import * as core from "@terrascript/core";

export interface ServiceSpecificCredentialArgs extends core.ResourceArgs {
  /**
   * (Required) The name of the AWS service that is to be associated with the credentials. The service yo
   * u specify here is the only service that can be accessed using these credentials.
   */
  serviceName: string | core.StringOut;

  /**
   * (Optional) The status to be assigned to the service-specific credential. Valid values are `Active` a
   * nd `Inactive`. Default value is `Active`.
   */
  status?: string | core.StringOut;

  /**
   * (Required) The name of the IAM user that is to be associated with the credentials. The new service-s
   * pecific credentials have the same permissions as the associated user except that they can be used on
   * ly to access the specified service.
   */
  userName: string | core.StringOut;
}

export class ServiceSpecificCredential extends core.Resource<ServiceSpecificCredentialArgs> {
  /**
   * The combination of `service_name` and `user_name` as such: `service_name:user_name:service_specific_
   * credential_id`.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required) The name of the AWS service that is to be associated with the credentials. The service yo
   * u specify here is the only service that can be accessed using these credentials.
   */
  @core.attr(String)
  public serviceName!: string | core.StringOut;

  /**
   * The generated password for the service-specific credential.
   */
  @core.attr(String, { computed: true })
  public servicePassword!: string | core.StringOut;

  /**
   * The unique identifier for the service-specific credential.
   */
  @core.attr(String, { computed: true })
  public serviceSpecificCredentialId!: string | core.StringOut;

  /**
   * The generated user name for the service-specific credential. This value is generated by combining th
   * e IAM user's name combined with the ID number of the AWS account, as in `jane-at-123456789012`, for
   * example.
   */
  @core.attr(String, { computed: true })
  public serviceUserName!: string | core.StringOut;

  /**
   * (Optional) The status to be assigned to the service-specific credential. Valid values are `Active` a
   * nd `Inactive`. Default value is `Active`.
   */
  @core.attr(String)
  public status?: string | core.StringOut;

  /**
   * (Required) The name of the IAM user that is to be associated with the credentials. The new service-s
   * pecific credentials have the same permissions as the associated user except that they can be used on
   * ly to access the specified service.
   */
  @core.attr(String)
  public userName!: string | core.StringOut;

  constructor(name: string, args?: ServiceSpecificCredentialArgs) {
    super(name, "aws_iam_service_specific_credential", args);
  }

  public override getNamespace(): string {
    return "aws_iam";
  }
}