import * as core from "@terrascript/core";
export interface EncryptionConfigurationArgs extends core.SchemaArgs {
    keyId: string | core.StringOut;
    type: string | core.StringOut;
}
export declare class EncryptionConfiguration extends core.Schema<EncryptionConfigurationArgs> {
    keyId: string | core.StringOut;
    type: string | core.StringOut;
}
export interface SubnetMappingArgs extends core.SchemaArgs {
    subnetId: string | core.StringOut;
}
export declare class SubnetMapping extends core.Schema<SubnetMappingArgs> {
    subnetId: string | core.StringOut;
}
export interface AttachmentArgs extends core.SchemaArgs {
    endpointId: string | core.StringOut;
    status: string | core.StringOut;
    subnetId: string | core.StringOut;
}
export declare class Attachment extends core.Schema<AttachmentArgs> {
    endpointId: string | core.StringOut;
    status: string | core.StringOut;
    subnetId: string | core.StringOut;
}
export interface SyncStatesArgs extends core.SchemaArgs {
    attachment: core.Array<Attachment> | core.ArrayOut<Attachment>;
    availabilityZone: string | core.StringOut;
}
export declare class SyncStates extends core.Schema<SyncStatesArgs> {
    attachment: core.Array<Attachment> | core.ArrayOut<Attachment>;
    availabilityZone: string | core.StringOut;
}
export interface IpSetReferencesArgs extends core.SchemaArgs {
    resolvedCidrCount: number | core.NumberOut;
}
export declare class IpSetReferences extends core.Schema<IpSetReferencesArgs> {
    resolvedCidrCount: number | core.NumberOut;
}
export interface CidrsArgs extends core.SchemaArgs {
    availableCidrCount: number | core.NumberOut;
    ipSetReferences: core.Array<IpSetReferences> | core.ArrayOut<IpSetReferences>;
    utilizedCidrCount: number | core.NumberOut;
}
export declare class Cidrs extends core.Schema<CidrsArgs> {
    availableCidrCount: number | core.NumberOut;
    ipSetReferences: core.Array<IpSetReferences> | core.ArrayOut<IpSetReferences>;
    utilizedCidrCount: number | core.NumberOut;
}
export interface CapacityUsageSummaryArgs extends core.SchemaArgs {
    cidrs: core.Array<Cidrs> | core.ArrayOut<Cidrs>;
}
export declare class CapacityUsageSummary extends core.Schema<CapacityUsageSummaryArgs> {
    cidrs: core.Array<Cidrs> | core.ArrayOut<Cidrs>;
}
export interface FirewallStatusArgs extends core.SchemaArgs {
    capacityUsageSummary: core.Array<CapacityUsageSummary> | core.ArrayOut<CapacityUsageSummary>;
    configurationSyncStateSummary: string | core.StringOut;
    status: string | core.StringOut;
    syncStates: core.Array<SyncStates> | core.ArrayOut<SyncStates>;
}
export declare class FirewallStatus extends core.Schema<FirewallStatusArgs> {
    capacityUsageSummary: core.Array<CapacityUsageSummary> | core.ArrayOut<CapacityUsageSummary>;
    configurationSyncStateSummary: string | core.StringOut;
    status: string | core.StringOut;
    syncStates: core.Array<SyncStates> | core.ArrayOut<SyncStates>;
}
export interface DsFirewallArgs {
    /**
     * The Amazon Resource Name (ARN) of the firewall.
     */
    arn?: string | core.StringOut;
    /**
     * The descriptive name of the firewall.
     */
    name?: string | core.StringOut;
    /**
     * Map of resource tags to associate with the resource. If configured with a provider [`default_tags` c
     * onfiguration block](/docs/providers/aws/index.html#default_tags-configuration-block) present, tags w
     * ith matching keys will overwrite those defined at the provider-level.
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
}
export declare class DsFirewall extends core.Data<DsFirewallArgs> {
    /**
     * The Amazon Resource Name (ARN) of the firewall.
     */
    arn?: string | core.StringOut;
    /**
     * A boolean flag indicating whether it is possible to delete the firewall.
     */
    deleteProtection: boolean | core.BooleanOut;
    /**
     * A description of the firewall.
     */
    description: string | core.StringOut;
    /**
     * AWS Key Management Service (AWS KMS) encryption settings for the firewall.
     */
    encryptionConfiguration: core.Array<EncryptionConfiguration> | core.ArrayOut<EncryptionConfiguration>;
    /**
     * The Amazon Resource Name (ARN) of the VPC Firewall policy.
     */
    firewallPolicyArn: string | core.StringOut;
    /**
     * A boolean flag indicating whether it is possible to change the associated firewall policy.
     */
    firewallPolicyChangeProtection: boolean | core.BooleanOut;
    /**
     * Nested list of information about the current status of the firewall.
     */
    firewallStatus: core.Array<FirewallStatus> | core.ArrayOut<FirewallStatus>;
    /**
     * The Amazon Resource Name (ARN) that identifies the firewall.
     */
    id: string | core.StringOut;
    /**
     * The descriptive name of the firewall.
     */
    name?: string | core.StringOut;
    /**
     * A boolean flag indicating whether it is possible to change the associated subnet(s).
     */
    subnetChangeProtection: boolean | core.BooleanOut;
    /**
     * Set of configuration blocks describing the public subnets. Each subnet must belong to a different Av
     * ailability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subnet.
     */
    subnetMapping: core.Array<SubnetMapping> | core.ArrayOut<SubnetMapping>;
    /**
     * Map of resource tags to associate with the resource. If configured with a provider [`default_tags` c
     * onfiguration block](/docs/providers/aws/index.html#default_tags-configuration-block) present, tags w
     * ith matching keys will overwrite those defined at the provider-level.
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A string token used when updating a firewall.
     */
    updateToken: string | core.StringOut;
    /**
     * The unique identifier of the VPC where AWS Network Firewall should create the firewall.
     */
    vpcId: string | core.StringOut;
    constructor(name: string, args?: DsFirewallArgs);
    getNamespace(): string;
}
//# sourceMappingURL=ds_firewall.d.ts.map