import { IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultAwsJWTAuth } from "./VaultAwsJWTAuth.js";
import { IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultAwsAuthSecretRef } from "./VaultAwsAuthSecretRef.js";
import { ModelData, Model } from "@kubernetes-models/base";
/**
 * VaultIamAuth authenticates with Vault using the Vault's AWS IAM authentication method. Refer: https://developer.hashicorp.com/vault/docs/auth/aws
 */
export interface IVaultIamAuth {
    /**
     * AWS External ID set on assumed IAM roles
     */
    "externalID"?: string;
    /**
     * Specify a service account with IRSA enabled
     */
    "jwt"?: IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultAwsJWTAuth;
    /**
     * Path where the AWS auth method is enabled in Vault, e.g: "aws"
     */
    "path"?: string;
    /**
     * AWS region
     */
    "region"?: string;
    /**
     * This is the AWS role to be assumed before talking to vault
     */
    "role"?: string;
    /**
     * Specify credentials in a Secret object
     */
    "secretRef"?: IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultAwsAuthSecretRef;
    /**
     * X-Vault-AWS-IAM-Server-ID is an additional header used by Vault IAM auth method to mitigate against different types of replay attacks. More details here: https://developer.hashicorp.com/vault/docs/auth/aws
     */
    "vaultAwsIamServerID"?: string;
    /**
     * Vault Role. In vault, a role describes an identity with a set of permissions, groups, or policies you want to attach a user of the secrets engine
     */
    "vaultRole": string;
}
/**
 * VaultIamAuth authenticates with Vault using the Vault's AWS IAM authentication method. Refer: https://developer.hashicorp.com/vault/docs/auth/aws
 */
export declare class VaultIamAuth extends Model<IVaultIamAuth> implements IVaultIamAuth {
    "externalID"?: string;
    "jwt"?: IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultAwsJWTAuth;
    "path"?: string;
    "region"?: string;
    "role"?: string;
    "secretRef"?: IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultAwsAuthSecretRef;
    "vaultAwsIamServerID"?: string;
    "vaultRole": string;
    constructor(data?: ModelData<IVaultIamAuth>);
}
export type { IVaultIamAuth as IComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultIamAuth, VaultIamAuth as ComGithubExternalSecretsExternalSecretsApisExternalsecretsV1VaultIamAuth };