.env.example

# CDK deployment — set your AWS account ID and region
CDK_DEFAULT_ACCOUNT=111111111111
CDK_DEFAULT_REGION=us-east-1
CDK_ENVIRONMENT=dev

# EKS cluster access — set to your IAM username for kubectl admin access
CDK_ADMIN_USERNAME=your-iam-username

# Service environment variables (auto-set by CDK when deploying to EKS)
ANALYSIS_TABLE_NAME=cfn-security-analysis-state-dev
CONNECTION_TABLE_NAME=cfn-security-websocket-connections-dev
REPORTS_BUCKET_NAME=cfn-security-reports-dev
STATE_MACHINE_ARN=arn:aws:states:us-east-1:111111111111:stateMachine:cfn-security-workflow-dev
PRESIGNED_URL_EXPIRY=3600

# Bedrock AgentCore — set after deploying agents via: agentcore deploy
SECURITY_ANALYZER_AGENT_ARN=arn:aws:bedrock-agentcore:us-east-1:111111111111:runtime/your-agent-id
CRAWLER_AGENT_ARN=arn:aws:bedrock-agentcore:us-east-1:111111111111:runtime/your-crawler-id
PROPERTY_ANALYZER_AGENT_ARN=arn:aws:bedrock-agentcore:us-east-1:111111111111:runtime/your-property-analyzer-id

# Bedrock model — override if your account uses a different model
# Default: us.anthropic.claude-sonnet-4-20250514-v1:0
# BEDROCK_MODEL_ID=us.anthropic.claude-3-5-sonnet-20241022-v2:0

# CORS — restrict to your CloudFront + ALB domains for production
CORS_ORIGINS=http://localhost:5173,http://localhost:8000