variable "bucket_name" {
  type        = string
  description = "Globally-unique S3 bucket name."
}

variable "region" {
  type        = string
  description = "AWS region the bucket is created in (provider-level; not a resource arg)."
  default     = null
}

variable "kms_key_arn" {
  type        = string
  description = "ARN of the CMK for SSE-KMS; if absent, uses managed key (SSE-S3)."
  default     = null
}

variable "tags" {
  type        = map(string)
  description = "Additional tags to merge with the module defaults."
  default     = {}
}