import * as core from "@terrascript/core";
export interface CognitoConfigArgs extends core.SchemaArgs {
    clientId: string | core.StringOut;
    userPool: string | core.StringOut;
}
export declare class CognitoConfig extends core.Schema<CognitoConfigArgs> {
    clientId: string | core.StringOut;
    userPool: string | core.StringOut;
}
export interface OidcConfigArgs extends core.SchemaArgs {
    authorizationEndpoint: string | core.StringOut;
    clientId: string | core.StringOut;
    clientSecret: string | core.StringOut;
    issuer: string | core.StringOut;
    jwksUri: string | core.StringOut;
    logoutEndpoint: string | core.StringOut;
    tokenEndpoint: string | core.StringOut;
    userInfoEndpoint: string | core.StringOut;
}
export declare class OidcConfig extends core.Schema<OidcConfigArgs> {
    authorizationEndpoint: string | core.StringOut;
    clientId: string | core.StringOut;
    clientSecret: string | core.StringOut;
    issuer: string | core.StringOut;
    jwksUri: string | core.StringOut;
    logoutEndpoint: string | core.StringOut;
    tokenEndpoint: string | core.StringOut;
    userInfoEndpoint: string | core.StringOut;
}
export interface SourceIpConfigArgs extends core.SchemaArgs {
    cidrs: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export declare class SourceIpConfig extends core.Schema<SourceIpConfigArgs> {
    cidrs: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export interface WorkforceArgs extends core.ResourceArgs {
    /**
     * (Required) Use this parameter to configure an Amazon Cognito private workforce. A single Cognito wor
     * kforce is created using and corresponds to a single Amazon Cognito user pool. Conflicts with `oidc_c
     * onfig`. see [Cognito Config](#cognito-config) details below.
     */
    cognitoConfig?: CognitoConfig;
    /**
     * (Required) Use this parameter to configure a private workforce using your own OIDC Identity Provider
     * . Conflicts with `cognito_config`. see [OIDC Config](#oidc-config) details below.
     */
    oidcConfig?: OidcConfig;
    /**
     * (Required) A list of IP address ranges Used to create an allow list of IP addresses for a private wo
     * rkforce. By default, a workforce isn't restricted to specific IP addresses. see [Source Ip Config](#
     * source-ip-config) details below.
     */
    sourceIpConfig?: SourceIpConfig;
    /**
     * (Required) The name of the Workforce (must be unique).
     */
    workforceName: string | core.StringOut;
}
export declare class Workforce extends core.Resource<WorkforceArgs> {
    /**
     * The Amazon Resource Name (ARN) assigned by AWS to this Workforce.
     */
    arn: string | core.StringOut;
    /**
     * (Required) Use this parameter to configure an Amazon Cognito private workforce. A single Cognito wor
     * kforce is created using and corresponds to a single Amazon Cognito user pool. Conflicts with `oidc_c
     * onfig`. see [Cognito Config](#cognito-config) details below.
     */
    cognitoConfig?: CognitoConfig;
    /**
     * The name of the Workforce.
     */
    id: string | core.StringOut;
    /**
     * (Required) Use this parameter to configure a private workforce using your own OIDC Identity Provider
     * . Conflicts with `cognito_config`. see [OIDC Config](#oidc-config) details below.
     */
    oidcConfig?: OidcConfig;
    /**
     * (Required) A list of IP address ranges Used to create an allow list of IP addresses for a private wo
     * rkforce. By default, a workforce isn't restricted to specific IP addresses. see [Source Ip Config](#
     * source-ip-config) details below.
     */
    sourceIpConfig?: SourceIpConfig;
    /**
     * The subdomain for your OIDC Identity Provider.
     */
    subdomain: string | core.StringOut;
    /**
     * (Required) The name of the Workforce (must be unique).
     */
    workforceName: string | core.StringOut;
    constructor(name: string, args?: WorkforceArgs);
    getNamespace(): string;
}
//# sourceMappingURL=workforce.d.ts.map