variables.tf

variable "groups" {
  description = "Schema list of IAM groups"
  type = list(object({
    name       = string
    path       = string
    user_names = list(string)
    inline_policies = list(object({
      name   = string
      policy = string
    }))
    managed_policies = list(object({
      name = string
      arn  = optional(string)
    }))
  }))
  default = []
}

variable "policies" {
  description = "Schema list of policy objects"
  type = list(object({
    description = string
    name        = string
    path        = string
    policy      = string
    tags        = map(string)
  }))
  default = []
}

variable "policy_documents" {
  description = "Schema list of IAM policy documents"
  type        = any
  # Using `any` because template_vars may have differing element types, which generates
  # an error when terraform converts the values to a list. However, the real type is:
  # type = list(object({
  #   name           = string
  #   template       = string
  #   template_paths = list(string)
  #   template_vars  = any
  # }))
  default = []
}

variable "roles" {
  description = "Schema list of IAM roles"
  type = list(object({
    name                  = string
    assume_role_policy    = string
    description           = string
    force_detach_policies = bool
    instance_profile = object({
      name = string
      path = string
    })
    max_session_duration = number
    path                 = string
    permissions_boundary = string
    tags                 = map(string)
    inline_policies = list(object({
      name   = string
      policy = string
    }))
    managed_policies = list(object({
      name = string
      arn  = optional(string)
    }))
  }))
  default = []
}

variable "users" {
  description = "Schema list of IAM users"
  type = list(object({
    name                 = string
    force_destroy        = bool
    path                 = string
    permissions_boundary = string
    tags                 = map(string)
    inline_policies = list(object({
      name   = string
      policy = string
    }))
    managed_policies = list(object({
      name = string
      arn  = optional(string)
    }))
    access_keys = list(object({
      name    = string
      status  = string
      pgp_key = string
    }))
  }))
  default = []
}