import * as core from "@terrascript/core";

export interface SubnetMappingArgs extends core.SchemaArgs {
  subnetId: string | core.StringOut;
}

export class SubnetMapping extends core.Schema<SubnetMappingArgs> {
  @core.attr(String)
  public subnetId!: string | core.StringOut;
}

export interface AttachmentArgs extends core.SchemaArgs {
  endpointId: string | core.StringOut;

  subnetId: string | core.StringOut;
}

export class Attachment extends core.Schema<AttachmentArgs> {
  @core.attr(String, { computed: true })
  public endpointId!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public subnetId!: string | core.StringOut;
}

export interface SyncStatesArgs extends core.SchemaArgs {
  attachment: core.Array<Attachment> | core.ArrayOut<Attachment>;

  availabilityZone: string | core.StringOut;
}

export class SyncStates extends core.Schema<SyncStatesArgs> {
  @core.attr(Attachment, { computed: true, kind: "array" })
  public attachment!: core.Array<Attachment> | core.ArrayOut<Attachment>;

  @core.attr(String, { computed: true })
  public availabilityZone!: string | core.StringOut;
}

export interface FirewallStatusArgs extends core.SchemaArgs {
  syncStates: core.Array<SyncStates> | core.ArrayOut<SyncStates>;
}

export class FirewallStatus extends core.Schema<FirewallStatusArgs> {
  @core.attr(SyncStates, { computed: true, kind: "array" })
  public syncStates!: core.Array<SyncStates> | core.ArrayOut<SyncStates>;
}

export interface FirewallArgs extends core.ResourceArgs {
  /**
   * (Optional) A boolean flag indicating whether it is possible to delete the firewall. Defaults to `fal
   * se`.
   */
  deleteProtection?: boolean | core.BooleanOut;

  /**
   * (Optional) A friendly description of the firewall.
   */
  description?: string | core.StringOut;

  /**
   * (Required) The Amazon Resource Name (ARN) of the VPC Firewall policy.
   */
  firewallPolicyArn: string | core.StringOut;

  /**
   * (Option) A boolean flag indicating whether it is possible to change the associated firewall policy.
   * Defaults to `false`.
   */
  firewallPolicyChangeProtection?: boolean | core.BooleanOut;

  /**
   * (Required, Forces new resource) A friendly name of the firewall.
   */
  name: string | core.StringOut;

  /**
   * (Optional) A boolean flag indicating whether it is possible to change the associated subnet(s). Defa
   * ults to `false`.
   */
  subnetChangeProtection?: boolean | core.BooleanOut;

  /**
   * (Required) Set of configuration blocks describing the public subnets. Each subnet must belong to a d
   * ifferent Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subn
   * et. See [Subnet Mapping](#subnet-mapping) below for details.
   */
  subnetMapping: core.Array<SubnetMapping> | core.ArrayOut<SubnetMapping>;

  /**
   * (Optional) Map of resource tags to associate with the resource. If configured with a provider [`defa
   * ult_tags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#def
   * ault_tags-configuration-block) present, tags with matching keys will overwrite those defined at the
   * provider-level.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Required, Forces new resource) The unique identifier of the VPC where AWS Network Firewall should c
   * reate the firewall.
   */
  vpcId: string | core.StringOut;
}

export class Firewall extends core.Resource<FirewallArgs> {
  /**
   * The Amazon Resource Name (ARN) that identifies the firewall.
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Optional) A boolean flag indicating whether it is possible to delete the firewall. Defaults to `fal
   * se`.
   */
  @core.attr(Boolean)
  public deleteProtection?: boolean | core.BooleanOut;

  /**
   * (Optional) A friendly description of the firewall.
   */
  @core.attr(String)
  public description?: string | core.StringOut;

  /**
   * (Required) The Amazon Resource Name (ARN) of the VPC Firewall policy.
   */
  @core.attr(String)
  public firewallPolicyArn!: string | core.StringOut;

  /**
   * (Option) A boolean flag indicating whether it is possible to change the associated firewall policy.
   * Defaults to `false`.
   */
  @core.attr(Boolean)
  public firewallPolicyChangeProtection?: boolean | core.BooleanOut;

  /**
   * Nested list of information about the current status of the firewall.
   */
  @core.attr(FirewallStatus, { computed: true, kind: "array" })
  public firewallStatus!:
    | core.Array<FirewallStatus>
    | core.ArrayOut<FirewallStatus>;

  /**
   * The Amazon Resource Name (ARN) that identifies the firewall.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required, Forces new resource) A friendly name of the firewall.
   */
  @core.attr(String)
  public name!: string | core.StringOut;

  /**
   * (Optional) A boolean flag indicating whether it is possible to change the associated subnet(s). Defa
   * ults to `false`.
   */
  @core.attr(Boolean)
  public subnetChangeProtection?: boolean | core.BooleanOut;

  /**
   * (Required) Set of configuration blocks describing the public subnets. Each subnet must belong to a d
   * ifferent Availability Zone in the VPC. AWS Network Firewall creates a firewall endpoint in each subn
   * et. See [Subnet Mapping](#subnet-mapping) below for details.
   */
  @core.attr(SubnetMapping, { kind: "array" })
  public subnetMapping!:
    | core.Array<SubnetMapping>
    | core.ArrayOut<SubnetMapping>;

  /**
   * (Optional) Map of resource tags to associate with the resource. If configured with a provider [`defa
   * ult_tags` configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#def
   * ault_tags-configuration-block) present, tags with matching keys will overwrite those defined at the
   * provider-level.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A string token used when updating a firewall.
   */
  @core.attr(String, { computed: true })
  public updateToken!: string | core.StringOut;

  /**
   * (Required, Forces new resource) The unique identifier of the VPC where AWS Network Firewall should c
   * reate the firewall.
   */
  @core.attr(String)
  public vpcId!: string | core.StringOut;

  constructor(name: string, args?: FirewallArgs) {
    super(name, "aws_networkfirewall_firewall", args);
  }

  public override getNamespace(): string {
    return "aws_networkfirewall";
  }
}