aws_region  = "ap-south-1"
name        = "terraform-course"
environment = "production"
vpc_cidr    = "10.52.0.0/16"

availability_zones = {
  aps1-az1 = { zone_id = "aps1-az1", public_subnet_number = 0, private_subnet_number = 3 }
  aps1-az2 = { zone_id = "aps1-az2", public_subnet_number = 1, private_subnet_number = 4 }
  aps1-az3 = { zone_id = "aps1-az3", public_subnet_number = 2, private_subnet_number = 5 }
}

nat_gateway_mode         = "per_az"
interface_endpoints      = ["ecr.api", "ecr.dkr", "logs", "sts"]
gateway_endpoints        = ["s3"]
flow_logs_retention_days = 365
protect_flow_logs        = true
budget_limit_usd         = 100
# Required separately: TF_VAR_budget_alert_email must be a real recipient.
