variable "description" { type = string description = "Description of the KMS key." default = "ACDL per-stack CMK" } variable "region" { type = string description = "AWS region (provider-level; not a resource arg)." default = null } variable "deletion_window_days" { type = number description = "Deletion window in days (7-30)." default = 30 }