variable "name" {
  description = "name of secret"
  type        = string
  default     = null
}

variable "description" {
  description = "description of secret"
  type        = string
  default     = null
}

variable "policy" {
  description = "access policy to the secret"
  type        = string
  default     = null
}

variable "secret" {
  description = "the secret you want to store"
  type        = any
  default     = null
}

variable "recovery_window_in_days" {
  description = "Number of days that AWS Secrets Manager waits before it can delete the secret"
  type        = number
  default     = 30
}

variable "tags" {
  description = "(Optional) A mapping of tags to assign to the AWS Secrets Manager."
  type        = map(string)
  default     = {}
}

variable "generate_secret" {
  type        = bool
  default     = false
  description = "If set to true, a secure password will be generated and saved."
}

variable "kms_key_id" {
  type        = string
  default     = null
  description = "Custom kms key id. If not specified, the default key aws/secretmanager key will be used."
}

variable "secret_use_special_char" {
  type        = bool
  default     = true
  description = "Set false to not use special characters"
}

variable "secret_version" {
  type        = number
  description = "Secret version, default to 1. For subsequent update, set it to more than 1."
  default     = 1
}

variable "auto-rotation-days" {
  type        = number
  description = "Days to auto rotate secret"
  default     = null
}

variable "auto-rotation-schedule-expression" {
  type        = string
  description = "Schedule expression for auto secret rotation"
  default     = null
}

variable "rotation-lambda-arn" {
  type        = string
  description = "ARN of lambda secret rotation function"
  default     = null
}

variable "enable-auto-rotation" {
  type        = bool
  description = "Set true to enable auto rotation"
  default     = false
}

variable "rotate-immediately" {
  type        = bool
  default     = false
  description = "Rotate secret immediately"
}