variables.tf

variable "name" {
  description = "Name for the resources created"
  type = string
}

variable "secrets" {
  description = "the secrets to rotate"
  type = map(object({arn: string, id: string, days: number}))
}

variable "rotation_strategy" {
  description = <<EOT
Specifies how the secret is rotated, either by updating credentials for the user itself (single) or by using a
superuser's credentials to change another user's credentials (multiuser).
EOT
  type        = string
  default     = "single"
}

variable "db_cluster_identifier" {
  description = "The DB cluster identifier"
  type        = string
}

variable "tags" {
  description = "Tags to use for created resources"
  type        = map(string)
  default     = {}
}

variable "master_secret_arn" {
  description = "The superuser credentials used to update another secret in the multiuser rotation strategy."
  type        = string
  default     = null
}

variable "rotation_lambda_handler" {
  description = "An optional lambda handler name; useful integration with for certain layer providers"
  type        = string
  default     = null
}

variable "rotation_lambda_env_variables" {
  description = "Optional environment variables for the rotation lambda; useful for integration with for certain layer providers"
  type        = map(string)
  default     = {}
}

variable "rotation_lambda_policy_jsons" {
  description = "Additional policies to add to the rotation lambda; useful for integration with layer providers"
  type        = list(string)
  default     = []
}

variable "rotation_lambda_layers" {
  description = "Optional layers for the rotation lambda."
  type        = list(string)
  default     = null
}

variable "rotation_lambda_subnet_ids" {
  description = "The VPC subnets that the rotation lambda runs in. Required for secret rotation."
  type        = list(string)
  default     = []
}

variable "rotation_lambda_vpc_id" {
  description = "The VPC that the secret rotation lambda runs in. Required for secret rotation."
  type        = string
  default     = null
}

variable "rotation_application_version" {
  description = "The semantic version that the lambda will use"
  type        = string
  default     = "1.1.447"
}

variable "db_security_group_id" {
  description = "The security group ID for the database. Required for secret rotation."
  type        = string
  default     = null
}

variable "recreate_missing_package" {
  description = "Whether to recreate missing Lambda package if it is missing locally or not"
  type        = bool
  default     = true
}

variable "role_permissions_boundary" {
  description = "Optional permissions boundary for rotation lambda IAM role."
  type        = string
  default     = null
}

variable "aws_account_id" {
  type = string
}