import * as core from "@terrascript/core";
export interface AccessKeyArgs extends core.ResourceArgs {
    /**
     * (Optional) Either a base-64 encoded PGP public key, or a keybase username in the form `keybase:some_
     * person_that_exists`, for use in the `encrypted_secret` output attribute.
     */
    pgpKey?: string | core.StringOut;
    /**
     * (Optional) Access key status to apply. Defaults to `Active`. Valid values are `Active` and `Inactive
     * .
     */
    status?: string | core.StringOut;
    /**
     * (Required) IAM user to associate with this access key.
     */
    user: string | core.StringOut;
}
export declare class AccessKey extends core.Resource<AccessKeyArgs> {
    /**
     * Date and time in [RFC3339 format](https://tools.ietf.org/html/rfc3339#section-5.8) that the access k
     * ey was created.
     */
    createDate: string | core.StringOut;
    /**
     * Encrypted secret, base64 encoded, if `pgp_key` was specified. This attribute is not available for im
     * ported resources. The encrypted secret may be decrypted using the command line, for example: `terraf
     * orm output -raw encrypted_secret | base64 --decode | keybase pgp decrypt`.
     */
    encryptedSecret: string | core.StringOut;
    /**
     * Encrypted SES SMTP password, base64 encoded, if `pgp_key` was specified. This attribute is not avail
     * able for imported resources. The encrypted password may be decrypted using the command line, for exa
     * mple: `terraform output -raw encrypted_ses_smtp_password_v4 | base64 --decode | keybase pgp decrypt`
     * .
     */
    encryptedSesSmtpPasswordV4: string | core.StringOut;
    /**
     * Access key ID.
     */
    id: string | core.StringOut;
    /**
     * Fingerprint of the PGP key used to encrypt the secret. This attribute is not available for imported
     * resources.
     */
    keyFingerprint: string | core.StringOut;
    /**
     * (Optional) Either a base-64 encoded PGP public key, or a keybase username in the form `keybase:some_
     * person_that_exists`, for use in the `encrypted_secret` output attribute.
     */
    pgpKey?: string | core.StringOut;
    /**
     * Secret access key. This attribute is not available for imported resources. Note that this will be wr
     * itten to the state file. If you use this, please protect your backend state file judiciously. Altern
     * atively, you may supply a `pgp_key` instead, which will prevent the secret from being stored in plai
     * ntext, at the cost of preventing the use of the secret key in automation.
     */
    secret: string | core.StringOut;
    /**
     * Secret access key converted into an SES SMTP password by applying [AWS's documented Sigv4 conversion
     * algorithm](https://docs.aws.amazon.com/ses/latest/DeveloperGuide/smtp-credentials.html#smtp-credent
     * ials-convert). This attribute is not available for imported resources. As SigV4 is region specific,
     * valid Provider regions are `ap-south-1`, `ap-southeast-2`, `eu-central-1`, `eu-west-1`, `us-east-1`
     * and `us-west-2`. See current [AWS SES regions](https://docs.aws.amazon.com/general/latest/gr/rande.h
     * tml#ses_region).
     */
    sesSmtpPasswordV4: string | core.StringOut;
    /**
     * (Optional) Access key status to apply. Defaults to `Active`. Valid values are `Active` and `Inactive
     * .
     */
    status?: string | core.StringOut;
    /**
     * (Required) IAM user to associate with this access key.
     */
    user: string | core.StringOut;
    constructor(name: string, args?: AccessKeyArgs);
    getNamespace(): string;
}
//# sourceMappingURL=access_key.d.ts.map