# Variables ====================================================================

variable "features" {
  description = "GuardDuty feature configuration for the member account"
  type = object({
    s3_data_events         = optional(bool, false)
    eks_audit_logs         = optional(bool, false)
    ebs_malware_protection = optional(bool, false)
    rds_login_events       = optional(bool, false)
    lambda_network_logs    = optional(bool, false)
    eks_runtime_monitoring = optional(bool, false)
    ai_protection          = optional(bool, false)
    ai_analyst             = optional(bool, false)
    runtime_monitoring = optional(object({
      enabled                      = optional(bool, false)
      eks_addon_management         = optional(bool, false)
      ecs_fargate_agent_management = optional(bool, false)
      ec2_agent_management         = optional(bool, false)
    }), {})
  })
  default = {}
}