variable "description" { type = string description = "Description of the KMS key." default = "ACDL per-stack CMK" } variable "region" { type = string description = "AWS region (provider-level; not a resource arg)." default = null } variable "deletion_window_days" { type = number description = "Deletion window in days (7-30)." default = 30 } variable "enabled" { type = bool description = "Feature flag: enable/disable this module. Set to false to skip resource creation." default = true }