variables.tf

variable "target_ou_id" {
  description = "id of the organization unit to attach the policy to"
  type        = string
}

variable "require_imdsv2" {
  description = "This will only allow ec2 instances to be created with IMDSv2 enabled"
  default     = true
  type        = bool
}

variable "deny_imds_change" {
  description = "Disallows changes to IMDS on instances"
  default     = true
  type        = bool
}

variable "require_ebs_encryption" {
  description = "Requires EBS volumes and snapshots to be encrypted"
  default     = true
  type        = bool
}

variable "require_s3_object_encryption" {
  description = "Requires s3 object encryption"
  default     = true
  type        = bool
}

variable "require_s3_bucket_https" {
  description = "Requires https on s3 buckets"
  default     = true
  type        = bool
}

variable "deny_s3_public_access" {
  description = "Denies public access to s3 buckets"
  default     = true
  type        = bool
}

variable "require_rds_encryption" {
  description = "Requires RDS encryption"
  default     = true
  type        = bool
}