variable "aws_account_id" {
  type        = string
  description = "Expected AWS account ID."
}

variable "aws_region" {
  type        = string
  description = "Expected AWS provider region."
}

variable "hosted_zone_name" {
  type        = string
  description = "Public hosted zone DNS name."
}

variable "expected_hosted_zone_id" {
  type        = string
  description = "Pinned hosted zone ID."
}

variable "certificate_domain" {
  type        = string
  description = "Domain used to resolve the expected certificate."
}

variable "expected_certificate_arn" {
  type        = string
  description = "Pinned ACM certificate ARN."
}

variable "expected_github_oidc_provider_arn" {
  type        = string
  description = "Pinned account-global GitHub OIDC provider ARN."
}

variable "cache_policy_name" {
  type        = string
  description = "AWS managed CloudFront cache policy name."
  default     = "Managed-CachingOptimized"
}

variable "expected_cache_policy_id" {
  type        = string
  description = "Pinned AWS managed CloudFront cache policy ID."
  default     = "658327ea-f89d-4fab-a63d-7e88639e58f6"
}