##################################
#         S3 Variables           #
##################################

variable "assume_role" {
  description = "The role used for infra changes"
  type        = string
  default     = "arn:aws:iam::635220336377:role/AnsibleAWSServiceAccess-globaldsp"
}

variable "block_public_acls" {
  description = "To block S3 public acls"
  type        = bool
  default     = true
}
terraform {
  required_providers {
    aws = {
      source  = "hashicorp/aws"
      version = "~> 5.1.0"
    }
  }
}


variable "ignore_public_acls" {
  description = "To ignore any public acls"
  type        = bool
  default     = true
}

variable "restrict_public_buckets" {
  description = "To Restrict public buckets"
  type        = bool
  default     = true
}

variable "block_public_policy" {
  description = "To block public bucket policy"
  type        = bool
  default     = true
}

variable "force_destroy" {
  description = "To delete the bucket by force"
  type        = bool
  default     = true
}

variable "attach_policy" {
  description = "To add additional bucket policy"
  type        = bool
  default     = true
}

variable "attach_deny_insecure_transport_policy" {
  description = "To add TLS insecure policy"
  type        = bool
  default     = true
}

variable "attach_require_latest_tls_policy" {
  description = "To add latest TLS insecure policy"
  type        = bool
  default     = false
}

variable "s3_acl" {
  description = "S3 acl type"
  type        = string
  default     = "private"
}

variable "server_side_encryption_configuration" {
  description = "SSE config"
  default = {
    rule = {
      bucket_key_enabled = false
      apply_server_side_encryption_by_default = {
        kms_master_key_id = ""
        sse_algorithm     = "AES256"
      }
    }
  }
}