import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
import * as outputs from "../types/output";
/**
 * Resource for managing exclusive AWS SSO Admin Managed Policy Attachments.
 *
 * This resource is designed to manage all managed policy attachments for an SSO permission set. Using this resource, Terraform will remove any managed policies attached to the permission set that are not defined in the configuration.
 *
 * > **WARNING:** Do not use this resource together with the `aws.ssoadmin.ManagedPolicyAttachment` resource for the same permission set. Doing so will cause a conflict and will lead to managed policies being removed.
 *
 * > Destruction of this resource means Terraform will no longer manage the managed policy attachments, **but will not detach any policies**. The permission set will retain all managed policies that were attached at the time of destruction.
 *
 * ## Example Usage
 *
 * ### Basic Usage
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aws from "@pulumi/aws";
 *
 * const example = aws.ssoadmin.getInstances({});
 * const examplePermissionSet = new aws.ssoadmin.PermissionSet("example", {
 *     name: "Example",
 *     instanceArn: example.then(example => example.arns?.[0]),
 * });
 * const exampleManagedPolicyAttachmentsExclusive = new aws.ssoadmin.ManagedPolicyAttachmentsExclusive("example", {
 *     instanceArn: example.then(example => example.arns?.[0]),
 *     permissionSetArn: examplePermissionSet.arn,
 *     managedPolicyArns: ["arn:aws:iam::aws:policy/ReadOnlyAccess"],
 * });
 * ```
 *
 * ### Disallow Managed Policy Attachments
 *
 * To disallow all managed policy attachments, set `managedPolicyArns` to an empty list.
 *
 * > Any managed policies attached to the permission set will be **removed**.
 *
 * ```typescript
 * import * as pulumi from "@pulumi/pulumi";
 * import * as aws from "@pulumi/aws";
 *
 * const example = new aws.ssoadmin.ManagedPolicyAttachmentsExclusive("example", {
 *     instanceArn: exampleAwsSsoadminInstances.arns[0],
 *     permissionSetArn: exampleAwsSsoadminPermissionSet.arn,
 *     managedPolicyArns: [],
 * });
 * ```
 *
 * ## Import
 *
 * ### Identity Schema
 *
 * #### Required
 *
 * * `instanceArn` (String) ARN of the SSO Instance.
 * * `permissionSetArn` (String) ARN of the Permission Set.
 *
 * #### Optional
 *
 * * `accountId` (String) Account ID where this resource is managed.
 * * `region` (String) Region where this resource is managed.
 *
 * Using `pulumi import`, import SSO Admin Managed Policy Attachments Exclusive using the `instanceArn` and `permissionSetArn` arguments, separated by a comma (`,`). For example:
 *
 * ```sh
 * $ pulumi import aws:ssoadmin/managedPolicyAttachmentsExclusive:ManagedPolicyAttachmentsExclusive example arn:aws:sso:::instance/ssoins-1234567890abcdef,arn:aws:sso:::permissionSet/ssoins-1234567890abcdef/ps-1234567890abcdef
 * ```
 */
export declare class ManagedPolicyAttachmentsExclusive extends pulumi.CustomResource {
    /**
     * Get an existing ManagedPolicyAttachmentsExclusive resource's state with the given name, ID, and optional extra
     * properties used to qualify the lookup.
     *
     * @param name The _unique_ name of the resulting resource.
     * @param id The _unique_ provider ID of the resource to lookup.
     * @param state Any extra arguments used during the lookup.
     * @param opts Optional settings to control the behavior of the CustomResource.
     */
    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ManagedPolicyAttachmentsExclusiveState, opts?: pulumi.CustomResourceOptions): ManagedPolicyAttachmentsExclusive;
    /**
     * Returns true if the given object is an instance of ManagedPolicyAttachmentsExclusive.  This is designed to work even
     * when multiple copies of the Pulumi SDK have been loaded into the same process.
     */
    static isInstance(obj: any): obj is ManagedPolicyAttachmentsExclusive;
    /**
     * ARN of the SSO Instance.
     */
    readonly instanceArn: pulumi.Output<string>;
    /**
     * Set of ARNs of IAM managed policies to attach to the Permission Set.
     */
    readonly managedPolicyArns: pulumi.Output<string[]>;
    /**
     * ARN of the Permission Set.
     *
     * The following arguments are optional:
     */
    readonly permissionSetArn: pulumi.Output<string>;
    /**
     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
     */
    readonly region: pulumi.Output<string>;
    readonly timeouts: pulumi.Output<outputs.ssoadmin.ManagedPolicyAttachmentsExclusiveTimeouts | undefined>;
    /**
     * Create a ManagedPolicyAttachmentsExclusive resource with the given unique name, arguments, and options.
     *
     * @param name The _unique_ name of the resource.
     * @param args The arguments to use to populate this resource's properties.
     * @param opts A bag of options that control this resource's behavior.
     */
    constructor(name: string, args: ManagedPolicyAttachmentsExclusiveArgs, opts?: pulumi.CustomResourceOptions);
}
/**
 * Input properties used for looking up and filtering ManagedPolicyAttachmentsExclusive resources.
 */
export interface ManagedPolicyAttachmentsExclusiveState {
    /**
     * ARN of the SSO Instance.
     */
    instanceArn?: pulumi.Input<string | undefined>;
    /**
     * Set of ARNs of IAM managed policies to attach to the Permission Set.
     */
    managedPolicyArns?: pulumi.Input<pulumi.Input<string>[] | undefined>;
    /**
     * ARN of the Permission Set.
     *
     * The following arguments are optional:
     */
    permissionSetArn?: pulumi.Input<string | undefined>;
    /**
     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
     */
    region?: pulumi.Input<string | undefined>;
    timeouts?: pulumi.Input<inputs.ssoadmin.ManagedPolicyAttachmentsExclusiveTimeouts | undefined>;
}
/**
 * The set of arguments for constructing a ManagedPolicyAttachmentsExclusive resource.
 */
export interface ManagedPolicyAttachmentsExclusiveArgs {
    /**
     * ARN of the SSO Instance.
     */
    instanceArn: pulumi.Input<string>;
    /**
     * Set of ARNs of IAM managed policies to attach to the Permission Set.
     */
    managedPolicyArns: pulumi.Input<pulumi.Input<string>[]>;
    /**
     * ARN of the Permission Set.
     *
     * The following arguments are optional:
     */
    permissionSetArn: pulumi.Input<string>;
    /**
     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
     */
    region?: pulumi.Input<string | undefined>;
    timeouts?: pulumi.Input<inputs.ssoadmin.ManagedPolicyAttachmentsExclusiveTimeouts | undefined>;
}
//# sourceMappingURL=managedPolicyAttachmentsExclusive.d.ts.map