variables.tf

variable "amazon_side_asn" {
  description = "Private Autonomous System Number (ASN) for the Amazon side of a BGP session (range is 64512 to 65534 for 16-bit ASNs and 4200000000 to 4294967294 for 32-bit ASN)"
  type        = number
  default     = 64512
}

variable "auto_accept_shared_attachments" {
  description = "Whether resource attachment requests are automatically accepted (valid values: disable, enable)"
  type        = string
  default     = "disable"
  validation {
    condition     = contains(["enable", "disable"], var.auto_accept_shared_attachments)
    error_message = "`auto_accept_shared_attachments` must be one of: \"enable\", \"disable\"."
  }
}

variable "default_route_table_association" {
  description = "Whether resource attachments are automatically associated with the default association route table (valid values: disable, enable)"
  type        = string
  default     = "enable"
  validation {
    condition     = contains(["enable", "disable"], var.default_route_table_association)
    error_message = "`default_route_table_association` must be one of: \"enable\", \"disable\"."
  }
}

variable "default_route_table_propagation" {
  description = "Whether resource attachments automatically propagate routes to the default propagation route table (valid values: disable, enable)"
  type        = string
  default     = "enable"
  validation {
    condition     = contains(["enable", "disable"], var.default_route_table_propagation)
    error_message = "`default_route_table_propagation` must be one of: \"enable\", \"disable\"."
  }
}

variable "description" {
  description = "Description of the EC2 Transit Gateway"
  type        = string
  default     = null
}

variable "dns_support" {
  description = "Whether DNS support is enabled (valid values: disable, enable)"
  type        = string
  default     = "enable"
  validation {
    condition     = contains(["enable", "disable"], var.dns_support)
    error_message = "`dns_support` must be one of: \"enable\", \"disable\"."
  }
}

variable "security_group_referencing_support" {
  description = "Whether Security Group Referencing Support is enabled. Valid values: disable, enable"
  type        = string
  default     = "enable"
  validation {
    condition     = contains(["enable", "disable"], var.security_group_referencing_support)
    error_message = "`security_group_referencing_support` must be one of: \"enable\", \"disable\"."
  }
}

variable "tags" {
  description = "Map of tags to apply to the TGW and associated resources"
  type        = map(string)
  default     = {}
}

variable "vpn_ecmp_support" {
  description = "Whether VPN Equal Cost Multipath Protocol support is enabled (valid values: disable, enable)"
  type        = string
  default     = "disable"
  validation {
    condition     = contains(["enable", "disable"], var.vpn_ecmp_support)
    error_message = "`vpn_ecmp_support` must be one of: \"enable\", \"disable\"."
  }
}

variable "prefix_list_references" {
  description = "List of TGW prefix list references to add to TGW route tables"
  type = list(object({
    # `name` used as for_each key
    name           = string
    prefix_list_id = string
    # name from `route_tables` or id of a pre-existing route table
    transit_gateway_route_table = string

    blackhole           = optional(bool, false)
    default_route_table = optional(bool, false)
    # name from `vpc_attachments` or id of a pre-existing tgw attachment
    transit_gateway_attachment = optional(string)
  }))
  default = []
}

variable "route_tables" {
  description = "List of TGW route tables to create with the transit gateway"
  type = list(object({
    # `name` used as for_each key
    name = string
    tags = map(string)
  }))
  default = []
}

variable "routes" {
  description = "List of TGW routes to add to TGW route tables"
  type = list(object({
    # `name` used as for_each key
    name                   = string
    blackhole              = bool
    default_route_table    = bool
    destination_cidr_block = string
    # name from `vpc_attachments` or id of a pre-existing tgw attachment
    transit_gateway_attachment = string
    # name from `route_tables` or id of a pre-existing route table
    transit_gateway_route_table = string
  }))
  default = []
}

variable "vpc_attachments" {
  description = "List of VPC attachments to create with the transit gateway"
  type = list(object({
    # `name` used as for_each key
    name                   = string
    subnet_ids             = list(string)
    appliance_mode_support = string
    dns_support            = string
    ipv6_support           = string
    tags                   = map(string)
    vpc_routes = optional(list(object({
      # `name` is used as for_each key
      name                        = string
      route_table_id              = string
      destination_cidr_block      = optional(string)
      destination_ipv6_cidr_block = optional(string)
      destination_prefix_list_id  = optional(string)
    })), [])
    transit_gateway_default_route_table_association = bool
    transit_gateway_default_route_table_propagation = bool
    # name from `route_tables` or id of a pre-existing route table
    transit_gateway_route_table_association = string
    # list of route table names from `route_tables` or ids of pre-existing route tables
    transit_gateway_route_table_propagations = list(string)
  }))
  default = []
}