import * as core from "@terrascript/core";

export interface DsCiphertextArgs {
  /**
   * (Optional) An optional mapping that makes up the encryption context.
   */
  context?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Required) Globally unique key ID for the customer master key.
   */
  keyId: string | core.StringOut;

  /**
   * (Required) Data to be encrypted. Note that this may show up in logs, and it will be stored in the st
   * ate file.
   */
  plaintext: string | core.StringOut;
}

export class DsCiphertext extends core.Data<DsCiphertextArgs> {
  /**
   * Base64 encoded ciphertext
   */
  @core.attr(String, { computed: true })
  public ciphertextBlob!: string | core.StringOut;

  /**
   * (Optional) An optional mapping that makes up the encryption context.
   */
  @core.attr(String, { kind: "map" })
  public context?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * Globally unique key ID for the customer master key.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required) Globally unique key ID for the customer master key.
   */
  @core.attr(String)
  public keyId!: string | core.StringOut;

  /**
   * (Required) Data to be encrypted. Note that this may show up in logs, and it will be stored in the st
   * ate file.
   */
  @core.attr(String)
  public plaintext!: string | core.StringOut;

  constructor(name: string, args?: DsCiphertextArgs) {
    super(name, "aws_kms_ciphertext", args);
  }

  public override getNamespace(): string {
    return "aws_kms";
  }
}