import * as core from "@terrascript/core";
export interface SubnetMappingArgs extends core.SchemaArgs {
    subnetId: string | core.StringOut;
}
export declare class SubnetMapping extends core.Schema<SubnetMappingArgs> {
    subnetId: string | core.StringOut;
}
export interface AttachmentArgs extends core.SchemaArgs {
    endpointId: string | core.StringOut;
    subnetId: string | core.StringOut;
}
export declare class Attachment extends core.Schema<AttachmentArgs> {
    endpointId: string | core.StringOut;
    subnetId: string | core.StringOut;
}
export interface SyncStatesArgs extends core.SchemaArgs {
    attachment: core.Array<Attachment> | core.ArrayOut<Attachment>;
    availabilityZone: string | core.StringOut;
}
export declare class SyncStates extends core.Schema<SyncStatesArgs> {
    attachment: core.Array<Attachment> | core.ArrayOut<Attachment>;
    availabilityZone: string | core.StringOut;
}
export interface FirewallStatusArgs extends core.SchemaArgs {
    syncStates: core.Array<SyncStates> | core.ArrayOut<SyncStates>;
}
export declare class FirewallStatus extends core.Schema<FirewallStatusArgs> {
    syncStates: core.Array<SyncStates> | core.ArrayOut<SyncStates>;
}
export interface FirewallArgs extends core.ResourceArgs {
    /**
     * (Optional) A boolean flag indicating whether it is possible to delete the firewall. Defaults to `fal
     * se`.
     */
    deleteProtection?: boolean | core.BooleanOut;
    /**
     * (Optional) A friendly description of the firewall.
     */
    description?: string | core.StringOut;
    /**
     * (Required) The Amazon Resource Name (ARN) of the VPC Firewall policy.
     */
    firewallPolicyArn: string | core.StringOut;
    /**
     * (Option) A boolean flag indicating whether it is possible to change the associated firewall policy.
     * Defaults to `false`.
     */
    firewallPolicyChangeProtection?: boolean | core.BooleanOut;
    /**
     * (Required, Forces new resource) A friendly name of the firewall.
     */
    name: string | core.StringOut;
    /**
     * (Optional) A boolean flag indicating whether it is possible to change the associated subnet(s). Defa
     * ults to `false`.
     */
    subnetChangeProtection?: boolean | core.BooleanOut;
    /**
     * (Required) Set of configuration blocks describing the public subnets. Each subnet must belong to a d
     * ifferent Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subn
     * et. See [Subnet Mapping](#subnet-mapping) below for details.
     */
    subnetMapping: core.Array<SubnetMapping> | core.ArrayOut<SubnetMapping>;
    /**
     * (Optional) Map of resource tags to associate with the resource. If configured with a provider [`defa
     * ult_tags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#def
     * ault_tags-configuration-block) present, tags with matching keys will overwrite those defined at the
     * provider-level.
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
     * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
     * configuration-block).
     */
    tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * (Required, Forces new resource) The unique identifier of the VPC where AWS Network Firewall should c
     * reate the firewall.
     */
    vpcId: string | core.StringOut;
}
export declare class Firewall extends core.Resource<FirewallArgs> {
    /**
     * The Amazon Resource Name (ARN) that identifies the firewall.
     */
    arn: string | core.StringOut;
    /**
     * (Optional) A boolean flag indicating whether it is possible to delete the firewall. Defaults to `fal
     * se`.
     */
    deleteProtection?: boolean | core.BooleanOut;
    /**
     * (Optional) A friendly description of the firewall.
     */
    description?: string | core.StringOut;
    /**
     * (Required) The Amazon Resource Name (ARN) of the VPC Firewall policy.
     */
    firewallPolicyArn: string | core.StringOut;
    /**
     * (Option) A boolean flag indicating whether it is possible to change the associated firewall policy.
     * Defaults to `false`.
     */
    firewallPolicyChangeProtection?: boolean | core.BooleanOut;
    /**
     * Nested list of information about the current status of the firewall.
     */
    firewallStatus: core.Array<FirewallStatus> | core.ArrayOut<FirewallStatus>;
    /**
     * The Amazon Resource Name (ARN) that identifies the firewall.
     */
    id: string | core.StringOut;
    /**
     * (Required, Forces new resource) A friendly name of the firewall.
     */
    name: string | core.StringOut;
    /**
     * (Optional) A boolean flag indicating whether it is possible to change the associated subnet(s). Defa
     * ults to `false`.
     */
    subnetChangeProtection?: boolean | core.BooleanOut;
    /**
     * (Required) Set of configuration blocks describing the public subnets. Each subnet must belong to a d
     * ifferent Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subn
     * et. See [Subnet Mapping](#subnet-mapping) below for details.
     */
    subnetMapping: core.Array<SubnetMapping> | core.ArrayOut<SubnetMapping>;
    /**
     * (Optional) Map of resource tags to associate with the resource. If configured with a provider [`defa
     * ult_tags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#def
     * ault_tags-configuration-block) present, tags with matching keys will overwrite those defined at the
     * provider-level.
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
     * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
     * configuration-block).
     */
    tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A string token used when updating a firewall.
     */
    updateToken: string | core.StringOut;
    /**
     * (Required, Forces new resource) The unique identifier of the VPC where AWS Network Firewall should c
     * reate the firewall.
     */
    vpcId: string | core.StringOut;
    constructor(name: string, args?: FirewallArgs);
    getNamespace(): string;
}
//# sourceMappingURL=firewall.d.ts.map