resource "random_integer" "suffix" {
  min     = 1000
  max     = 9999
}

resource "aws_s3_bucket" "state" {
  bucket        = "tfstate-${var.customer-name}-${var.environment}-${random_integer.suffix.result}"
  force_destroy = true

  tags = var.default-tags

  versioning {
    enabled = true
  }

  server_side_encryption_configuration {
    rule {
      apply_server_side_encryption_by_default {
        sse_algorithm = "AES256"
      }
    }
  }
}

resource "aws_dynamodb_table" "statelock" {
  name           = "tflock-${var.custoemr-name}-${var.environment}-${random_integer.suffix.result}"
  read_capacity  = 10
  write_capacity = 10
  hash_key       = "LockID"

  attribute {
    name = "LockID"
    type = "S"
  }

  tags = var.default-tags
}

output "state_bucket" {
  value = aws_s3_bucket.state.bucket
}

output "lock_db" {
  value = aws_dynamodb_table.statelock.name
}