object({
    server_name = string #dns name compliant name prefix
    encryption = object({
      encrypt_logs     = bool   # default is false
      logs_kms_alias   = string # default is alias/{var.project}/logs
      encrypt_lambda   = bool   # default is false
      lambda_kms_alias = string # default is alias/{var.project}/lambda
      encrypt_sns      = bool   # default is false
      sns_kms_alias    = string # default is alias/{var.project}/sns
    })

    user_role    = string #if null, an IAM role for the SFTP user will be created
    logging_role = string #if null, an IAM role for the SFTP logging to CW will be created

    security_group = object({
      sftp_port    = number       #2049
      source_cidrs = list(string) #if [], the SFTP Security Group will not be created
      tags         = map(string)  #if provided, the identified SG will be attached
    })

    efs_specs = object({
      efs_id              = string      #if null, new EFS will be created
      efs_ap_id           = string      #if null, new EFS AP will be created
      security_group_tags = map(string) #if efs_id is not null, then it must be provided
      encryption          = bool
      kms_alias           = string
    })

    lambda_specs = object({
      execution_role                   = string      #if null, an IAM role for the SFTP User Automation Lambda will be created
      security_group_tags              = map(string) #if null, a Lambda security group will be created
      daily_report_schedule_expression = string      #e.g. cron(0 22 * * ? *)
    })
  })

list(object({
    name         = string # e.g. test1
    uid          = string # e.g. 3001
    gid          = string # e.g. 4000
    ssh_key_file = string # e.g. ./users/test.pub
  }))