import * as core from "@terrascript/core";
export interface SourceArgs extends core.SchemaArgs {
    configuration: string | core.StringOut;
    name: string | core.StringOut;
    products: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export declare class Source extends core.Schema<SourceArgs> {
    configuration: string | core.StringOut;
    name: string | core.StringOut;
    products: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export interface GlobalFilterArgs extends core.SchemaArgs {
    key: string | core.StringOut;
    values: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export declare class GlobalFilter extends core.Schema<GlobalFilterArgs> {
    key: string | core.StringOut;
    values: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export interface PatchFilterArgs extends core.SchemaArgs {
    key: string | core.StringOut;
    values: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export declare class PatchFilter extends core.Schema<PatchFilterArgs> {
    key: string | core.StringOut;
    values: core.Array<string> | core.ArrayOut<core.StringOut>;
}
export interface ApprovalRuleArgs extends core.SchemaArgs {
    approveAfterDays?: number | core.NumberOut;
    approveUntilDate?: string | core.StringOut;
    complianceLevel?: string | core.StringOut;
    enableNonSecurity?: boolean | core.BooleanOut;
    patchFilter: core.Array<PatchFilter> | core.ArrayOut<PatchFilter>;
}
export declare class ApprovalRule extends core.Schema<ApprovalRuleArgs> {
    approveAfterDays?: number | core.NumberOut;
    approveUntilDate?: string | core.StringOut;
    complianceLevel?: string | core.StringOut;
    enableNonSecurity?: boolean | core.BooleanOut;
    patchFilter: core.Array<PatchFilter> | core.ArrayOut<PatchFilter>;
}
export interface PatchBaselineArgs extends core.ResourceArgs {
    /**
     * (Optional) A set of rules used to include patches in the baseline. up to 10 approval rules can be sp
     * ecified. Each approval_rule block requires the fields documented below.
     */
    approvalRule?: core.Array<ApprovalRule> | core.ArrayOut<ApprovalRule>;
    /**
     * (Optional) A list of explicitly approved patches for the baseline.
     */
    approvedPatches?: core.Array<string> | core.ArrayOut<core.StringOut>;
    /**
     * (Optional) Defines the compliance level for approved patches. This means that if an approved patch i
     * s reported as missing, this is the severity of the compliance violation. Valid compliance levels inc
     * lude the following: `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default
     * value is `UNSPECIFIED`.
     */
    approvedPatchesComplianceLevel?: string | core.StringOut;
    /**
     * (Optional) Indicates whether the list of approved patches includes non-security updates that should
     * be applied to the instances. Applies to Linux instances only.
     */
    approvedPatchesEnableNonSecurity?: boolean | core.BooleanOut;
    /**
     * (Optional) The description of the patch baseline.
     */
    description?: string | core.StringOut;
    /**
     * (Optional) A set of global filters used to exclude patches from the baseline. Up to 4 global filters
     * can be specified using Key/Value pairs. Valid Keys are `PRODUCT | CLASSIFICATION | MSRC_SEVERITY |
     * PATCH_ID`.
     */
    globalFilter?: core.Array<GlobalFilter> | core.ArrayOut<GlobalFilter>;
    /**
     * (Required) The name of the patch baseline.
     */
    name: string | core.StringOut;
    /**
     * (Optional) Defines the operating system the patch baseline applies to. Supported operating systems i
     * nclude `WINDOWS`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `SUSE`, `UBUNTU`, `CENTOS`, and `REDHAT_ENTERPRI
     * SE_LINUX`. The Default value is `WINDOWS`.
     */
    operatingSystem?: string | core.StringOut;
    /**
     * (Optional) A list of rejected patches.
     */
    rejectedPatches?: core.Array<string> | core.ArrayOut<core.StringOut>;
    /**
     * (Optional) The action for Patch Manager to take on patches included in the `rejected_patches` list.
     * Allow values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
     */
    rejectedPatchesAction?: string | core.StringOut;
    /**
     * (Optional) Configuration block(s) with alternate sources for patches. Applies to Linux instances onl
     * y. Documented below.
     */
    source?: core.Array<Source> | core.ArrayOut<Source>;
    /**
     * (Optional) A map of tags to assign to the resource. If configured with a provider [`default_tags` co
     * nfiguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-co
     * nfiguration-block) present, tags with matching keys will overwrite those defined at the provider-lev
     * el.
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
     * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
     * configuration-block).
     */
    tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
}
export declare class PatchBaseline extends core.Resource<PatchBaselineArgs> {
    /**
     * (Optional) A set of rules used to include patches in the baseline. up to 10 approval rules can be sp
     * ecified. Each approval_rule block requires the fields documented below.
     */
    approvalRule?: core.Array<ApprovalRule> | core.ArrayOut<ApprovalRule>;
    /**
     * (Optional) A list of explicitly approved patches for the baseline.
     */
    approvedPatches?: core.Array<string> | core.ArrayOut<core.StringOut>;
    /**
     * (Optional) Defines the compliance level for approved patches. This means that if an approved patch i
     * s reported as missing, this is the severity of the compliance violation. Valid compliance levels inc
     * lude the following: `CRITICAL`, `HIGH`, `MEDIUM`, `LOW`, `INFORMATIONAL`, `UNSPECIFIED`. The default
     * value is `UNSPECIFIED`.
     */
    approvedPatchesComplianceLevel?: string | core.StringOut;
    /**
     * (Optional) Indicates whether the list of approved patches includes non-security updates that should
     * be applied to the instances. Applies to Linux instances only.
     */
    approvedPatchesEnableNonSecurity?: boolean | core.BooleanOut;
    /**
     * The ARN of the patch baseline.
     */
    arn: string | core.StringOut;
    /**
     * (Optional) The description of the patch baseline.
     */
    description?: string | core.StringOut;
    /**
     * (Optional) A set of global filters used to exclude patches from the baseline. Up to 4 global filters
     * can be specified using Key/Value pairs. Valid Keys are `PRODUCT | CLASSIFICATION | MSRC_SEVERITY |
     * PATCH_ID`.
     */
    globalFilter?: core.Array<GlobalFilter> | core.ArrayOut<GlobalFilter>;
    /**
     * The ID of the patch baseline.
     */
    id: string | core.StringOut;
    /**
     * (Required) The name of the patch baseline.
     */
    name: string | core.StringOut;
    /**
     * (Optional) Defines the operating system the patch baseline applies to. Supported operating systems i
     * nclude `WINDOWS`, `AMAZON_LINUX`, `AMAZON_LINUX_2`, `SUSE`, `UBUNTU`, `CENTOS`, and `REDHAT_ENTERPRI
     * SE_LINUX`. The Default value is `WINDOWS`.
     */
    operatingSystem?: string | core.StringOut;
    /**
     * (Optional) A list of rejected patches.
     */
    rejectedPatches?: core.Array<string> | core.ArrayOut<core.StringOut>;
    /**
     * (Optional) The action for Patch Manager to take on patches included in the `rejected_patches` list.
     * Allow values are `ALLOW_AS_DEPENDENCY` and `BLOCK`.
     */
    rejectedPatchesAction?: string | core.StringOut;
    /**
     * (Optional) Configuration block(s) with alternate sources for patches. Applies to Linux instances onl
     * y. Documented below.
     */
    source?: core.Array<Source> | core.ArrayOut<Source>;
    /**
     * (Optional) A map of tags to assign to the resource. If configured with a provider [`default_tags` co
     * nfiguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-co
     * nfiguration-block) present, tags with matching keys will overwrite those defined at the provider-lev
     * el.
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
     * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
     * configuration-block).
     */
    tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
    constructor(name: string, args?: PatchBaselineArgs);
    getNamespace(): string;
}
//# sourceMappingURL=patch_baseline.d.ts.map