variable "role_name" { type = string description = "The IAM role name." default = "nova-microservice-role" } variable "assume_role_policy" { type = string description = "Assume-role policy document (JSON string)." default = null } variable "managed_policies" { type = string description = "Comma-separated list of managed policy ARNs to attach." default = null } variable "region" { type = string description = "AWS region (provider-level; not a resource arg)." default = null }