| 1 | variable "name" { |
| 2 | type = string |
| 3 | } |
| 4 | |
| 5 | variable "resource_group_name" { |
| 6 | type = string |
| 7 | } |
| 8 | |
| 9 | variable "location" { |
| 10 | type = string |
| 11 | } |
| 12 | |
| 13 | variable "tenant_id" { |
| 14 | type = string |
| 15 | } |
| 16 | |
| 17 | variable "tags" { |
| 18 | type = map(string) |
| 19 | default = {} |
| 20 | } |
| 21 | |
| 22 | variable "purge_protection_enabled" { |
| 23 | type = bool |
| 24 | description = "Protect production secrets from immediate permanent deletion." |
| 25 | default = true |
| 26 | } |
| 27 | |
| 28 | variable "soft_delete_retention_days" { |
| 29 | type = number |
| 30 | description = "Key Vault soft-delete retention window." |
| 31 | default = 90 |
| 32 | } |
| 33 | |
| 34 | variable "enable_rbac_authorization" { |
| 35 | type = bool |
| 36 | description = "Use Azure RBAC so workload identities can receive least-privilege secret access." |
| 37 | default = true |
| 38 | } |