default null for maintenance_configuration and add documentation link for permissions

Author: magreenbaum

examples/table-bucket/main.tf

@@ -123,6 +123,7 @@ module "kms" {
   description             = "Key example for s3 table buckets"
   deletion_window_in_days = 7
 
+  # https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-tables-kms-permissions.html
   key_statements = [
     {
       sid = "s3TablesMaintenancePolicy"

modules/table-bucket/README.md

@@ -38,7 +38,7 @@ No modules.
 | <a name="input_create"></a> [create](#input\_create) | Whether to create s3 table resources | `bool` | `true` | no |
 | <a name="input_create_table_bucket_policy"></a> [create\_table\_bucket\_policy](#input\_create\_table\_bucket\_policy) | Whether to create s3 table bucket policy | `bool` | `false` | no |
 | <a name="input_encryption_configuration"></a> [encryption\_configuration](#input\_encryption\_configuration) | Map of encryption configurations | `any` | `null` | no |
-| <a name="input_maintenance_configuration"></a> [maintenance\_configuration](#input\_maintenance\_configuration) | Map of table bucket maintenance configurations | `any` | `{}` | no |
+| <a name="input_maintenance_configuration"></a> [maintenance\_configuration](#input\_maintenance\_configuration) | Map of table bucket maintenance configurations | `any` | `null` | no |
 | <a name="input_table_bucket_name"></a> [table\_bucket\_name](#input\_table\_bucket\_name) | Name of the table bucket. Must be between 3 and 63 characters in length. Can consist of lowercase letters, numbers, and hyphens, and must begin and end with a lowercase letter or number | `string` | `null` | no |
 | <a name="input_table_bucket_override_policy_documents"></a> [table\_bucket\_override\_policy\_documents](#input\_table\_bucket\_override\_policy\_documents) | List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank `sid`s will override statements with the same `sid` | `list(string)` | `[]` | no |
 | <a name="input_table_bucket_policy"></a> [table\_bucket\_policy](#input\_table\_bucket\_policy) | Amazon Web Services resource-based policy document in JSON format | `string` | `null` | no |

modules/table-bucket/variables.tf

@@ -19,7 +19,7 @@ variable "encryption_configuration" {
 variable "maintenance_configuration" {
   description = "Map of table bucket maintenance configurations"
   type        = any
-  default     = {}
+  default     = null
 }
 
 variable "create_table_bucket_policy" {

wrappers/table-bucket/main.tf

@@ -6,7 +6,7 @@ module "wrapper" {
   create                                 = try(each.value.create, var.defaults.create, true)
   create_table_bucket_policy             = try(each.value.create_table_bucket_policy, var.defaults.create_table_bucket_policy, false)
   encryption_configuration               = try(each.value.encryption_configuration, var.defaults.encryption_configuration, null)
-  maintenance_configuration              = try(each.value.maintenance_configuration, var.defaults.maintenance_configuration, {})
+  maintenance_configuration              = try(each.value.maintenance_configuration, var.defaults.maintenance_configuration, null)
   table_bucket_name                      = try(each.value.table_bucket_name, var.defaults.table_bucket_name, null)
   table_bucket_override_policy_documents = try(each.value.table_bucket_override_policy_documents, var.defaults.table_bucket_override_policy_documents, [])
   table_bucket_policy                    = try(each.value.table_bucket_policy, var.defaults.table_bucket_policy, null)