1
0
Files
terraform.examples/modules/security_identity_compliance/secretsmanager-2025/variables.tf
T

89 lines
2.0 KiB
Terraform

variable "name" {
description = "name of secret"
type = string
default = null
}
variable "description" {
description = "description of secret"
type = string
default = null
}
variable "policy" {
description = "access policy to the secret"
type = string
default = null
}
variable "secret" {
description = "the secret you want to store"
type = any
default = null
}
variable "recovery_window_in_days" {
description = "Number of days that AWS Secrets Manager waits before it can delete the secret"
type = number
default = 30
}
variable "tags" {
description = "(Optional) A mapping of tags to assign to the AWS Secrets Manager."
type = map(string)
default = {}
}
variable "generate_secret" {
type = bool
default = false
description = "If set to true, a secure password will be generated and saved."
}
variable "kms_key_id" {
type = string
default = null
description = "Custom kms key id. If not specified, the default key aws/secretmanager key will be used."
}
variable "secret_use_special_char" {
type = bool
default = true
description = "Set false to not use special characters"
}
variable "secret_version" {
type = number
description = "Secret version, default to 1. For subsequent update, set it to more than 1."
default = 1
}
variable "auto-rotation-days" {
type = number
description = "Days to auto rotate secret"
default = null
}
variable "auto-rotation-schedule-expression" {
type = string
description = "Schedule expression for auto secret rotation"
default = null
}
variable "rotation-lambda-arn" {
type = string
description = "ARN of lambda secret rotation function"
default = null
}
variable "enable-auto-rotation" {
type = bool
description = "Set true to enable auto rotation"
default = false
}
variable "rotate-immediately" {
type = bool
default = false
description = "Rotate secret immediately"
}