shaikhsalman's picture
refactor: merged structure - model at center, DevSecOps wrapped around it
9d4d5c7 verified
# VPC Module Variables
variable "name" {
description = "VPC name prefix"
type = string
}
variable "cidr_block" {
description = "VPC CIDR block"
type = string
default = "10.0.0.0/16"
}
variable "public_subnet_cidrs" {
description = "List of public subnet CIDRs"
type = list(string)
default = ["10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24"]
}
variable "private_subnet_cidrs" {
description = "List of private subnet CIDRs"
type = list(string)
default = ["10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24"]
}
variable "database_subnet_cidrs" {
description = "List of database subnet CIDRs"
type = list(string)
default = ["10.0.201.0/24", "10.0.202.0/24", "10.0.203.0/24"]
}
variable "nat_gateway_count" {
description = "Number of NAT Gateways (1 per AZ for HA)"
type = number
default = 3
}
variable "enable_ipv6" {
description = "Enable IPv6 dual-stack"
type = bool
default = false
}
variable "eks_cluster_name" {
description = "EKS cluster name for subnet tags"
type = string
}
variable "flow_log_s3_arn" {
description = "S3 bucket ARN for VPC flow logs"
type = string
}
variable "flow_log_retention_days" {
description = "CloudWatch flow log retention in days"
type = number
default = 90
}
variable "tags" {
description = "Common tags"
type = map(string)
default = {}
}