diff --git a/terraform/variables.tf b/terraform/variables.tf
new file mode 100644
index 0000000..0b9d610
--- /dev/null
+++ b/terraform/variables.tf
@@ -0,0 +1,30 @@
+variable "region" {
+  description = "AWS region. Bedrock + AgentCore have the widest quotas in us-east-1 / us-west-2."
+  type        = string
+  default     = "us-east-1"
+}
+
+variable "project" {
+  description = "Name prefix for all resources."
+  type        = string
+  default     = "hncb-deid-demo"
+}
+
+variable "bedrock_model_id" {
+  description = "Bedrock model the agent reasons with."
+  type        = string
+  default     = "anthropic.claude-3-5-sonnet-20241022-v2:0"
+}
+
+# TODO: set these after you push the container images (see scripts/deploy.sh).
+variable "fusion_image_uri" {
+  description = "ECR URI for the Axway Amplify AI Gateway (Fusion) data-plane image you supply."
+  type        = string
+  default     = "REPLACE_ME_FUSION_IMAGE_URI"
+}
+
+variable "presidio_image_uri" {
+  description = "ECR URI for the Presidio detector image built from ./presidio."
+  type        = string
+  default     = "REPLACE_ME_PRESIDIO_IMAGE_URI"
+}