variables.tf

variable "codebuild_endpoint_enable" {
  description = "Enable/Disable the codebuild VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "codebuild_private_dns_enable" {
  description = "Enable/Disable private dns on the codebuild endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

# codebuild-fips is only available in us-east-1, us-east-2, us-west-1 and us-west-2.
# So we have set it to be disabled by default until such time it's available everywhere.
# https://docs.aws.amazon.com/general/latest/gr/rande.html#codebuild_region
variable "codebuild_fips_endpoint_enable" {
  description = "Enable/Disable the codebuild-fips VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "codebuild_fips_private_dns_enable" {
  description = "Enable/Disable private dns on the codebuild-fips endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "dynamo_db_endpoint_enable" {
  description = "Enable/Disable the DynamoDB VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = true
}

variable "ec2_endpoint_enable" {
  description = "Enable/Disable the ec2 VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "ec2_private_dns_enable" {
  description = "Enable/Disable private dns on the ec2 endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "ec2messages_endpoint_enable" {
  description = "Enable/Disable the ec2messages VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "ec2messages_private_dns_enable" {
  description = "Enable/Disable private dns on the ec2messages endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "ecr_api_endpoint_enable" {
  description = "Enable/Disable the ecr.api VPC endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "ecr_api_private_dns_enable" {
  description = "Enable/Disable private dns on the ecr.api endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}


variable "ecr_dkr_endpoint_enable" {
  description = "Enable/Disable the ecr.dkr endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "ecr_dkr_private_dns_enable" {
  description = "Enable/Disable private dns on the ecr.dkr endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "elasticloadbalancing_endpoint_enable" {
  description = "Enable/Disable the elasticloadbalancing VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "elasticloadbalancing_private_dns_enable" {
  description = "Enable/Disable private dns on the elasticloadbalancing endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "enable_private_dns_list" {
  description = "List of Interface endpoints that should have private DNS enabled.  This should be a subset of the list for interface endpoints to provision."
  type        = list(string)
  default     = []
}

variable "endpoint_policies" {
  description = "A map of Endpoint polices to apply to associated VPC Endpoints. Each policy should be listed in a key matching its service (See gateway_endpoints and interface_endpoints)  Each policy must be between 100 and 10,240 characters. Services not given an explicit policy will use the terraform default for the service endpoint."
  type        = map
  default     = {}
}

variable "environment" {
  description = "Application environment for which this network is being created. one of: ('Development', 'Integration', 'PreProduction', 'Production', 'QA', 'Staging', 'Test')"
  type        = string
  default     = "Development"
}

variable "events_endpoint_enable" {
  description = "Enable/Disable the events VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "events_private_dns_enable" {
  description = "Enable/Disable private dns on the events endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "execute_api_endpoint_enable" {
  description = "Enable/Disable the execute-api VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "execute_api_private_dns_enable" {
  description = "Enable/Disable private dns on the execute-api endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}
variable "gateway_endpoints" {
  description = "List of gateway endpoints to enable. e.g. `[\"dynamodb\",\"s3\"]`. The complete list can be found here: https://docs.aws.amazon.com/vpc/latest/userguide/vpce-gateway.html . To date only `s3` and `dynamodb` exist. Also note for backward compatibiity, `s3_endpoint_enable` and `dynamo_db_endpoint_enable` default to `true` so if using this method, those need to be explicitly set to `false`."
  type        = list(string)
  default     = []
}

variable "interface_endpoints" {
  description = "List of interface endpoints to enable. e.g. `[\"codebuild\",\"ec2\"]`. The complete list can be found here: https://docs.aws.amazon.com/vpc/latest/userguide/vpce-interface.html."
  type        = list(string)
  default     = []
}

variable "kinesis_streams_endpoint_enable" {
  description = "Enable/Disable the kinesis-streams VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "kinesis_streams_private_dns_enable" {
  description = "Enable/Disable private dns on the kinesis-streams endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "kms_endpoint_enable" {
  description = "Enable/Disable the kms VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "kms_private_dns_enable" {
  description = "Enable/Disable private dns on the kms endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "logs_endpoint_enable" {
  description = "Enable/Disable the logs VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "logs_private_dns_enable" {
  description = "Enable/Disable private dns on the logs endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "monitoring_endpoint_enable" {
  description = "Enable/Disable the monitoring VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "monitoring_private_dns_enable" {
  description = "Enable/Disable private dns on the monitoring endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "route_tables" {
  description = "List of Route Table ID's for each AZ"
  type        = list(string)
  default     = []
}

variable "s3_endpoint_enable" {
  description = "Enable/Disable the S3 VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = true
}

variable "sagemaker_runtime_endpoint_enable" {
  description = "Enable/Disable the sagemaker.runtime VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "sagemaker_runtime_private_dns_enable" {
  description = "Enable/Disable private dns on the sagemaker.runtime endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "secretsmanager_endpoint_enable" {
  description = "Enable/Disable the secretsmanager VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "secretsmanager_private_dns_enable" {
  description = "Enable/Disable private dns on the secretsmanager endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "security_groups" {
  description = "List of Security Group ID's for the endpoints."
  type        = list(string)
  default     = []
}

variable "servicecatalog_endpoint_enable" {
  description = "Enable/Disable the servicecatalog VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "servicecatalog_private_dns_enable" {
  description = "Enable/Disable private dns on the servicecatalog endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

# sns
variable "sns_endpoint_enable" {
  description = "Enable/Disable the sns VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "sns_private_dns_enable" {
  description = "Enable/Disable private dns on the sns endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

# sqs
variable "sqs_endpoint_enable" {
  description = "Enable/Disable the sqs VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "sqs_private_dns_enable" {
  description = "Enable/Disable private dns on the sqs endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

# ssm
variable "ssm_endpoint_enable" {
  description = "Enable/Disable the ssm VPC Endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}

variable "ssm_private_dns_enable" {
  description = "Enable/Disable private dns on the ssm endpoint. Allowed values: true, false"
  type        = bool
  default     = false
}
variable "subnets" {
  description = "List of Subnets to assoicate with Inteface endpoints."
  type        = list(string)
  default     = []
}

variable "tags" {
  description = "Custom tags to apply to all resources."
  type        = map(string)
  default     = {}
}

variable "vpc_id" {
  description = "Provide Virtual Private Cloud ID"
  type        = string
}