modules/de-identification-template/variables.tf (59 lines of code) (raw):
/**
* Copyright 2021 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
variable "project_id" {
description = "The ID of the project in which to provision resources."
type = string
}
variable "terraform_service_account" {
description = "The email address of the service account that will run the Terraform config."
type = string
}
variable "dlp_location" {
description = "The location of DLP resources. See https://cloud.google.com/dlp/docs/locations. The 'global' KMS location is valid."
type = string
default = "global"
}
variable "crypto_key" {
description = "The full resource name of the Cloud KMS key that wraps the data crypto key used by DLP."
type = string
}
variable "wrapped_key" {
description = "The base64 encoded data crypto key wrapped by KMS."
type = string
}
variable "template_file" {
description = "the path to the DLP de-identification template file."
type = string
}
variable "template_id_prefix" {
description = "Prefix to be used in the creation of the ID of the DLP de-identification template."
type = string
default = "de_identification"
}
variable "template_display_name" {
description = "The display name of the DLP de-identification template."
type = string
default = "De-identification template using a KMS wrapped CMEK"
}
variable "template_description" {
description = "A description for the DLP de-identification template."
type = string
default = "Transforms sensitive content defined in the template with a KMS wrapped CMEK."
}
variable "dataflow_service_account" {
description = "The Service Account email that will be used to identify the VMs in which the jobs are running."
type = string
}