variable "delegated_admin_account_id" {
  description = "Account ID to designate as Inspector v2 delegated administrator"
  type        = string
  default     = null
}

variable "member_accounts" {
  description = "Map of logical key to member account IDs to enable Inspector on"
  type        = map(string)
  default     = {}
}

variable "enable_ec2_scanning" {
  description = "Enable EC2 scanning for members"
  type        = bool
  default     = true
}

variable "enable_ecr_scanning" {
  description = "Enable ECR container image scanning for members"
  type        = bool
  default     = true
}

variable "enable_lambda_scanning" {
  description = "Enable Lambda function scanning for members"
  type        = bool
  default     = true
}

variable "filter_criteria" {
  description = "Map of finding filter criteria for auto-suppression rules"
  type = map(object({
    action          = string # NONE or SUPPRESS
    description     = optional(string, "")
    filter_criteria = optional(any, null)
  }))
  default = {}
}

variable "tags" {
  description = "Resource tags to apply to all resources"
  type        = map(string)
  default     = {}
}