variable "region" {
  type    = string
  default = "us-east-1"
}

variable "vpc_cidr" {
  description = "Dev VPC CIDR (single AZ)"
  type        = string
  default     = "10.2.0.0/16"
}

variable "image_tag" {
  description = "Container image tag to deploy"
  type        = string
  default     = "latest"
}

variable "phi_local_key" {
  description = "Base64 32-byte local PHI key for dev (synthetic data only; staging/prod use KMS)"
  type        = string
  sensitive   = true
}