solution/solution-access-analyzer-external-access/ros/create-role-cross-account/variables.tf

variable "ALIYUN__AccountId" {
  type = string
}

variable "role_name" {
  type        = string
  description = <<EOT
  {
    "ConstraintDescription": {
      "zh-cn": "不得超过 64 个字符、英文字母、数字或'-'。",
      "en": "No more than 64 characters,English letters, Numbers, or '-' are allowed."
    },
    "Description": {
      "zh-cn": "角色的名称，如果已经存在，请更改名称，<br>由英文字母、数字或'-'组成，不超过64个字符。",
      "en": "The name of role, Change the name if it already exists,<br>Consist of english letters, numbers or '-',not more than 64 characters."
    },
    "MinLength": 1,
    "Label": {
      "zh-cn": "角色的名称",
      "en": "Role Name"
    },
    "AllowedPattern": "^[a-zA-Z0-9\\-]+$",
    "MaxLength": 64,
    "Type": "String"
  }
  EOT
}

variable "policy_name" {
  type        = string
  description = <<EOT
  {
      "Type": "String",
      "Description": {
        "zh-cn": "策略名，改变名称如果它已经存在，<br>由英文字母，数字或'-'，5-128个字符组成。",
        "en": "The policy name, Change the name if it already exists,<br>Consist of english letters, numbers or '-', 5-128 characters."
      },
      "MinLength": 5,
      "Label": {
        "zh-cn": "策略名",
        "en": "Policy Name"
      },
      "AllowedPattern": "^[a-zA-Z0-9\\-]+$",
      "MaxLength": 128,
      "ConstraintDescription": {
        "zh-cn": "由英文字母、数字或'-',5-128个字符组成。",
        "en": "Consist of english letters, numbers or '-',5-128 characters."
      }
    }
  EOT
}

variable "policy_document" {
  type        = any
  description = <<EOT
  {
      "Type": "Json",
      "Description": {
        "zh-cn": "策略内容。其中 Action 和 Resource 必须配置为数组格式。",
        "en": "The policy document. Action and Resource must be configured in array format."
      },
      "Label": {
        "zh-cn": "策略内容",
        "en": "Policy Document"
      }
    }
  EOT
}

variable "assume_role_principal_account" {
  type        = string
  default     = ""
  description = <<EOT
  {
      "Default": "",
      "Type": "String",
      "Description": {
        "zh-cn": "该角色可信的账号。置空，则默认为当前账号。",
        "en": "The trusted account for this role. Default is current account while empty."
      },
      "Label": {
        "zh-cn": "角色可信的账号",
        "en": "Principal Account"
      }
    }
  EOT
}

variable "assume_role_principal_role" {
  type        = string
  description = <<EOT
  {
      "Type": "String",
      "Description": {
        "zh-cn": "允许扮演该角色的可信账号下的角色。请确保该角色在可信账号下已经存在，否则会创建失败。",
        "en": "Role of trusted account that are allowed to assume this role."
      },
      "Label": {
        "zh-cn": "可信账号下允许扮演的角色",
        "en": "Principal Role"
      }
    }
  EOT
}