variable "splunk_prefix" {
  type = string
}

variable "extra_principals" {
  description = "Additional principals that are granted direct access."
  type = list(string)
  default = []
}

# Appears you can't actually limit this.
#variable "allow_presigned" {
#  type = bool
#  description = "Allows the role to presign URLs to share with external users"
#}

variable "name" {
  description = "Suffix to end a lot of things, such as the role bucket name."
  type = string
}

variable "role_assumers" {
  description = "List of principals allowed to assume the role."
  type = list(string)
  default = []
}

variable "tags" {
  description = "Tags for the bucket and kms key."
  type = map
}

# ----------------------------------
# Below this line are variables inherited from higher levels, so they
# do not need to be explicitly passed to this module.
variable "standard_tags" { type = map }
variable "aws_account_id" { type = string }
variable "account_list" { type = list }
variable "aws_region" { type = string }
variable "aws_partition" { type = string }
variable "environment" { type = string }