import * as core from "@terrascript/core";

export interface ProfileArgs extends core.ResourceArgs {
  /**
   * (Optional) The number of seconds the vended session credentials are valid for. Defaults to 3600.
   */
  durationSeconds?: number | core.NumberOut;

  /**
   * (Optional) Whether or not the Profile is enabled.
   */
  enabled?: boolean | core.BooleanOut;

  /**
   * (Optional) A list of managed policy ARNs that apply to the vended session credentials.
   */
  managedPolicyArns?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Required) The name of the Profile.
   */
  name: string | core.StringOut;

  /**
   * (Optional) Specifies whether instance properties are required in [CreateSession](https://docs.aws.am
   * azon.com/rolesanywhere/latest/APIReference/API_CreateSession.html) requests with this profile.
   */
  requireInstanceProperties?: boolean | core.BooleanOut;

  /**
   * (Required) A list of IAM roles that this profile can assume
   */
  roleArns: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) A session policy that applies to the trust boundary of the vended session credentials.
   */
  sessionPolicy?: string | core.StringOut;

  /**
   * (Optional) A map of tags to assign to the resource. If configured with a provider [`default_tags` co
   * nfiguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-co
   * nfiguration-block) present, tags with matching keys will overwrite those defined at the provider-lev
   * el.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
}

export class Profile extends core.Resource<ProfileArgs> {
  /**
   * Amazon Resource Name (ARN) of the Profile
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Optional) The number of seconds the vended session credentials are valid for. Defaults to 3600.
   */
  @core.attr(Number, { computed: true })
  public durationSeconds?: number | core.NumberOut;

  /**
   * (Optional) Whether or not the Profile is enabled.
   */
  @core.attr(Boolean)
  public enabled?: boolean | core.BooleanOut;

  /**
   * The Profile ID.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Optional) A list of managed policy ARNs that apply to the vended session credentials.
   */
  @core.attr(String, { kind: "array" })
  public managedPolicyArns?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Required) The name of the Profile.
   */
  @core.attr(String)
  public name!: string | core.StringOut;

  /**
   * (Optional) Specifies whether instance properties are required in [CreateSession](https://docs.aws.am
   * azon.com/rolesanywhere/latest/APIReference/API_CreateSession.html) requests with this profile.
   */
  @core.attr(Boolean)
  public requireInstanceProperties?: boolean | core.BooleanOut;

  /**
   * (Required) A list of IAM roles that this profile can assume
   */
  @core.attr(String, { kind: "array" })
  public roleArns!: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) A session policy that applies to the trust boundary of the vended session credentials.
   */
  @core.attr(String)
  public sessionPolicy?: string | core.StringOut;

  /**
   * (Optional) A map of tags to assign to the resource. If configured with a provider [`default_tags` co
   * nfiguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-co
   * nfiguration-block) present, tags with matching keys will overwrite those defined at the provider-lev
   * el.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  constructor(name: string, args?: ProfileArgs) {
    super(name, "aws_rolesanywhere_profile", args);
  }

  public override getNamespace(): string {
    return "aws_rolesanywhere";
  }
}