2026-09-10 19:15:09 -04:00
|
|
|
variable "environment" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Environment name."
|
|
|
|
|
|
|
|
|
|
validation {
|
|
|
|
|
condition = contains(["dev", "staging"], var.environment)
|
|
|
|
|
error_message = "environment must be dev or staging."
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "adoption_complete" {
|
|
|
|
|
type = bool
|
2026-09-11 13:40:14 -04:00
|
|
|
description = "Switches ownership tags and drops the auto-delete helper grant from the bucket policy."
|
2026-09-10 19:15:09 -04:00
|
|
|
default = false
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "aws_account_id" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "AWS account containing the resources."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "aws_region" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "AWS region used by the environment."
|
|
|
|
|
}
|
|
|
|
|
|
2026-09-18 14:30:20 -04:00
|
|
|
variable "github_repo" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "owner/name used in OIDC job_workflow_ref."
|
|
|
|
|
}
|
|
|
|
|
|
2026-09-10 19:15:09 -04:00
|
|
|
variable "bucket_name" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Existing private S3 origin bucket."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "distribution_id" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Existing CloudFront distribution ID."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "origin_access_control_name" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Exact existing CloudFront OAC name."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "origin_access_control_description" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Exact existing CloudFront OAC description."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "origin_id" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Exact origin ID in the existing distribution."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "function_name" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Existing CloudFront Function name."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "domain_name" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Site hostname."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "hosted_zone_id" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Inventory-verified hosted zone ID."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "certificate_arn" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Inventory-verified ACM certificate ARN."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "cache_policy_id" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Inventory-verified AWS managed cache policy ID."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "github_oidc_provider_arn" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Inventory-verified GitHub OIDC provider ARN."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "deploy_role_name" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Existing GitHub deployment role name."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "deploy_inline_policy_name" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Existing generated inline policy name."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "deploy_permissions_boundary_arn" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Exact permissions boundary attached before import."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "cloudformation_stack_name" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Legacy CloudFormation stack used by the pre-adoption policy."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "bucket_auto_delete_helper_role_arn" {
|
|
|
|
|
type = string
|
|
|
|
|
description = "Exact legacy S3 auto-delete helper role ARN."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "pre_adoption_tags" {
|
|
|
|
|
type = map(string)
|
|
|
|
|
description = "Exact tags present while CloudFormation still owns the resources."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "pre_adoption_bucket_tags" {
|
|
|
|
|
type = map(string)
|
|
|
|
|
description = "Exact pre-adoption S3 tags, including the CDK auto-delete marker."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "ownership_tags" {
|
|
|
|
|
type = map(string)
|
|
|
|
|
description = "Tags applied by the controlled ownership transfer."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "pre_adoption_deploy_role_tags" {
|
|
|
|
|
type = map(string)
|
|
|
|
|
description = "Exact pre-adoption deploy-role tags, including its HCP manager tag."
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
variable "post_adoption_deploy_role_tags" {
|
|
|
|
|
type = map(string)
|
|
|
|
|
description = "Exact post-adoption deploy-role tags, preserving its HCP manager tag."
|
|
|
|
|
}
|