variable "oidc_providers" {
  description = <<-EOT
    Map of OIDC identity providers to register.
    thumbprint_list can be omitted for providers whose certificates are
    managed automatically by AWS (e.g. EKS OIDC, token.actions.githubusercontent.com).
    EOT
  type = map(object({
    url             = string
    client_id_list  = list(string)
    thumbprint_list = optional(list(string), [])
  }))
  default = {}
}

variable "saml_providers" {
  description = "Map of SAML identity providers to register — key is the provider name, value is the XML metadata document"
  type = map(object({
    name              = string
    saml_metadata_doc = string
  }))
  default = {}
}

variable "tags" {
  description = "Resource tags to apply to all resources"
  type        = map(string)
  default     = {}
}