import * as core from "@terrascript/core";

export interface OpenidConnectProviderArgs extends core.ResourceArgs {
  /**
   * (Required) A list of client IDs (also known as audiences). When a mobile or web app registers with a
   * n OpenID Connect provider, they establish a value that identifies the application. (This is the valu
   * e that's sent as the client_id parameter on OAuth requests.)
   */
  clientIdList: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) Map of resource tags for the IAM OIDC provider. If configured with a provider [`default_t
   * ags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_
   * tags-configuration-block) present, tags with matching keys will overwrite those defined at the provi
   * der-level.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Required) A list of server certificate thumbprints for the OpenID Connect (OIDC) identity provider'
   * s server certificate(s).
   */
  thumbprintList: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Required) The URL of the identity provider. Corresponds to the _iss_ claim.
   */
  url: string | core.StringOut;
}

export class OpenidConnectProvider extends core.Resource<OpenidConnectProviderArgs> {
  /**
   * The ARN assigned by AWS for this provider.
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Required) A list of client IDs (also known as audiences). When a mobile or web app registers with a
   * n OpenID Connect provider, they establish a value that identifies the application. (This is the valu
   * e that's sent as the client_id parameter on OAuth requests.)
   */
  @core.attr(String, { kind: "array" })
  public clientIdList!: core.Array<string> | core.ArrayOut<core.StringOut>;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Optional) Map of resource tags for the IAM OIDC provider. If configured with a provider [`default_t
   * ags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_
   * tags-configuration-block) present, tags with matching keys will overwrite those defined at the provi
   * der-level.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Required) A list of server certificate thumbprints for the OpenID Connect (OIDC) identity provider'
   * s server certificate(s).
   */
  @core.attr(String, { kind: "array" })
  public thumbprintList!: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Required) The URL of the identity provider. Corresponds to the _iss_ claim.
   */
  @core.attr(String)
  public url!: string | core.StringOut;

  constructor(name: string, args?: OpenidConnectProviderArgs) {
    super(name, "aws_iam_openid_connect_provider", args);
  }

  public override getNamespace(): string {
    return "aws_iam";
  }
}