import * as core from "@terrascript/core";

export interface PermissionSetArgs extends core.ResourceArgs {
  /**
   * (Optional) The description of the Permission Set.
   */
  description?: string | core.StringOut;

  /**
   * (Required, Forces new resource) The Amazon Resource Name (ARN) of the SSO Instance under which the o
   * peration will be executed.
   */
  instanceArn: string | core.StringOut;

  /**
   * (Required, Forces new resource) The name of the Permission Set.
   */
  name: string | core.StringOut;

  /**
   * (Optional) The relay state URL used to redirect users within the application during the federation a
   * uthentication process.
   */
  relayState?: string | core.StringOut;

  /**
   * (Optional) The length of time that the application user sessions are valid in the ISO-8601 standard.
   * Default: `PT1H`.
   */
  sessionDuration?: string | core.StringOut;

  /**
   * (Optional) Key-value map of resource tags. If configured with a provider [`default_tags` configurati
   * on block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configurati
   * on-block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
}

export class PermissionSet extends core.Resource<PermissionSetArgs> {
  /**
   * The Amazon Resource Name (ARN) of the Permission Set.
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * The date the Permission Set was created in [RFC3339 format](https://tools.ietf.org/html/rfc3339#sect
   * ion-5.8).
   */
  @core.attr(String, { computed: true })
  public createdDate!: string | core.StringOut;

  /**
   * (Optional) The description of the Permission Set.
   */
  @core.attr(String)
  public description?: string | core.StringOut;

  /**
   * The Amazon Resource Names (ARNs) of the Permission Set and SSO Instance, separated by a comma (`,`).
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required, Forces new resource) The Amazon Resource Name (ARN) of the SSO Instance under which the o
   * peration will be executed.
   */
  @core.attr(String)
  public instanceArn!: string | core.StringOut;

  /**
   * (Required, Forces new resource) The name of the Permission Set.
   */
  @core.attr(String)
  public name!: string | core.StringOut;

  /**
   * (Optional) The relay state URL used to redirect users within the application during the federation a
   * uthentication process.
   */
  @core.attr(String)
  public relayState?: string | core.StringOut;

  /**
   * (Optional) The length of time that the application user sessions are valid in the ISO-8601 standard.
   * Default: `PT1H`.
   */
  @core.attr(String)
  public sessionDuration?: string | core.StringOut;

  /**
   * (Optional) Key-value map of resource tags. If configured with a provider [`default_tags` configurati
   * on block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-configurati
   * on-block) present, tags with matching keys will overwrite those defined at the provider-level.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  constructor(name: string, args?: PermissionSetArgs) {
    super(name, "aws_ssoadmin_permission_set", args);
  }

  public override getNamespace(): string {
    return "aws_ssoadmin";
  }
}