import * as core from "@terrascript/core";

export interface ManagedPolicyAttachmentArgs extends core.ResourceArgs {
  /**
   * (Required, Forces new resource) The Amazon Resource Name (ARN) of the SSO Instance under which the o
   * peration will be executed.
   */
  instanceArn: string | core.StringOut;

  /**
   * (Required, Forces new resource) The IAM managed policy Amazon Resource Name (ARN) to be attached to
   * the Permission Set.
   */
  managedPolicyArn: string | core.StringOut;

  /**
   * (Required, Forces new resource) The Amazon Resource Name (ARN) of the Permission Set.
   */
  permissionSetArn: string | core.StringOut;
}

export class ManagedPolicyAttachment extends core.Resource<ManagedPolicyAttachmentArgs> {
  /**
   * The Amazon Resource Names (ARNs) of the Managed Policy, Permission Set, and SSO Instance, separated
   * by a comma (`,`).
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required, Forces new resource) The Amazon Resource Name (ARN) of the SSO Instance under which the o
   * peration will be executed.
   */
  @core.attr(String)
  public instanceArn!: string | core.StringOut;

  /**
   * (Required, Forces new resource) The IAM managed policy Amazon Resource Name (ARN) to be attached to
   * the Permission Set.
   */
  @core.attr(String)
  public managedPolicyArn!: string | core.StringOut;

  /**
   * The name of the IAM Managed Policy.
   */
  @core.attr(String, { computed: true })
  public managedPolicyName!: string | core.StringOut;

  /**
   * (Required, Forces new resource) The Amazon Resource Name (ARN) of the Permission Set.
   */
  @core.attr(String)
  public permissionSetArn!: string | core.StringOut;

  constructor(name: string, args?: ManagedPolicyAttachmentArgs) {
    super(name, "aws_ssoadmin_managed_policy_attachment", args);
  }

  public override getNamespace(): string {
    return "aws_ssoadmin";
  }
}