variables.tf

# ------------------------------------------------------------------------------
# REQUIRED PARAMETERS
#
# You must provide a value for each of these parameters.
# ------------------------------------------------------------------------------

variable "cvesync_lambda_s3_bucket" {
  description = "The name of the S3 bucket where the cyhy-cvesync Lambda deployment package is stored."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_s3_bucket" {
  description = "The name of the S3 bucket where the cyhy-kevsync Lambda deployment package is stored."
  nullable    = false
  type        = string
}

variable "ssh_public_key_path" {
  description = "The local path to store the SSH public key used to access the EC2 instance."
  nullable    = false
  type        = string
}

# ------------------------------------------------------------------------------
# OPTIONAL PARAMETERS
#
# These parameters have reasonable defaults.
# ------------------------------------------------------------------------------

variable "aws_availability_zones" {
  default     = ["us-east-1a", "us-east-1b", "us-east-1c"]
  description = "The list of AWS availability zones to deploy into (e.g. [\"us-east-1a\", \"us-east-1b\", \"us-east-1c\"]."
  nullable    = false
  type        = list(string)
}

variable "aws_region" {
  default     = "us-east-1"
  description = "The AWS region to deploy into (e.g. \"us-east-1\")."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_cloudwatch_logs_retention_in_days" {
  default     = 90
  description = "The number of days to retain CloudWatch logs for the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = number
}

variable "cvesync_lambda_config_ssm_key" {
  default     = "/cyhy-cvesync/config"
  description = "The SSM key that contains the configuration to use for the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_description" {
  default     = "Syncs CVE data to the database in the Cyber Hygiene account."
  description = "The description to associate with the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_env_variables" {
  default     = {}
  description = "The environment variables to set for the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = map(string)
}

variable "cvesync_lambda_handler" {
  default     = "lambda_handler.handler"
  description = "The handler to use for the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_memory" {
  default     = 2048
  description = "The amount of memory (in MB) to allocate to the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = number
}

variable "cvesync_lambda_name" {
  default     = "cyhy-cvesync"
  description = "The name to assign the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_runtime" {
  default     = "python3.12"
  description = "The runtime to use for the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_s3_key" {
  default     = "cyhy-cvesync-lambda.zip"
  description = "The key of the cyhy-cvesync Lambda deployment package in the S3 bucket."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_schedule" {
  default     = "cron(0 5 * * ? *)"
  description = "The EventBridge expression that represents when to run the Lambda function that syncs CVE data to the database in the Cyber Hygiene account.  The default value indicates that the Lambda will run every day at 5:00 AM UTC.  See <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-scheduled-rule-pattern.html> for details on EventBridge expression syntax."
  nullable    = false
  type        = string
}

variable "cvesync_lambda_timeout" {
  default     = 900
  description = "The timeout (in seconds) to use for the Lambda function that syncs CVE data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = number
}

variable "db_cluster_size" {
  default     = 3
  description = "The number of instances to use for the DocumentDB cluster."
  nullable    = false
  type        = number
}

variable "db_instance_class" {
  default     = "db.r5.large"
  description = "The instance class to use for the DocumentDB cluster."
  nullable    = false
  type        = string
}

variable "db_name" {
  default     = "cyhy"
  description = "The name of the database to create."
  nullable    = false
  type        = string
}

variable "db_password" {
  description = "The master password for the database user."
  nullable    = false
  type        = string
}

variable "db_port" {
  default     = 27017
  description = "The port to use for the DocumentDB cluster."
  nullable    = false
  type        = number
}

variable "db_username" {
  description = "The master username for the database user."
  nullable    = false
  type        = string
}

variable "ec2_trusted_ingress_cidr_blocks" {
  default     = []
  description = "The CIDR blocks to allow access to the EC2 instance."
  nullable    = false
  type        = list(string)
}

variable "kevsync_lambda_cloudwatch_logs_retention_in_days" {
  default     = 90
  description = "The number of days to retain CloudWatch logs for the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = number
}

variable "kevsync_lambda_config_ssm_key" {
  default     = "/cyhy-kevsync/config"
  description = "The SSM key that contains the configuration to use for the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_description" {
  default     = "Syncs KEV data to the database in the Cyber Hygiene account."
  description = "The description to associate with the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_env_variables" {
  default     = {}
  description = "The environment variables to set for the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = map(string)
}

variable "kevsync_lambda_handler" {
  default     = "lambda_handler.handler"
  description = "The handler to use for the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_name" {
  default     = "cyhy-kevsync"
  description = "The name to assign the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_runtime" {
  default     = "python3.12"
  description = "The runtime to use for the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_s3_key" {
  default     = "cyhy-kevsync-lambda.zip"
  description = "The key of the cyhy-kevsync Lambda deployment package in the S3 bucket."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_schedule" {
  default     = "cron(0 6 * * ? *)"
  description = "The EventBridge expression that represents when to run the Lambda function that syncs KEV data to the database in the Cyber Hygiene account.  The default value indicates that the Lambda will run every day at 6:00 AM UTC.  See <https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-scheduled-rule-pattern.html> for details on EventBridge expression syntax."
  nullable    = false
  type        = string
}

variable "kevsync_lambda_timeout" {
  default     = 300
  description = "The timeout (in seconds) to use for the Lambda function that syncs KEV data to the database in the Cyber Hygiene account."
  nullable    = false
  type        = number
}

variable "tags" {
  default     = {}
  description = "Tags to apply to all AWS resources created."
  nullable    = false
  type        = map(string)
}

variable "vpc_cidr_block" {
  default     = "10.0.0.0/16"
  description = "The CIDR block to use for the VPC (e.g. \"10.0.0.0/16\")."
  nullable    = false
  type        = string
}