import * as core from "@terrascript/core";

export interface VaultPolicyArgs extends core.ResourceArgs {
  /**
   * (Required) Name of the backup vault to add policy for.
   */
  backupVaultName: string | core.StringOut;

  /**
   * (Required) The backup vault access policy document in JSON format.
   */
  policy: string | core.StringOut;
}

export class VaultPolicy extends core.Resource<VaultPolicyArgs> {
  /**
   * The ARN of the vault.
   */
  @core.attr(String, { computed: true })
  public backupVaultArn!: string | core.StringOut;

  /**
   * (Required) Name of the backup vault to add policy for.
   */
  @core.attr(String)
  public backupVaultName!: string | core.StringOut;

  /**
   * The name of the vault.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required) The backup vault access policy document in JSON format.
   */
  @core.attr(String)
  public policy!: string | core.StringOut;

  constructor(name: string, args?: VaultPolicyArgs) {
    super(name, "aws_backup_vault_policy", args);
  }

  public override getNamespace(): string {
    return "aws_backup";
  }
}