variable "application_family" {
  default = "permissions-platform"
  type    = string
}

variable "aws_region" {
  description = "AWS region."
  type        = string
  default     = "us-east-1"
}

variable "environment" {
  description = "Available values: dev, qa, prod."
  type        = string
  default     = "qa"
}

variable "copy_into_principals" {
  description = "From which AWS account to allow copying into this vault"
  default     = ["arn:aws:iam::031099521156:root"]
  type        = list(string)
}

variable "refresh_table_name" {
  description = "Name of the dynamodb table to delete and restore the backup to"
  default     = "qa_pp_identity"
  type        = string
}

variable "service_name" {
  description = "The name of the associated application."
  default     = "pp-dynamodb-refresh"
  type        = string
}

variable "backup_vault_name" {
  default = "pp-identity-dynamodb-backup-vault"
}

variable "refresh_backfill_bucket" {
  default = "qa-pdp-backfill"
}

variable "refresh_backfill_manifest_file_key" {
  default = "pdp_qa_refresh/manifest.json"
}

variable "dynamodb_stream_consumer_lambda_name" {
  description = "name of the lambda function that consumes the pp_identity table's stream"
  default     = "qa-lambda-pp-audit-ddbs-kafka-pp-identity"
}

variable "notifications_slack_email_address" {
  description = "Email address for Slack notifications about the DynamoDB PP Identity refresh step function"
  type        = string
  default     = "permissions-platform-aaaajhyag52kcxmlnr233oj7xy@sonymusic.org.slack.com"
}

locals {
  tags = {
    environment        = var.environment
    service_name       = var.service_name
    application_family = var.application_family
    terraformed        = true
  }
}