variable "application_family" {
  type    = string
  default = "devops"
}

variable "team_name" {
  type    = string
  default = "devops"
}

variable "aws_region" {
  description = "The AWS region to create the monitoring role in"
  default     = "us-east-1"
}

variable "environment" {
  description = "The environment to create the monitoring role for"
  default     = "shared"
}

variable "service_name" {
  description = "The service name to create the monitoring role for"
  default     = "security-lake"
}

variable "s3_bucket_name_prefixes" {
  description = "The S3 bucket name prefixes to which the security lake policy should allow read access."
  type        = list(string)
  default     = [
    "shared-orcd-cloudfront-logs",
    "shared-orcd-guardduty-logs",
    "shared-orcd-lb-logs*", # Wildcard to cover all regions since the bucket names include the region as a postfix
    "shared-orcd-s3-logs*", # Wildcard to cover all regions since the bucket names include the region as a postfix
  ]
}

variable "security_lake_account_id" {
  description = "AWS account ID of the Security Lake account"
  type        = string
  default     = "350195739529"
}

variable "security_lake_iam_role_name" {
  description = "Name for IAM resources. This naming convention was provided to us by Infosec"
  type        = string
  default     = "SecurityLake-SourceRead"
}