output "bucket_name" {
  description = "The name of the AWS Config bucket"
  value       = var.create_s3_bucket ? module.config_bucket[0].s3_bucket_name_output : var.existing_s3_bucket_name
}

output "config_role_arn" {
  description = "The ARN of the IAM policy which grants access to the Config bucket"
  value       = var.create_iam_role ? aws_iam_role.config_access_role[0].arn : var.existing_iam_role_arn
}