import * as core from "@terrascript/core";

export interface PolicyArgs extends core.ResourceArgs {
  /**
   * (Required) The policy content to add to the new policy. For example, if you create a [service contro
   * l policy (SCP)](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.
   * html), this string must be JSON text that specifies the permissions that admins in attached accounts
   * can delegate to their users, groups, and roles. For more information about the SCP syntax, see the
   * [Service Control Policy Syntax documentation](https://docs.aws.amazon.com/organizations/latest/userg
   * uide/orgs_reference_scp-syntax.html) and for more information on the Tag Policy syntax, see the [Tag
   * Policy Syntax documentation](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage
   * _policies_example-tag-policies.html).
   */
  content: string | core.StringOut;

  /**
   * (Optional) A description to assign to the policy.
   */
  description?: string | core.StringOut;

  /**
   * (Required) The friendly name to assign to the policy.
   */
  name: string | core.StringOut;

  /**
   * (Optional) Key-value map of resource tags. If configured with a provider [`default_tags` configurati
   * on block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configurati
   * on-block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Optional) The type of policy to create. Valid values are `AISERVICES_OPT_OUT_POLICY`, `BACKUP_POLIC
   * Y`, `SERVICE_CONTROL_POLICY` (SCP), and `TAG_POLICY`. Defaults to `SERVICE_CONTROL_POLICY`.
   */
  type?: string | core.StringOut;
}

export class Policy extends core.Resource<PolicyArgs> {
  /**
   * Amazon Resource Name (ARN) of the policy.
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Required) The policy content to add to the new policy. For example, if you create a [service contro
   * l policy (SCP)](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scp.
   * html), this string must be JSON text that specifies the permissions that admins in attached accounts
   * can delegate to their users, groups, and roles. For more information about the SCP syntax, see the
   * [Service Control Policy Syntax documentation](https://docs.aws.amazon.com/organizations/latest/userg
   * uide/orgs_reference_scp-syntax.html) and for more information on the Tag Policy syntax, see the [Tag
   * Policy Syntax documentation](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage
   * _policies_example-tag-policies.html).
   */
  @core.attr(String)
  public content!: string | core.StringOut;

  /**
   * (Optional) A description to assign to the policy.
   */
  @core.attr(String)
  public description?: string | core.StringOut;

  /**
   * The unique identifier (ID) of the policy.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required) The friendly name to assign to the policy.
   */
  @core.attr(String)
  public name!: string | core.StringOut;

  /**
   * (Optional) Key-value map of resource tags. If configured with a provider [`default_tags` configurati
   * on block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configurati
   * on-block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Optional) The type of policy to create. Valid values are `AISERVICES_OPT_OUT_POLICY`, `BACKUP_POLIC
   * Y`, `SERVICE_CONTROL_POLICY` (SCP), and `TAG_POLICY`. Defaults to `SERVICE_CONTROL_POLICY`.
   */
  @core.attr(String)
  public type?: string | core.StringOut;

  constructor(name: string, args?: PolicyArgs) {
    super(name, "aws_organizations_policy", args);
  }

  public override getNamespace(): string {
    return "aws_organizations";
  }
}