external roles with delete and read-write permissions"
  default     = []
}

variable "template_bucket_arn" {
  type        = string
  description = "This value will be substituted to actual bucket arn during template apply in private_bucket_with_logs_aes256"
  default     = "template_bucket_arn"
}

variable "ses_account_id" {
  type        = string
  description = "Enable SES to put files in the bucket."
  default     = ""
}

variable "replication_roles" {
  type        = list(string)
  description = "List of arns of s3 replication roles"
  default     = []
}

variable "encryption_in_transit" {
  type        = bool
  description = "Enforce encryption in transit for the s3 bucket operations"
  default     = true
}

variable "custom_path_role_permissions" {
  type        = list(object({ arn = string, path = string, read = bool, write = bool, delete = bool }))
  description = ""
  default     = []
}