# No-project config for the DataOps Aurora module.
# Deploys an Aurora PostgreSQL cluster without DataOps project integration.
# Uses a directly specified KMS key ARN instead of project auto-wiring.

# KMS key ARN for encrypting all Aurora clusters
# Use when deploying without a DataOps project.
kmsArn: arn:{{partition}}:kms:{{region}}:{{account}}:key/my-aurora-key-id

# See CONFIGURATION.md for role reference options (name, arn, id).
# Data admin roles granted cluster access managed policy for ALL clusters
dataAdminRoles:
  - name: Admin

# Aurora PostgreSQL cluster configurations
postgresql:
  # Cluster name (becomes the cluster identifier after MDAA naming)
  noproject-db:
    # Aurora PostgreSQL engine version in major.minor format
    engineVersion: '16.13'

    # VPC ID for Aurora cluster deployment
    # Often created by your VPC/networking stack.
    # Example SSM: ssm:/path/to/vpc/id
    vpcId: vpc-a1b2c3d4

    # Subnet configurations for cluster node placement
    # Often created by your VPC/networking stack.
    # Example SSM: ssm:/path/to/subnet/id
    subnets:
      - subnetId: subnet-1a2b3c4d
        # Must match the actual AZ of the specified subnet
        availabilityZone: '{{region}}a'
      - subnetId: subnet-5e6f7g8h
        availabilityZone: '{{region}}b'

    # Security group ingress rules controlling network access
    securityGroupIngress:
      # IPv4 CIDR blocks allowed to connect to the cluster port
      ipv4:
        - 10.0.0.0/16

    # Non-default TCP port for client connections (avoid 5432)
    port: 15432

    # See CONFIGURATION.md for role reference options (name, arn, id).
    # (Optional) Roles granted cluster access managed policy for this cluster only
    clusterAccessRoles:
      - name: app-service-role