variables.tf

variable "aws_default_region" {
  description = "AWS Default Region to use. Defaults to us-east-1."
  type        = string
  default     = "us-east-1"
}

variable "hosted_zone_name" {
  description = "The name of the Hosted Zone in Route53 where the created Hex Registry will be routed. This value is required."
  type        = string
}

variable "registry_domain_name" {
  description = "The domain name for the created Hex Registry. This value is required."
  type        = string
}

variable "auth_keys_str" {
  # This value, while being sensitive, is not directly marked as sensitive.
  # Because we use it in a for_each value, terraform does not allow it to be marked as sensitive.
  # This is regardless of whether or not value is actually used in the for_each - for example, we use hashes in the for_each
  # to not directly reference the key value in the resource name.
  description = "Auth Keys that can be used for authentication with the registry. These should be given in a single string, in a comma-separated format (so that they may be passed via environment variables). These will be set within a CloudFront KeyValueStore, which will be accessed by the authentication function on requests. This defaults to empty, meaning that there is no authentication check for the registry."
  type        = string
  default     = ""
}

variable "registry_bucket_prefix" {
  description = "The prefix of the name of the bucket to be used for the registry. This defaults to empty. It will be auto-generated by Terraform if not provided."
  type        = string
  default     = ""
}

variable "registry_bucket_tags" {
  description = "The tags to add to the bucket to be used for the registry. This defaults to an empty map."
  type        = map(string)
  default     = {}
}

variable "enable_cloudfront_function_logging" {
  description = "A flag to enable logging on the Auth Key Validation CloudFront Function. Defaults to false."
  type        = bool
  default     = false
}