variable "name" {
  type        = string
  description = "WAF Web ACL name."
  default     = "acdl-waf"
}

variable "scope" {
  type        = string
  description = "WAF scope (CLOUDFRONT or REGIONAL)."
  default     = "CLOUDFRONT"
}

variable "default_action" {
  type        = string
  description = "Default action (allow or block)."
  default     = "allow"
}

variable "rules" {
  type        = any
  description = "Custom WAF rules (list of rule objects)."
  default     = []
}

variable "region" {
  type        = string
  description = "AWS region (provider-level; not a resource arg)."
  default     = null
}