# Shared constants =============================================================
# Central registry for constants and lookup sets used across policy evaluation.

package common.definitions

aws_cred_fields := ["access_key", "secret_key"] # sensitive fields in provider block
common_use_ports := [20, 21, 22, 23, 25, 110, 135, 143, 445, 1433, 1434, 3000, 3306, 3389, 4333, 5000, 5432, 5500, 5601, 8080, 8088, 8888, 9200, 9300]
management_ports := [22, 3389] # do not open to public traffic
approved_regions := {"us-west-2", "us-east-1", "ap-south-1"}
naming_pattern := `^[a-z][a-z0-9]*(-[a-z0-9]+)*$` # resource names use kebab-case
mandatory_provider_tags := ["managed-by"]
mandatory_baseline_tags := {
	"stack-name": ["*"],
	"application-name": ["*"],
	"project": ["DC-Migration-Project"],
	"cost-center-opex": ["271"],
	"cost-center-capex": ["000"],
	"environment": ["prod", "pre-prod", "non-prod", "staging", "qa", "dev", "sandbox"],
	"data-classification": ["*"],
	"availability-tier": ["*"],
	"app-owner": ["*"],
	"team": ["*"],
	"assignment-group": ["*"],
	"owner": ["*"],
	"business-unit": ["Infrastructure and Planning"],
	"managed-by": ["terraform"],
}