import * as core from "@terrascript/core";

export interface LogDestinationPolicyArgs extends core.ResourceArgs {
  /**
   * (Required) The policy document. This is a JSON formatted string.
   */
  accessPolicy: string | core.StringOut;

  /**
   * (Required) A name for the subscription filter
   */
  destinationName: string | core.StringOut;

  /**
   * (Optional) Specify true if you are updating an existing destination policy to grant permission to an
   * organization ID instead of granting permission to individual AWS accounts.
   */
  forceUpdate?: boolean | core.BooleanOut;
}

export class LogDestinationPolicy extends core.Resource<LogDestinationPolicyArgs> {
  /**
   * (Required) The policy document. This is a JSON formatted string.
   */
  @core.attr(String)
  public accessPolicy!: string | core.StringOut;

  /**
   * (Required) A name for the subscription filter
   */
  @core.attr(String)
  public destinationName!: string | core.StringOut;

  /**
   * (Optional) Specify true if you are updating an existing destination policy to grant permission to an
   * organization ID instead of granting permission to individual AWS accounts.
   */
  @core.attr(Boolean)
  public forceUpdate?: boolean | core.BooleanOut;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  constructor(name: string, args?: LogDestinationPolicyArgs) {
    super(name, "aws_cloudwatch_log_destination_policy", args);
  }

  public override getNamespace(): string {
    return "aws_cloudwatch";
  }
}