docs

Author: SWhyteAnswer

bootstrap/variables.tf

@@ -1,4 +1,4 @@
 variable "environment" {
-  type        = string
   description = "Environment to bootstrap"
-}
+  type        = string
+}

infrastructure/modules/kms/README.md

@@ -72,7 +72,7 @@ module "kms_key" {
 | <a name="input_allow_decrypt_for_arn"></a> [allow\_decrypt\_for\_arn](#input\_allow\_decrypt\_for\_arn) | Flag to allow generating a decrypt-only policy for specified ARNs. | `bool` | `false` | no |
 | <a name="input_allowed_arn"></a> [allowed\_arn](#input\_allowed\_arn) | List of ARNs that are allowed full encrypt/decrypt access to the KMS key. | `list(string)` | `[]` | no |
 | <a name="input_aws_identifiers"></a> [aws\_identifiers](#input\_aws\_identifiers) | List of ARNs that will be granted decrypt-only access. | `list(string)` | `[]` | no |
-| <a name="input_current_account_id"></a> [current\_account\_id](#input\_current\_account\_id) | n/a | `string` | n/a | yes |
+| <a name="input_current_account_id"></a> [current\_account\_id](#input\_current\_account\_id) | AWS account ID where the KMS key policy is applied. | `string` | n/a | yes |
 | <a name="input_environment"></a> [environment](#input\_environment) | Deployment environment (e.g., dev, staging, prod). | `string` | n/a | yes |
 | <a name="input_kms_key_description"></a> [kms\_key\_description](#input\_kms\_key\_description) | Description of the KMS key. | `string` | n/a | yes |
 | <a name="input_kms_key_name"></a> [kms\_key\_name](#input\_kms\_key\_name) | Name of the KMS key to be created. | `string` | n/a | yes |

infrastructure/modules/kms/variable.tf

@@ -1,5 +1,6 @@
 variable "current_account_id" {
-  type = string
+  description = "AWS account ID where the KMS key policy is applied."
+  type        = string
 }
 
 variable "kms_key_name" {

infrastructure/modules/lambda/README.md

@@ -92,7 +92,7 @@ module "lambda" {
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
 | <a name="input_api_execution_arn"></a> [api\_execution\_arn](#input\_api\_execution\_arn) | Execution ARN of the API Gateway used for granting invoke permissions. | `string` | n/a | yes |
-| <a name="input_default_policies"></a> [default\_policies](#input\_default\_policies) | n/a | `list` | <pre>[<br/>  "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",<br/>  "arn:aws:iam::aws:policy/CloudWatchLambdaInsightsExecutionRolePolicy"<br/>]</pre> | no |
+| <a name="input_default_policies"></a> [default\_policies](#input\_default\_policies) | List of default IAM policy ARNs to attach to the Lambda execution role. | `list(string)` | <pre>[<br/>  "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",<br/>  "arn:aws:iam::aws:policy/CloudWatchLambdaInsightsExecutionRolePolicy"<br/>]</pre> | no |
 | <a name="input_handler"></a> [handler](#input\_handler) | Function entry point in the codebase (e.g., 'index.handler'). | `string` | n/a | yes |
 | <a name="input_http_methods"></a> [http\_methods](#input\_http\_methods) | List of HTTP methods to integrate with the Lambda function. | `list(string)` | `[]` | no |
 | <a name="input_iam_role_policy_documents"></a> [iam\_role\_policy\_documents](#input\_iam\_role\_policy\_documents) | List of IAM policy document ARNs to attach to the Lambda execution role. | `list(string)` | `[]` | no |

infrastructure/modules/lambda/variable.tf

@@ -78,12 +78,14 @@ variable "memory_size" {
 }
 
 variable "reserved_concurrent_executions" {
-  type        = number
   description = "The number of concurrent execution allowed for lambda. A value of 0 will stop lambda from running, and -1 removes any concurrency limitations. Default to -1."
+  type        = number
   default     = -1
 }
 
 variable "default_policies" {
+  description = "List of default IAM policy ARNs to attach to the Lambda execution role."
+  type        = list(string)
   default = [
     "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole",
     "arn:aws:iam::aws:policy/CloudWatchLambdaInsightsExecutionRolePolicy"

infrastructure/modules/lambda_layers/README.md

@@ -46,7 +46,6 @@ module "lambda_layer" {
 |------|-------------|------|---------|:--------:|
 | <a name="input_account_id"></a> [account\_id](#input\_account\_id) | The AWS account ID used to generate IAM policy for layer access. | `string` | n/a | yes |
 | <a name="input_layer_name"></a> [layer\_name](#input\_layer\_name) | Logical name assigned to the Lambda layer. | `string` | n/a | yes |
-| <a name="input_layer_zip_file_name"></a> [layer\_zip\_file\_name](#input\_layer\_zip\_file\_name) | Path to the ZIP archive containing layer content. Defaults to a placeholder. | `string` | `"placeholder_lambda_payload.zip"` | no |
 ## Outputs
 
 | Name | Description |

infrastructure/modules/lambda_layers/variable.tf

@@ -3,12 +3,6 @@ variable "account_id" {
   type        = string
 }
 
-variable "layer_zip_file_name" {
-  description = "Path to the ZIP archive containing layer content. Defaults to a placeholder."
-  type        = string
-  default     = "placeholder_lambda_payload.zip"
-}
-
 variable "layer_name" {
   description = "Logical name assigned to the Lambda layer."
   type        = string

infrastructure/variable.tf

@@ -90,13 +90,15 @@ variable "cloudfront_edge_table_name" {
 }
 
 variable "zip_store_dynamodb_table_name" {
-  type    = string
-  default = "ZipStoreReferenceMetadata"
+  description = "The name of the dynamodb table to store metadata related to zip file storage."
+  type        = string
+  default     = "ZipStoreReferenceMetadata"
 }
 
 variable "stitch_metadata_dynamodb_table_name" {
-  type    = string
-  default = "LloydGeorgeStitchJobMetadata"
+  description = "The name of the dynamodb table to store metadata related to LG stitching jobs ."
+  type        = string
+  default     = "LloydGeorgeStitchJobMetadata"
 }
 
 variable "auth_state_dynamodb_table_name" {