1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

variable "analyzer_name" {
  description = "Name of the IAM Access Analyzer"
  type        = string
  default     = "org-access-analyzer"
}

variable "type" {
  description = "Analyzer type — ACCOUNT or ORGANIZATION"
  type        = string
  default     = "ORGANIZATION"
  validation {
    condition     = contains(["ACCOUNT", "ORGANIZATION"], var.type)
    error_message = "type must be ACCOUNT or ORGANIZATION."
  }
}

variable "archive_rules" {
  description = "Map of archive rule names to filter criteria for auto-archiving findings"
  type = map(object({
    filter = map(object({
      eq       = optional(list(string), null)
      neq      = optional(list(string), null)
      exists   = optional(bool, null)
      contains = optional(list(string), null)
    }))
  }))
  default = {}
}

variable "tags" {
  description = "Resource tags to apply to all resources"
  type        = map(string)
  default     = {}
}