output "data_bucket" {
  value       = aws_s3_bucket.data.bucket
  description = "Transient snapshot (data) bucket name."
}

output "metadata_bucket" {
  value       = aws_s3_bucket.metadata.bucket
  description = "Durable manifest/log (metadata) bucket name."
}

output "export_access_key_id" {
  value       = aws_iam_access_key.export_writer.id
  description = "Export writer access key id -> extract secrets.env TIDB_EXPORT_AWS_ACCESS_KEY_ID."
  sensitive   = true
}

output "export_secret_access_key" {
  value       = aws_iam_access_key.export_writer.secret
  description = "Export writer secret -> extract secrets.env TIDB_EXPORT_AWS_SECRET_ACCESS_KEY."
  sensitive   = true
}

output "loader_access_key_id" {
  value       = aws_iam_access_key.loader_reader.id
  description = "Loader reader access key id -> load secrets.env NEXUSCRM_S3_ACCESS_KEY_ID."
  sensitive   = true
}

output "loader_secret_access_key" {
  value       = aws_iam_access_key.loader_reader.secret
  description = "Loader reader secret -> load secrets.env NEXUSCRM_S3_SECRET_ACCESS_KEY."
  sensitive   = true
}