variable "aws_region" {
  default     = "us-east-1"
  description = "All elements of the state machine execution flow have to be placed in the same region."
}

variable "environment" {
  description = "Available values:  dev, qa, prod."
  default     = "dev"
}

variable "service_name" {
  default = "ows-asset-transcoder"
}

variable "application_family" {
  default = "podcast"
}

variable "podcast_output_bucket_name" {
  description = "Podcast application bucket name"
  default     = "dev-orcd-podcast-output-assets"
}

variable "podcast_output_cdn" {
  description = "Podcast application CDN for output assets"
  default     = "d18suehfmqp2gi.cloudfront.net"
}

variable "input_assets_bucket_cors" {
  type        = list(any)
  description = "List of CORS rules for input assets bucket"
  default = [
    {
      allowed_headers = ["*"]
      allowed_methods = ["PUT", "POST"]
      allowed_origins = ["http://localhost:*"]
      expose_headers  = ["ETag"]
      max_age_seconds = 3000
    },
  ]
}

variable "additional_browser_assume_role_arns" {
  type        = list(any)
  description = "Role ARNs that are allowed to execute assumeRole required by upload-token"
  default = [
    "arn:aws:iam::103233932089:role/generic-engineer-role",
  ]
}

variable "lambdas_vpc_security_group_ids" {
  type        = list(any)
  description = "Security group IDs for the VPC where the lambdas will execute"
  default     = ["sg-351b5751"]
}

variable "lambdas_vpc_subnet_ids" {
  type        = list(any)
  description = "VPC subnet IDs where the lambdas will execute"
  default     = ["subnet-b649dfef", "subnet-44c19a21"]
}

variable "auth_issuers" {
  type    = string
  default = "https://dev-orchard.auth0.com/"
}

variable "client_ip" {
  type    = string
  default = "98.14.250.31/32"
}

variable "secrets_manager_secret_names" {
  description = "List of secrets manager secrets to create"
  type        = list(string)
  default = [
    "CLOUDFRONT_KEY_PAIR_ID",
    "CLOUDFRONT_PRIVATE_KEY",
    "TRANSCODER_DB_URL",
  ]
}