variable "description" {
  type        = string
  description = "Description of the KMS key."
  default     = "ACDL per-stack CMK"
}

variable "region" {
  type        = string
  description = "AWS region (provider-level; not a resource arg)."
  default     = null
}

variable "deletion_window_days" {
  type        = number
  description = "Deletion window in days (7-30)."
  default     = 30
}