Update variables.tf

README.md

@@ -35,7 +35,7 @@ No modules.
 | <a name="input_kc_terraform_auth_client_id"></a> [kc\_terraform\_auth\_client\_id](#input\_kc\_terraform\_auth\_client\_id) | Client ID of client that terraform will authenticate against in order to do its work. | `string` | n/a | yes |
 | <a name="input_kc_terraform_auth_client_secret"></a> [kc\_terraform\_auth\_client\_secret](#input\_kc\_terraform\_auth\_client\_secret) | Client secret used by Terraform KeyCloak provider authenticate against KeyCloak. | `string` | n/a | yes |
 | <a name="input_project_accounts"></a> [project\_accounts](#input\_project\_accounts) | A map of the project accounts (with structure matching output of aws\_organizations\_account) for which we will be creating roles and IDP resources, keyed by the name of the envrionment. | `map(any)` | n/a | yes |
-| <a name="input_project_spec"></a> [project\_spec](#input\_project\_spec) | List of projects/(accounts) that product teams' workloads run within. | <pre>object({<br>    identifier = string<br>    name       = string<br>    tags       = map(string)<br>    accounts = list(object({<br>      name        = string<br>      environment = string<br>    }))<br>  })</pre> | n/a | yes |
+| <a name="input_project_spec"></a> [project\_spec](#input\_project\_spec) | List of projects/(accounts) that product teams' workloads run within. | <pre>object({<br>    identifier = string<br>    name       = string<br>    tags = object({<br>      account_coding      = string<br>      ministry_name       = string<br>      admin_contact_email = string<br>      admin_contact_name  = string<br>      billing_group       = string<br>      additional_contacts = list(object({<br>        name  = string<br>        email = string<br>      }))<br>    })<br>    accounts = list(object({<br>      name        = string<br>      environment = string<br>    }))<br>  })</pre> | n/a | yes |
 | <a name="input_tenancy_root_group_name"></a> [tenancy\_root\_group\_name](#input\_tenancy\_root\_group\_name) | n/a | `string` | `"Project Team Groups"` | no |
 | <a name="input_workload_account_role_config"></a> [workload\_account\_role\_config](#input\_workload\_account\_role\_config) | A mapping of role names to be created to (existing) policy arns. | <pre>list(object({<br>    aws_role_name       = string<br>    aws_policy_arns     = list(string)<br>    keycloak_group_name = string<br>    environments        = list(string)<br>  }))</pre> | n/a | yes |
 

variables.tf

@@ -54,7 +54,17 @@ variable "project_spec" {
   type = object({
     identifier = string
     name       = string
-    tags       = map(string)
+    tags = object({
+      account_coding      = string
+      ministry_name       = string
+      admin_contact_email = string
+      admin_contact_name  = string
+      billing_group       = string
+      additional_contacts = list(object({
+        name  = string
+        email = string
+      }))
+    })
     accounts = list(object({
       name        = string
       environment = string