variable "aws_region" {
  default     = "us-east-1"
  description = "AWS region"
}

variable "environment" {
  description = "Available values:  dev, qa, prod."
  default     = "prod"
}

variable "aws_managed_policy_attachments" {
  description = "List of AWS-managed policies to attach to generic IAM group"
  default = [
    "prod-break-glass-restrict-direct-access-policy",
  ]
}

variable "s3_buckets_to_read_access" {
  type        = map(string)
  description = "Map of S3 buckets and paths within that bucket to which this group will receive read access"
  default = {
    "qa-lambda-neo4j-monitor" : "*",
    "prod-lambda-neo4j-monitor" : "*",
    "qa-cucumbers" : "*",
    "cucumbers" : "*",
    "qa-orcd-cypress-tests" : "*",
    "prod-orcd-cdn" : "*",
    "qa-orcd-cdn" : "*",
  }
}

variable "iam_roles_to_access" {
  type        = list(string)
  description = "List of IAM role ARNs to grant access to users in the shared engineering group"
  default = [
    "arn:aws:iam::031099521156:role/generic-engineer-role",
    "arn:aws:iam::086679231553:role/generic-engineer-role",
    "arn:aws:iam::591204808501:role/generic-engineer-role",
    "arn:aws:iam::285943604611:role/generic-engineer-role",
    "arn:aws:iam::103233932089:role/generic-engineer-role",
    "arn:aws:iam::989790945997:role/generic-engineer-role",
    "arn:aws:iam::375914681009:role/generic-engineer-role",
    "arn:aws:iam::285943604611:role/generic-engineer-role",
    "arn:aws:iam::737325105821:role/generic-engineer-role",
    "arn:aws:iam::619719722105:role/generic-engineer-role",
    "arn:aws:iam::926734670777:role/generic-engineer-role",
    "arn:aws:iam::311141540202:role/generic-engineer-role",
    "arn:aws:iam::710271914708:role/generic-engineer-role",
    "arn:aws:iam::699475937692:role/generic-engineer-role",
    "arn:aws:iam::811473064144:role/generic-engineer-role",
    "arn:aws:iam::997286397029:role/generic-engineer-role",
    "arn:aws:iam::969009837416:role/generic-engineer-role",
    "arn:aws:iam::613871678587:role/generic-engineer-role",
    "arn:aws:iam::230315258045:role/generic-engineer-role",
    "arn:aws:iam::918817604416:role/generic-engineer-role",
    "arn:aws:iam::718729873097:role/generic-engineer-role",
    "arn:aws:iam::799833541840:role/generic-engineer-role",
    "arn:aws:iam::981599956623:role/generic-engineer-role",
    "arn:aws:iam::504436705349:role/generic-engineer-role",
    "arn:aws:iam::290365479392:role/generic-engineer-role",
    "arn:aws:iam::734458723522:role/generic-engineer-role",
  ]
}