import * as core from "@terrascript/core";
export interface KeySigningKeyArgs extends core.ResourceArgs {
    /**
     * (Required) Identifier of the Route 53 Hosted Zone.
     */
    hostedZoneId: string | core.StringOut;
    /**
     * (Required) Amazon Resource Name (ARN) of the Key Management Service (KMS) Key. This must be unique f
     * or each key-signing key (KSK) in a single hosted zone. This key must be in the `us-east-1` Region an
     * d meet certain requirements, which are described in the [Route 53 Developer Guide](https://docs.aws.
     * amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-cmk-requirements.html) and [Route 53
     * API Reference](https://docs.aws.amazon.com/Route53/latest/APIReference/API_CreateKeySigningKey.html
     * ).
     */
    keyManagementServiceArn: string | core.StringOut;
    /**
     * (Required) Name of the key-signing key (KSK). Must be unique for each key-singing key in the same ho
     * sted zone.
     */
    name: string | core.StringOut;
    /**
     * (Optional) Status of the key-signing key (KSK). Valid values: `ACTIVE`, `INACTIVE`. Defaults to `ACT
     * IVE`.
     */
    status?: string | core.StringOut;
}
export declare class KeySigningKey extends core.Resource<KeySigningKeyArgs> {
    /**
     * A string used to represent the delegation signer digest algorithm. This value must follow the guidel
     * ines provided by [RFC-8624 Section 3.3](https://tools.ietf.org/html/rfc8624#section-3.3).
     */
    digestAlgorithmMnemonic: string | core.StringOut;
    /**
     * An integer used to represent the delegation signer digest algorithm. This value must follow the guid
     * elines provided by [RFC-8624 Section 3.3](https://tools.ietf.org/html/rfc8624#section-3.3).
     */
    digestAlgorithmType: number | core.NumberOut;
    /**
     * A cryptographic digest of a DNSKEY resource record (RR). DNSKEY records are used to publish the publ
     * ic key that resolvers can use to verify DNSSEC signatures that are used to secure certain kinds of i
     * nformation provided by the DNS system.
     */
    digestValue: string | core.StringOut;
    /**
     * A string that represents a DNSKEY record.
     */
    dnskeyRecord: string | core.StringOut;
    /**
     * A string that represents a delegation signer (DS) record.
     */
    dsRecord: string | core.StringOut;
    /**
     * An integer that specifies how the key is used. For key-signing key (KSK), this value is always 257.
     */
    flag: number | core.NumberOut;
    /**
     * (Required) Identifier of the Route 53 Hosted Zone.
     */
    hostedZoneId: string | core.StringOut;
    /**
     * Route 53 Hosted Zone identifier and KMS Key identifier, separated by a comma (`,`).
     */
    id: string | core.StringOut;
    /**
     * (Required) Amazon Resource Name (ARN) of the Key Management Service (KMS) Key. This must be unique f
     * or each key-signing key (KSK) in a single hosted zone. This key must be in the `us-east-1` Region an
     * d meet certain requirements, which are described in the [Route 53 Developer Guide](https://docs.aws.
     * amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-cmk-requirements.html) and [Route 53
     * API Reference](https://docs.aws.amazon.com/Route53/latest/APIReference/API_CreateKeySigningKey.html
     * ).
     */
    keyManagementServiceArn: string | core.StringOut;
    /**
     * An integer used to identify the DNSSEC record for the domain name. The process used to calculate the
     * value is described in [RFC-4034 Appendix B](https://tools.ietf.org/rfc/rfc4034.txt).
     */
    keyTag: number | core.NumberOut;
    /**
     * (Required) Name of the key-signing key (KSK). Must be unique for each key-singing key in the same ho
     * sted zone.
     */
    name: string | core.StringOut;
    /**
     * The public key, represented as a Base64 encoding, as required by [RFC-4034 Page 5](https://tools.iet
     * f.org/rfc/rfc4034.txt).
     */
    publicKey: string | core.StringOut;
    /**
     * A string used to represent the signing algorithm. This value must follow the guidelines provided by
     * [RFC-8624 Section 3.1](https://tools.ietf.org/html/rfc8624#section-3.1).
     */
    signingAlgorithmMnemonic: string | core.StringOut;
    /**
     * An integer used to represent the signing algorithm. This value must follow the guidelines provided b
     * y [RFC-8624 Section 3.1](https://tools.ietf.org/html/rfc8624#section-3.1).
     */
    signingAlgorithmType: number | core.NumberOut;
    /**
     * (Optional) Status of the key-signing key (KSK). Valid values: `ACTIVE`, `INACTIVE`. Defaults to `ACT
     * IVE`.
     */
    status?: string | core.StringOut;
    constructor(name: string, args?: KeySigningKeyArgs);
    getNamespace(): string;
}
//# sourceMappingURL=key_signing_key.d.ts.map