import * as core from "@terrascript/core";

export interface SigningProfilePermissionArgs extends core.ResourceArgs {
  /**
   * (Required) An AWS Signer action permitted as part of cross-account permissions. Valid values: `signe
   * r:StartSigningJob`, `signer:GetSigningProfile`, or `signer:RevokeSignature`.
   */
  action: string | core.StringOut;

  /**
   * (Required) The AWS principal to be granted a cross-account permission.
   */
  principal: string | core.StringOut;

  /**
   * (Required) Name of the signing profile to add the cross-account permissions.
   */
  profileName: string | core.StringOut;

  /**
   * (Optional) The signing profile version that a permission applies to.
   */
  profileVersion?: string | core.StringOut;

  /**
   * (Optional) A unique statement identifier. By default generated by Terraform.
   */
  statementId?: string | core.StringOut;

  /**
   * (Optional) A statement identifier prefix. Terraform will generate a unique suffix. Conflicts with `s
   * tatement_id`.
   */
  statementIdPrefix?: string | core.StringOut;
}

export class SigningProfilePermission extends core.Resource<SigningProfilePermissionArgs> {
  /**
   * (Required) An AWS Signer action permitted as part of cross-account permissions. Valid values: `signe
   * r:StartSigningJob`, `signer:GetSigningProfile`, or `signer:RevokeSignature`.
   */
  @core.attr(String)
  public action!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required) The AWS principal to be granted a cross-account permission.
   */
  @core.attr(String)
  public principal!: string | core.StringOut;

  /**
   * (Required) Name of the signing profile to add the cross-account permissions.
   */
  @core.attr(String)
  public profileName!: string | core.StringOut;

  /**
   * (Optional) The signing profile version that a permission applies to.
   */
  @core.attr(String, { computed: true })
  public profileVersion?: string | core.StringOut;

  /**
   * (Optional) A unique statement identifier. By default generated by Terraform.
   */
  @core.attr(String, { computed: true })
  public statementId?: string | core.StringOut;

  /**
   * (Optional) A statement identifier prefix. Terraform will generate a unique suffix. Conflicts with `s
   * tatement_id`.
   */
  @core.attr(String)
  public statementIdPrefix?: string | core.StringOut;

  constructor(name: string, args?: SigningProfilePermissionArgs) {
    super(name, "aws_signer_signing_profile_permission", args);
  }

  public override getNamespace(): string {
    return "aws_signer";
  }
}