variable "aws_region" {
  description = "AWS region."
  type        = string
  default     = "us-east-1"
}

variable "environment" {
  description = "Available values: dev, qa, prod."
  type        = string
  default     = "dev"
}

variable "service_name" {
  description = "Service name for resources."
  type        = string
  default     = "rds-refresh"
}

variable "application_family" {
  description = "Application family to which this project belongs."
  type        = string
  default     = "devops"
}

variable "snapshot_kms_keys" {
  description = "A list of KMS keys which the RDS restore role is allowed to copy snapshots for"
  type        = list(string)
  default = [
    "arn:aws:kms:us-east-1:437795906767:key/772ea637-a9dd-49aa-a888-284ececbeb88"
  ]
}

variable "trusted_principals" {
  description = "List of IAM users or roles which can assume the RDS restore role."
  type        = list(string)
  default = [
    "arn:aws:iam::086679231553:role/lambda-shared-lambda-rds-refresh-delete-intermediate-snapshots",
    "arn:aws:iam::086679231553:role/lambda-shared-lambda-rds-refresh-get-db-info",
    "arn:aws:iam::086679231553:role/lambda-shared-lambda-rds-refresh-manage-kafka-connector",
    "arn:aws:iam::086679231553:role/shared-rds-refresh-restore-task-role",
    "arn:aws:iam::086679231553:role/shared-rds-refresh-sfn-role",
  ]
}

variable "role_session_duration" {
  description = "Session duration in seconds for the RDS restore role."
  type        = number
  default     = 10800
}

variable "sanitise_data_function_timeout" {
  description = "The timeout for the sanitise data function."
  type        = number
  default     = 900
}

variable "vpc_name" {
  description = "VPC name to deploy resources."
  type        = string
  default     = "dev"
}

variable "sanitise_data_lambda_registry_id" {
  description = "The registry ID for the sanitise data lambda image."
  type        = string
  default     = "437795906767"
}

variable "external_ids" {
  description = "External IDs for the trust policy."
  type        = list(string)
  default     = [
    "QNUoYXgqXSvhyCN7BzaxJM8fEL313SNz",
    "arn:aws:states:us-east-1:086679231553:stateMachine:shared-rds-refresh-state-machine"
  ]
}

locals {
  sanitise_data_lambda_name = "lambda-sanitise-rds-data"
  tags = {
    environment        = var.environment
    application_family = var.application_family
    project            = var.service_name
    terraformed        = true
  }
}