import * as core from "@terrascript/core";

export interface DsOpenidConnectProviderArgs {
  /**
   * (Optional) The Amazon Resource Name (ARN) specifying the OpenID Connect provider.
   */
  arn?: string | core.StringOut;

  /**
   * Map of resource tags for the IAM OIDC provider.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Optional) The URL of the OpenID Connect provider.
   */
  url?: string | core.StringOut;
}

export class DsOpenidConnectProvider extends core.Data<DsOpenidConnectProviderArgs> {
  /**
   * (Optional) The Amazon Resource Name (ARN) specifying the OpenID Connect provider.
   */
  @core.attr(String, { computed: true })
  public arn?: string | core.StringOut;

  /**
   * A list of client IDs (also known as audiences). When a mobile or web app registers with an OpenID Co
   * nnect provider, they establish a value that identifies the application. (This is the value that's se
   * nt as the client_id parameter on OAuth requests.)
   */
  @core.attr(String, { computed: true, kind: "array" })
  public clientIdList!: core.Array<string> | core.ArrayOut<core.StringOut>;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * Map of resource tags for the IAM OIDC provider.
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A list of server certificate thumbprints for the OpenID Connect (OIDC) identity provider's server ce
   * rtificate(s).
   */
  @core.attr(String, { computed: true, kind: "array" })
  public thumbprintList!: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) The URL of the OpenID Connect provider.
   */
  @core.attr(String, { computed: true })
  public url?: string | core.StringOut;

  constructor(name: string, args?: DsOpenidConnectProviderArgs) {
    super(name, "aws_iam_openid_connect_provider", args);
  }

  public override getNamespace(): string {
    return "aws_iam";
  }
}