variable "name" { type = string description = "ECR repository name." } variable "region" { type = string description = "AWS region (provider-level; not a resource arg)." default = null } variable "kms_key_arn" { type = string description = "ARN of the CMK for ECR encryption; if absent, uses managed key." default = null }