adding gitignore; updating module name for iam pwd policy

Author: liamschn

.gitignore

@@ -508,3 +508,13 @@ $RECYCLE.BIN/
 **/sra_staging_manual_upload/*
 **/dist-*/*
 poetry.lock
+
+# Ignore packages generated by TF
+**/aws_sra_examples/terraform/**/lambda/
+**.terraform
+*.tfstate
+*.tfstate.*
+*.tfvars*
+**./terraform
+*.hcl
+

aws_sra_examples/terraform/common/variables.tf

@@ -4,22 +4,24 @@
 ########################################################################
 variable "control_tower" {
   description = "AWS Control Tower landing zone deployed/in-use"
-  default     = "true"
+  default     = "false"
 }
 
 variable "governed_regions" {
   description = "AWS regions (comma separated) if not using AWS Control Tower (leave set to ct-regions for AWS Control Tower environments)"
-  default     = "ct-regions"
+  default     = "us-west-2,us-west-1,ap-northeast-3,ap-south-1,eu-central-1"
 }
 
 variable "security_account_id" {
   description = "Security Tooling Account ID"
-  default     = 111111111111
+  type        = string
+  default     = "722491569570"
 }
 
 variable "log_archive_account_id" {
   description = "Log Archive Account ID"
-  default     = 222222222222
+  type        = string
+  default     = "038514619952"
 }
 
 variable "aws_partition" {
@@ -37,4 +39,4 @@ variable "solution_name" {
   default     = "sra-create-deployment-roles"
   description = "Name of the SRA solution"
   type        = string
-}
+}