import * as core from "@terrascript/core";

export interface ServiceLinkedRoleArgs extends core.ResourceArgs {
  /**
   * (Required, Forces new resource) The AWS service to which this role is attached. You use a string sim
   * ilar to a URL but without the `http://` in front. For example: `elasticbeanstalk.amazonaws.com`. To
   * find the full list of services that support service-linked roles, check [the docs](https://docs.aws.
   * amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html).
   */
  awsServiceName: string | core.StringOut;

  /**
   * (Optional, forces new resource) Additional string appended to the role name. Not all AWS services su
   * pport custom suffixes.
   */
  customSuffix?: string | core.StringOut;

  /**
   * (Optional) The description of the role.
   */
  description?: string | core.StringOut;

  /**
   * Key-value mapping of tags for the IAM role. If configured with a provider [`default_tags` configurat
   * ion block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configurat
   * ion-block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
}

export class ServiceLinkedRole extends core.Resource<ServiceLinkedRoleArgs> {
  /**
   * The Amazon Resource Name (ARN) specifying the role.
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Required, Forces new resource) The AWS service to which this role is attached. You use a string sim
   * ilar to a URL but without the `http://` in front. For example: `elasticbeanstalk.amazonaws.com`. To
   * find the full list of services that support service-linked roles, check [the docs](https://docs.aws.
   * amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html).
   */
  @core.attr(String)
  public awsServiceName!: string | core.StringOut;

  /**
   * The creation date of the IAM role.
   */
  @core.attr(String, { computed: true })
  public createDate!: string | core.StringOut;

  /**
   * (Optional, forces new resource) Additional string appended to the role name. Not all AWS services su
   * pport custom suffixes.
   */
  @core.attr(String)
  public customSuffix?: string | core.StringOut;

  /**
   * (Optional) The description of the role.
   */
  @core.attr(String)
  public description?: string | core.StringOut;

  /**
   * The Amazon Resource Name (ARN) of the role.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * The name of the role.
   */
  @core.attr(String, { computed: true })
  public name!: string | core.StringOut;

  /**
   * The path of the role.
   */
  @core.attr(String, { computed: true })
  public path!: string | core.StringOut;

  /**
   * Key-value mapping of tags for the IAM role. If configured with a provider [`default_tags` configurat
   * ion block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configurat
   * ion-block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * The stable and unique string identifying the role.
   */
  @core.attr(String, { computed: true })
  public uniqueId!: string | core.StringOut;

  constructor(name: string, args?: ServiceLinkedRoleArgs) {
    super(name, "aws_iam_service_linked_role", args);
  }

  public override getNamespace(): string {
    return "aws_iam";
  }
}