import * as pulumi from "@pulumi/pulumi";
import * as inputs from "./types/input";
import * as outputs from "./types/output";
/**
 * Creates and manages Kafka-native [access control lists](https://aiven.io/docs/products/kafka/concepts/acl) (ACLs) for an Aiven for Apache Kafka® service. ACLs control access to Kafka topics, consumer groups, clusters, and Schema Registry.
 *
 * Kafka-native ACLs provide advanced resource-level access control with fine-grained permissions, including `ALLOW` and `DENY` rules. For simplified topic-level control you can use Aiven ACLs. If this resource is missing (for example, after a service power off), it's removed from the state and a new create plan is generated.
 *
 * ## Example Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aiven from "@pulumi/aiven";
 *
 * const example = new aiven.KafkaNativeAcl("example", {
 *     project: "my-project",
 *     serviceName: "my-kafka",
 *     operation: "Read",
 *     patternType: "LITERAL",
 *     permissionType: "ALLOW",
 *     principal: "User:alice",
 *     resourceName: "consumer-group-1.",
 *     resourceType: "Topic",
 *     host: "*",
 * });
 * ```
 *
 * ## Import
 *
 * ```sh
 * $ pulumi import aiven:index/kafkaNativeAcl:KafkaNativeAcl example PROJECT/SERVICE_NAME/ACL_ID
 * ```
 */
export declare class KafkaNativeAcl extends pulumi.CustomResource {
    /**
     * Get an existing KafkaNativeAcl resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: KafkaNativeAclState, opts?: pulumi.CustomResourceOptions): KafkaNativeAcl;
    /**
     * Returns true if the given object is an instance of KafkaNativeAcl.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is KafkaNativeAcl;
    /**
     * Kafka ACL ID.
     */
    readonly aclId: pulumi.Output<string>;
    /**
     * the host or `*` for all hosts. Maximum length: `256`. The default value is `*`. Changing this property forces recreation of the resource.
     */
    readonly host: pulumi.Output<string>;
    /**
     * Kafka ACL operation represents an operation which an ACL grants or denies permission to perform. The possible values are `All`, `Alter`, `AlterConfigs`, `ClusterAction`, `Create`, `CreateTokens`, `Delete`, `Describe`, `DescribeConfigs`, `DescribeTokens`, `IdempotentWrite`, `Read` and `Write`. Changing this property forces recreation of the resource.
     */
    readonly operation: pulumi.Output<string>;
    /**
     * How a Kafka-native ACL matches its resource name. The possible values are `LITERAL` and `PREFIXED`. Changing this property forces recreation of the resource.
     */
    readonly patternType: pulumi.Output<string>;
    /**
     * Whether a Kafka-native ACL allows or denies its operation. The possible values are `ALLOW` and `DENY`. Changing this property forces recreation of the resource.
     */
    readonly permissionType: pulumi.Output<string>;
    /**
     * principal is in 'principalType:name' format. Maximum length: `256`. Changing this property forces recreation of the resource.
     */
    readonly principal: pulumi.Output<string>;
    /**
     * Project name. Changing this property forces recreation of the resource.
     */
    readonly project: pulumi.Output<string>;
    /**
     * Resource pattern used to match specified resources. Maximum length: `256`. Changing this property forces recreation of the resource.
     */
    readonly resourceName: pulumi.Output<string>;
    /**
     * Kafka ACL resource type represents a type of resource which an ACL can be applied to. The possible values are `Cluster`, `DelegationToken`, `Group`, `Topic`, `TransactionalId` and `User`. Changing this property forces recreation of the resource.
     */
    readonly resourceType: pulumi.Output<string>;
    /**
     * Service name. Changing this property forces recreation of the resource.
     */
    readonly serviceName: pulumi.Output<string>;
    readonly timeouts: pulumi.Output<outputs.KafkaNativeAclTimeouts | undefined>;
    /**
     * Create a KafkaNativeAcl resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: KafkaNativeAclArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering KafkaNativeAcl resources.
 */
export interface KafkaNativeAclState {
    /**
     * Kafka ACL ID.
     */
    aclId?: pulumi.Input<string | undefined>;
    /**
     * the host or `*` for all hosts. Maximum length: `256`. The default value is `*`. Changing this property forces recreation of the resource.
     */
    host?: pulumi.Input<string | undefined>;
    /**
     * Kafka ACL operation represents an operation which an ACL grants or denies permission to perform. The possible values are `All`, `Alter`, `AlterConfigs`, `ClusterAction`, `Create`, `CreateTokens`, `Delete`, `Describe`, `DescribeConfigs`, `DescribeTokens`, `IdempotentWrite`, `Read` and `Write`. Changing this property forces recreation of the resource.
     */
    operation?: pulumi.Input<string | undefined>;
    /**
     * How a Kafka-native ACL matches its resource name. The possible values are `LITERAL` and `PREFIXED`. Changing this property forces recreation of the resource.
     */
    patternType?: pulumi.Input<string | undefined>;
    /**
     * Whether a Kafka-native ACL allows or denies its operation. The possible values are `ALLOW` and `DENY`. Changing this property forces recreation of the resource.
     */
    permissionType?: pulumi.Input<string | undefined>;
    /**
     * principal is in 'principalType:name' format. Maximum length: `256`. Changing this property forces recreation of the resource.
     */
    principal?: pulumi.Input<string | undefined>;
    /**
     * Project name. Changing this property forces recreation of the resource.
     */
    project?: pulumi.Input<string | undefined>;
    /**
     * Resource pattern used to match specified resources. Maximum length: `256`. Changing this property forces recreation of the resource.
     */
    resourceName?: pulumi.Input<string | undefined>;
    /**
     * Kafka ACL resource type represents a type of resource which an ACL can be applied to. The possible values are `Cluster`, `DelegationToken`, `Group`, `Topic`, `TransactionalId` and `User`. Changing this property forces recreation of the resource.
     */
    resourceType?: pulumi.Input<string | undefined>;
    /**
     * Service name. Changing this property forces recreation of the resource.
     */
    serviceName?: pulumi.Input<string | undefined>;
    timeouts?: pulumi.Input<inputs.KafkaNativeAclTimeouts | undefined>;
}
/**
 * The set of arguments for constructing a KafkaNativeAcl resource.
 */
export interface KafkaNativeAclArgs {
    /**
     * the host or `*` for all hosts. Maximum length: `256`. The default value is `*`. Changing this property forces recreation of the resource.
     */
    host?: pulumi.Input<string | undefined>;
    /**
     * Kafka ACL operation represents an operation which an ACL grants or denies permission to perform. The possible values are `All`, `Alter`, `AlterConfigs`, `ClusterAction`, `Create`, `CreateTokens`, `Delete`, `Describe`, `DescribeConfigs`, `DescribeTokens`, `IdempotentWrite`, `Read` and `Write`. Changing this property forces recreation of the resource.
     */
    operation: pulumi.Input<string>;
    /**
     * How a Kafka-native ACL matches its resource name. The possible values are `LITERAL` and `PREFIXED`. Changing this property forces recreation of the resource.
     */
    patternType: pulumi.Input<string>;
    /**
     * Whether a Kafka-native ACL allows or denies its operation. The possible values are `ALLOW` and `DENY`. Changing this property forces recreation of the resource.
     */
    permissionType: pulumi.Input<string>;
    /**
     * principal is in 'principalType:name' format. Maximum length: `256`. Changing this property forces recreation of the resource.
     */
    principal: pulumi.Input<string>;
    /**
     * Project name. Changing this property forces recreation of the resource.
     */
    project: pulumi.Input<string>;
    /**
     * Resource pattern used to match specified resources. Maximum length: `256`. Changing this property forces recreation of the resource.
     */
    resourceName: pulumi.Input<string>;
    /**
     * Kafka ACL resource type represents a type of resource which an ACL can be applied to. The possible values are `Cluster`, `DelegationToken`, `Group`, `Topic`, `TransactionalId` and `User`. Changing this property forces recreation of the resource.
     */
    resourceType: pulumi.Input<string>;
    /**
     * Service name. Changing this property forces recreation of the resource.
     */
    serviceName: pulumi.Input<string>;
    timeouts?: pulumi.Input<inputs.KafkaNativeAclTimeouts | undefined>;
}
//# sourceMappingURL=kafkaNativeAcl.d.ts.map