variable "bucket_name" {
  type = string
}

variable "sse_kms" {
  description = "Use SSE-KMS (false falls back to AES256 for cheap dev)"
  type        = bool
  default     = true
}

variable "kms_key_arn" {
  type    = string
  default = ""
}

variable "versioned" {
  type    = bool
  default = false
}

variable "force_destroy" {
  description = "Dev only: allow destroying non-empty buckets"
  type        = bool
  default     = false
}

variable "tags" {
  type    = map(string)
  default = {}
}