Conan Scott
fba56bf8f3
Add var.ui_gateway_url so config.js can target the Fusion listener instead of the backend /demo. Set to the Fusion /tokenize endpoint; the browser now runs the full flow through the gateway (guardrail -> tokenize -> agent -> restore). Requires Fusion to return CORS for the CloudFront origin (done). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
61 lines
2.2 KiB
HCL
61 lines
2.2 KiB
HCL
variable "region" {
|
|
description = "AWS region. Bedrock + AgentCore have the widest quotas in us-east-1 / us-west-2."
|
|
type = string
|
|
default = "us-east-1"
|
|
}
|
|
|
|
variable "project" {
|
|
description = "Name prefix for all resources."
|
|
type = string
|
|
default = "hncb-deid-demo"
|
|
}
|
|
|
|
variable "bedrock_model_id" {
|
|
description = "Bedrock model the agent reasons with."
|
|
type = string
|
|
default = "anthropic.claude-3-5-sonnet-20241022-v2:0"
|
|
}
|
|
|
|
# Fusion is a shared SaaS instance (NOT deployed here). Only the Presidio detector
|
|
# is self-hosted. TODO: set after scripts/deploy.sh builds + pushes the image.
|
|
variable "presidio_image_uri" {
|
|
description = "ECR URI for the Presidio detector image built from ./presidio."
|
|
type = string
|
|
default = "REPLACE_ME_PRESIDIO_IMAGE_URI"
|
|
}
|
|
|
|
# Where the /tokenize Lambda reaches the Presidio detector. After deploy this is
|
|
# the Presidio Fargate task's public endpoint (http://<public-ip>:5001). Kept a
|
|
# variable so a laptop rehearsal can point at a local/ngrok detector.
|
|
variable "presidio_url" {
|
|
description = "Base URL of the Presidio detector /analyze service."
|
|
type = string
|
|
default = "http://localhost:5001"
|
|
}
|
|
|
|
# Shared secret Fusion SaaS presents to the public endpoints (bearer / x-api-key).
|
|
# NEVER commit a real value -- pass via TF_VAR_tokenize_api_key or a .tfvars file
|
|
# that is gitignored. Empty default leaves the endpoint open (dev only).
|
|
variable "tokenize_api_key" {
|
|
description = "Shared secret required on /tokenize (and /restore) requests."
|
|
type = string
|
|
default = ""
|
|
sensitive = true
|
|
}
|
|
|
|
# AgentCore Runtime ARN (created out-of-band by `agentcore launch`, see T5). The
|
|
# demo orchestrator (T6) invokes it. Empty -> orchestrator skips the agent step.
|
|
variable "agent_runtime_arn" {
|
|
description = "Bedrock AgentCore Runtime ARN the demo orchestrator invokes."
|
|
type = string
|
|
default = ""
|
|
}
|
|
|
|
# Where the browser UI posts. Empty -> backend /demo. Set to the Fusion endpoint
|
|
# to run the portal through the gateway (Fusion must return CORS for the UI origin).
|
|
variable "ui_gateway_url" {
|
|
description = "Endpoint the UI posts to (empty = backend /demo round trip)."
|
|
type = string
|
|
default = ""
|
|
}
|