variable "analyzer_name" {
  description = "Name of the IAM Access Analyzer"
  type        = string
  default     = "org-access-analyzer"
}

variable "type" {
  description = "Analyzer type — ACCOUNT or ORGANIZATION"
  type        = string
  default     = "ORGANIZATION"
  validation {
    condition     = contains(["ACCOUNT", "ORGANIZATION"], var.type)
    error_message = "type must be ACCOUNT or ORGANIZATION."
  }
}

variable "archive_rules" {
  description = "Map of archive rule names to filter criteria for auto-archiving findings"
  type = map(object({
    filter = map(object({
      eq       = optional(list(string), null)
      neq      = optional(list(string), null)
      exists   = optional(bool, null)
      contains = optional(list(string), null)
    }))
  }))
  default = {}
}

variable "tags" {
  description = "Resource tags to apply to all resources"
  type        = map(string)
  default     = {}
}