variable "cloudops_firewall_protected_tag" {
  description = "Used to tag an EC2 instance as being protected by a firewall, either Network Firewall or PaloAlto"
  type        = map(string)

  default = {
    CLOPS_FW = "YES"
  }
}
variable "environment" {
  description = "Environment name"
  default     = "dev"
}

variable "account_group" {
  description = "The name of the account group that the account belongs to"
  default     = "mc-sec"
}

variable "resource_share_principals" {
  type        = set(string)
  description = "List of principals to share resources with using RAM"
  default = [
    "arn:aws:organizations::970903126758:ou/o-bqioddgr91/ou-ax9e-vu43qt3i", # The Orchard OU
    "arn:aws:organizations::970903126758:ou/o-bqioddgr91/ou-ax9e-ouayejxi", # Data Strategy aka GDB OU
  ]
}