import * as core from "@terrascript/core";

export interface UserLoginProfileArgs extends core.ResourceArgs {
  /**
   * (Optional) The length of the generated password on resource creation. Only applies on resource creat
   * ion. Drift detection is not possible with this argument. Default value is `20`.
   */
  passwordLength?: number | core.NumberOut;

  /**
   * (Optional) Whether the user should be forced to reset the generated password on resource creation. O
   * nly applies on resource creation.
   */
  passwordResetRequired?: boolean | core.BooleanOut;

  /**
   * (Optional) Either a base-64 encoded PGP public key, or a keybase username in the form `keybase:usern
   * ame`. Only applies on resource creation. Drift detection is not possible with this argument.
   */
  pgpKey?: string | core.StringOut;

  /**
   * (Required) The IAM user's name.
   */
  user: string | core.StringOut;
}

export class UserLoginProfile extends core.Resource<UserLoginProfileArgs> {
  /**
   * The encrypted password, base64 encoded. Only available if password was handled on Terraform resource
   * creation, not import.
   */
  @core.attr(String, { computed: true })
  public encryptedPassword!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * The fingerprint of the PGP key used to encrypt the password. Only available if password was handled
   * on Terraform resource creation, not import.
   */
  @core.attr(String, { computed: true })
  public keyFingerprint!: string | core.StringOut;

  /**
   * The plain text password, only available when `pgp_key` is not provided.
   */
  @core.attr(String, { computed: true })
  public password!: string | core.StringOut;

  /**
   * (Optional) The length of the generated password on resource creation. Only applies on resource creat
   * ion. Drift detection is not possible with this argument. Default value is `20`.
   */
  @core.attr(Number)
  public passwordLength?: number | core.NumberOut;

  /**
   * (Optional) Whether the user should be forced to reset the generated password on resource creation. O
   * nly applies on resource creation.
   */
  @core.attr(Boolean, { computed: true })
  public passwordResetRequired?: boolean | core.BooleanOut;

  /**
   * (Optional) Either a base-64 encoded PGP public key, or a keybase username in the form `keybase:usern
   * ame`. Only applies on resource creation. Drift detection is not possible with this argument.
   */
  @core.attr(String)
  public pgpKey?: string | core.StringOut;

  /**
   * (Required) The IAM user's name.
   */
  @core.attr(String)
  public user!: string | core.StringOut;

  constructor(name: string, args?: UserLoginProfileArgs) {
    super(name, "aws_iam_user_login_profile", args);
  }

  public override getNamespace(): string {
    return "aws_iam";
  }
}