import * as core from "@terrascript/core";
export interface EgressArgs extends core.SchemaArgs {
    cidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    description?: string | core.StringOut;
    fromPort: number | core.NumberOut;
    ipv6CidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    prefixListIds?: core.Array<string> | core.ArrayOut<core.StringOut>;
    protocol: string | core.StringOut;
    securityGroups?: core.Array<string> | core.ArrayOut<core.StringOut>;
    self?: boolean | core.BooleanOut;
    toPort: number | core.NumberOut;
}
export declare class Egress extends core.Schema<EgressArgs> {
    cidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    description?: string | core.StringOut;
    fromPort: number | core.NumberOut;
    ipv6CidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    prefixListIds?: core.Array<string> | core.ArrayOut<core.StringOut>;
    protocol: string | core.StringOut;
    securityGroups?: core.Array<string> | core.ArrayOut<core.StringOut>;
    self?: boolean | core.BooleanOut;
    toPort: number | core.NumberOut;
}
export interface IngressArgs extends core.SchemaArgs {
    cidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    description?: string | core.StringOut;
    fromPort: number | core.NumberOut;
    ipv6CidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    prefixListIds?: core.Array<string> | core.ArrayOut<core.StringOut>;
    protocol: string | core.StringOut;
    securityGroups?: core.Array<string> | core.ArrayOut<core.StringOut>;
    self?: boolean | core.BooleanOut;
    toPort: number | core.NumberOut;
}
export declare class Ingress extends core.Schema<IngressArgs> {
    cidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    description?: string | core.StringOut;
    fromPort: number | core.NumberOut;
    ipv6CidrBlocks?: core.Array<string> | core.ArrayOut<core.StringOut>;
    prefixListIds?: core.Array<string> | core.ArrayOut<core.StringOut>;
    protocol: string | core.StringOut;
    securityGroups?: core.Array<string> | core.ArrayOut<core.StringOut>;
    self?: boolean | core.BooleanOut;
    toPort: number | core.NumberOut;
}
export interface SecurityGroupArgs extends core.ResourceArgs {
    /**
     * (Optional, Forces new resource) Security group description. Defaults to `Managed by Terraform`. Cann
     * ot be `""`. __NOTE__: This field maps to the AWS `GroupDescription` attribute, for which there is no
     * Update API. If you'd like to classify your security groups in a way that can be updated, use `tags`
     * .
     */
    description?: string | core.StringOut;
    /**
     * (Optional, VPC only) Configuration block for egress rules. Can be specified multiple times for each
     * egress rule. Each egress block supports fields documented below. This argument is processed in [attr
     * ibute-as-blocks mode](https://www.terraform.io/docs/configuration/attr-as-blocks.html).
     */
    egress?: core.Array<Egress> | core.ArrayOut<Egress>;
    /**
     * (Optional) Configuration block for ingress rules. Can be specified multiple times for each ingress r
     * ule. Each ingress block supports fields documented below. This argument is processed in [attribute-a
     * s-blocks mode](https://www.terraform.io/docs/configuration/attr-as-blocks.html).
     */
    ingress?: core.Array<Ingress> | core.ArrayOut<Ingress>;
    /**
     * (Optional, Forces new resource) Name of the security group. If omitted, Terraform will assign a rand
     * om, unique name.
     */
    name?: string | core.StringOut;
    /**
     * (Optional, Forces new resource) Creates a unique name beginning with the specified prefix. Conflicts
     * with `name`.
     */
    namePrefix?: string | core.StringOut;
    /**
     * (Optional) Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules
     * before deleting the rule itself. This is normally not needed, however certain AWS services such as
     * Elastic Map Reduce may automatically add required rules to security groups used with the service, an
     * d those rules may contain a cyclic dependency that prevent the security groups from being destroyed
     * without removing the dependency first. Default `false`.
     */
    revokeRulesOnDelete?: boolean | core.BooleanOut;
    /**
     * (Optional) Map of tags to assign to the resource. If configured with a provider [`default_tags` conf
     * iguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-conf
     * iguration-block) present, tags with matching keys will overwrite those defined at the provider-level
     * .
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
     * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
     * configuration-block).
     */
    tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * (Optional, Forces new resource) VPC ID.
     */
    vpcId?: string | core.StringOut;
}
export declare class SecurityGroup extends core.Resource<SecurityGroupArgs> {
    /**
     * ARN of the security group.
     */
    arn: string | core.StringOut;
    /**
     * (Optional, Forces new resource) Security group description. Defaults to `Managed by Terraform`. Cann
     * ot be `""`. __NOTE__: This field maps to the AWS `GroupDescription` attribute, for which there is no
     * Update API. If you'd like to classify your security groups in a way that can be updated, use `tags`
     * .
     */
    description?: string | core.StringOut;
    /**
     * (Optional, VPC only) Configuration block for egress rules. Can be specified multiple times for each
     * egress rule. Each egress block supports fields documented below. This argument is processed in [attr
     * ibute-as-blocks mode](https://www.terraform.io/docs/configuration/attr-as-blocks.html).
     */
    egress?: core.Array<Egress> | core.ArrayOut<Egress>;
    /**
     * ID of the security group.
     */
    id: string | core.StringOut;
    /**
     * (Optional) Configuration block for ingress rules. Can be specified multiple times for each ingress r
     * ule. Each ingress block supports fields documented below. This argument is processed in [attribute-a
     * s-blocks mode](https://www.terraform.io/docs/configuration/attr-as-blocks.html).
     */
    ingress?: core.Array<Ingress> | core.ArrayOut<Ingress>;
    /**
     * (Optional, Forces new resource) Name of the security group. If omitted, Terraform will assign a rand
     * om, unique name.
     */
    name?: string | core.StringOut;
    /**
     * (Optional, Forces new resource) Creates a unique name beginning with the specified prefix. Conflicts
     * with `name`.
     */
    namePrefix?: string | core.StringOut;
    /**
     * Owner ID.
     */
    ownerId: string | core.StringOut;
    /**
     * (Optional) Instruct Terraform to revoke all of the Security Groups attached ingress and egress rules
     * before deleting the rule itself. This is normally not needed, however certain AWS services such as
     * Elastic Map Reduce may automatically add required rules to security groups used with the service, an
     * d those rules may contain a cyclic dependency that prevent the security groups from being destroyed
     * without removing the dependency first. Default `false`.
     */
    revokeRulesOnDelete?: boolean | core.BooleanOut;
    /**
     * (Optional) Map of tags to assign to the resource. If configured with a provider [`default_tags` conf
     * iguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-conf
     * iguration-block) present, tags with matching keys will overwrite those defined at the provider-level
     * .
     */
    tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
     * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
     * configuration-block).
     */
    tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
    /**
     * (Optional, Forces new resource) VPC ID.
     */
    vpcId?: string | core.StringOut;
    constructor(name: string, args?: SecurityGroupArgs);
    getNamespace(): string;
}
//# sourceMappingURL=security_group.d.ts.map