variable "aws_region" {
  default = "us-east-1"
}

variable "environment" {
  default = "qa"
}

variable "service_name" {
  default = "ioc"
}

variable "application_family" {
  default = "devops"
}

variable "state_machine_name" {
  default = "ioc-block"
}

variable "external_id" {
  type        = string
  description = "The external ID to use when assuming roles in other accounts"
  default     = "QNUoYXgqXSvhyCN7BzaxJM8fEL313SNz"
}

variable "domain_list_id" {
  type        = string
  description = "The ID of the domain list to use for updating DNS firewall"
  default     = "rslvr-fdl-5b59af9ed3cd484f"
}

variable "notifications_slack_email_address" {
  type    = string
  default = "devops-internal-alert-aaaaqjrieqomjermjvspp7yfpm@sonymusic.org.slack.com"
}

variable "notifications_gsirt_email_address" {
  type    = string
  default = "devops@sonymusic-pde.com" # Set to DevOps gmail for QA alerts
}

variable "slack_notification_channel" {
  type    = string
  default = "@slack-The_Orchard-devops-internal-alerts"
}

locals {
  # the sets are in different objects to test parallel execution
  update_waf_ipset_input = [
    {
      "account_id" = data.aws_caller_identity.current.account_id
      "ip_sets" = [
        { "name" = "qa-gsirt-ioc-ip-set-ipv4", "scope" = "CLOUDFRONT" },
      ]
    },
    {
      "account_id" = data.aws_caller_identity.current.account_id
      "ip_sets" = [
        { "name" = "qa-gsirt-ioc-ip-set-ipv4", "scope" = "REGIONAL" },
      ]
    },
  ]
}