variable "aws_region" {
  description = "AWS region."
  type        = string
  default     = "us-east-1"
}

variable "environment" {
  description = "Available values: dev, qa, prod."
  type        = string
  default     = "qa"
}

variable "service_name" {
  description = "Service name for resources."
  type        = string
  default     = "rds-refresh"
}

variable "application_family" {
  description = "Application family to which this project belongs."
  type        = string
  default     = "devops"
}

variable "trusted_principals" {
  description = "List of IAM users or roles which can assume the RDS restore role."
  type        = list(string)
  default = [
    "arn:aws:iam::086679231553:role/lambda-shared-lambda-rds-refresh-delete-intermediate-snapshots",
    "arn:aws:iam::086679231553:role/lambda-shared-lambda-rds-refresh-get-db-info",
    "arn:aws:iam::086679231553:role/lambda-shared-lambda-rds-refresh-manage-kafka-connector",
    "arn:aws:iam::086679231553:role/shared-rds-refresh-restore-task-role",
  ]
}

variable "role_session_duration" {
  description = "Session duration in seconds for the RDS restore role."
  type        = number
  default     = 10800
}

variable "sanitise_data_function_timeout" {
  description = "The timeout for the sanitise data function."
  type        = number
  default     = 900
}

variable "vpc_name" {
  description = "VPC name to deploy resources."
  type        = string
  default     = "prod"
}

variable "sanitise_data_lambda_registry_id" {
  description = "The registry ID for the sanitise data lambda image."
  type        = string
  default     = "437795906767"
}

variable "external_id" {
  description = "External ID for the trust policy."
  type        = string
  default     = "QNUoYXgqXSvhyCN7BzaxJM8fEL313SNz"
}

locals {
  sanitise_data_lambda_name = "lambda-sanitise-rds-data"
  tags = {
    environment        = var.environment
    application_family = var.application_family
    project            = var.service_name
    terraformed        = true
  }
}