variable "buckets" {
  description = "List of S3 buckets to create"
  type = list(object({
    name = string
    acl  = optional(string, "private")
    role = optional(string, null)
    versioning = optional(object({
      enabled = bool
    }), { enabled = false })
    cors = optional(object({
      enabled         = optional(bool, false)
      allowed_headers = optional(list(string), [])
      allowed_methods = optional(list(string), [])
      allowed_origins = optional(list(string), [])
      expose_headers  = optional(list(string), [])
      max_age_seconds = optional(number, 3600)
    }), { enabled = false })
  }))
}

variable "yc_service_accounts" {
  description = "Additional Yandex Cloud service accounts with optional folder roles and static keys"
  type = list(object({
    name                     = string
    description              = optional(string, "")
    folder_roles             = optional(list(string), [])
    create_static_access_key = optional(bool, true)
  }))
  default = []
}

variable "folder_id" {
  description = "Yandex Cloud folder ID"
  type        = string
}

variable "default_bucket_role" {
  description = "Default role for SA on bucket level (storage.uploader, storage.viewer, storage.editor)"
  type        = string
  default     = "storage.uploader"
}