import * as core from "@terrascript/core";

export interface UserArgs extends core.ResourceArgs {
  /**
   * (Optional, default false) When destroying this user, destroy even if it
   */
  forceDestroy?: boolean | core.BooleanOut;

  /**
   * (Required) The user's name. The name must consist of upper and lowercase alphanumeric characters wit
   * h no spaces. You can also include any of the following characters: `=,.@-_.`. User names are not dis
   * tinguished by case. For example, you cannot create users named both "TESTUSER" and "testuser".
   */
  name: string | core.StringOut;

  /**
   * (Optional, default "/") Path in which to create the user.
   */
  path?: string | core.StringOut;

  /**
   * (Optional) The ARN of the policy that is used to set the permissions boundary for the user.
   */
  permissionsBoundary?: string | core.StringOut;

  /**
   * Key-value map of tags for the IAM user. If configured with a provider [`default_tags` configuration
   * block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configuration-
   * block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
}

export class User extends core.Resource<UserArgs> {
  /**
   * The ARN assigned by AWS for this user.
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Optional, default false) When destroying this user, destroy even if it
   */
  @core.attr(Boolean)
  public forceDestroy?: boolean | core.BooleanOut;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required) The user's name. The name must consist of upper and lowercase alphanumeric characters wit
   * h no spaces. You can also include any of the following characters: `=,.@-_.`. User names are not dis
   * tinguished by case. For example, you cannot create users named both "TESTUSER" and "testuser".
   */
  @core.attr(String)
  public name!: string | core.StringOut;

  /**
   * (Optional, default "/") Path in which to create the user.
   */
  @core.attr(String)
  public path?: string | core.StringOut;

  /**
   * (Optional) The ARN of the policy that is used to set the permissions boundary for the user.
   */
  @core.attr(String)
  public permissionsBoundary?: string | core.StringOut;

  /**
   * Key-value map of tags for the IAM user. If configured with a provider [`default_tags` configuration
   * block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configuration-
   * block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * The [unique ID][1] assigned by AWS.
   */
  @core.attr(String, { computed: true })
  public uniqueId!: string | core.StringOut;

  constructor(name: string, args?: UserArgs) {
    super(name, "aws_iam_user", args);
  }

  public override getNamespace(): string {
    return "aws_iam";
  }
}