locals {
  # 0 gateways when NAT is disabled; otherwise 1 (shared) or one per private subnet.
  nat_gateway_count = var.enable_nat_gateway ? (var.single_nat_gateway ? 1 : length(var.private_subnet_cidrs)) : 0
}