import * as core from "@terrascript/core";

export interface CrlConfigurationArgs extends core.SchemaArgs {
  customCname: string | core.StringOut;

  enabled: boolean | core.BooleanOut;

  expirationInDays: number | core.NumberOut;

  s3BucketName: string | core.StringOut;

  s3ObjectAcl: string | core.StringOut;
}

export class CrlConfiguration extends core.Schema<CrlConfigurationArgs> {
  @core.attr(String, { computed: true })
  public customCname!: string | core.StringOut;

  @core.attr(Boolean, { computed: true })
  public enabled!: boolean | core.BooleanOut;

  @core.attr(Number, { computed: true })
  public expirationInDays!: number | core.NumberOut;

  @core.attr(String, { computed: true })
  public s3BucketName!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public s3ObjectAcl!: string | core.StringOut;
}

export interface OcspConfigurationArgs extends core.SchemaArgs {
  enabled: boolean | core.BooleanOut;

  ocspCustomCname: string | core.StringOut;
}

export class OcspConfiguration extends core.Schema<OcspConfigurationArgs> {
  @core.attr(Boolean, { computed: true })
  public enabled!: boolean | core.BooleanOut;

  @core.attr(String, { computed: true })
  public ocspCustomCname!: string | core.StringOut;
}

export interface RevocationConfigurationArgs extends core.SchemaArgs {
  crlConfiguration?:
    | core.Array<CrlConfiguration>
    | core.ArrayOut<CrlConfiguration>;

  ocspConfiguration?:
    | core.Array<OcspConfiguration>
    | core.ArrayOut<OcspConfiguration>;
}

export class RevocationConfiguration extends core.Schema<RevocationConfigurationArgs> {
  @core.attr(CrlConfiguration, { computed: true, kind: "array" })
  public crlConfiguration?:
    | core.Array<CrlConfiguration>
    | core.ArrayOut<CrlConfiguration>;

  @core.attr(OcspConfiguration, { computed: true, kind: "array" })
  public ocspConfiguration?:
    | core.Array<OcspConfiguration>
    | core.ArrayOut<OcspConfiguration>;
}

export interface DsCertificateAuthorityArgs {
  /**
   * (Required) Amazon Resource Name (ARN) of the certificate authority.
   */
  arn: string | core.StringOut;

  /**
   * Nested attribute containing revocation configuration.
   */
  revocationConfiguration?:
    | core.Array<RevocationConfiguration>
    | core.ArrayOut<RevocationConfiguration>;

  /**
   * Specifies a key-value map of user-defined tags that are attached to the certificate authority.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
}

export class DsCertificateAuthority extends core.Data<DsCertificateAuthorityArgs> {
  /**
   * (Required) Amazon Resource Name (ARN) of the certificate authority.
   */
  @core.attr(String)
  public arn!: string | core.StringOut;

  /**
   * Base64-encoded certificate authority (CA) certificate. Only available after the certificate authorit
   * y certificate has been imported.
   */
  @core.attr(String, { computed: true })
  public certificate!: string | core.StringOut;

  /**
   * Base64-encoded certificate chain that includes any intermediate certificates and chains up to root o
   * n-premises certificate that you used to sign your private CA certificate. The chain does not include
   * your private CA certificate. Only available after the certificate authority certificate has been im
   * ported.
   */
  @core.attr(String, { computed: true })
  public certificateChain!: string | core.StringOut;

  /**
   * The base64 PEM-encoded certificate signing request (CSR) for your private CA certificate.
   */
  @core.attr(String, { computed: true })
  public certificateSigningRequest!: string | core.StringOut;

  /**
   * Amazon Resource Name (ARN) of the certificate authority.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * Date and time after which the certificate authority is not valid. Only available after the certifica
   * te authority certificate has been imported.
   */
  @core.attr(String, { computed: true })
  public notAfter!: string | core.StringOut;

  /**
   * Date and time before which the certificate authority is not valid. Only available after the certific
   * ate authority certificate has been imported.
   */
  @core.attr(String, { computed: true })
  public notBefore!: string | core.StringOut;

  /**
   * Nested attribute containing revocation configuration.
   */
  @core.attr(RevocationConfiguration, { computed: true, kind: "array" })
  public revocationConfiguration?:
    | core.Array<RevocationConfiguration>
    | core.ArrayOut<RevocationConfiguration>;

  /**
   * Serial number of the certificate authority. Only available after the certificate authority certifica
   * te has been imported.
   */
  @core.attr(String, { computed: true })
  public serial!: string | core.StringOut;

  /**
   * Status of the certificate authority.
   */
  @core.attr(String, { computed: true })
  public status!: string | core.StringOut;

  /**
   * Specifies a key-value map of user-defined tags that are attached to the certificate authority.
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * The type of the certificate authority.
   */
  @core.attr(String, { computed: true })
  public type!: string | core.StringOut;

  constructor(name: string, args?: DsCertificateAuthorityArgs) {
    super(name, "aws_acmpca_certificate_authority", args);
  }

  public override getNamespace(): string {
    return "aws_acmpca";
  }
}