import * as core from "@terrascript/core";

export interface EgressArgs extends core.SchemaArgs {
  action: string | core.StringOut;

  cidrBlock?: string | core.StringOut;

  fromPort: number | core.NumberOut;

  icmpCode?: number | core.NumberOut;

  icmpType?: number | core.NumberOut;

  ipv6CidrBlock?: string | core.StringOut;

  protocol: string | core.StringOut;

  ruleNo: number | core.NumberOut;

  toPort: number | core.NumberOut;
}

export class Egress extends core.Schema<EgressArgs> {
  @core.attr(String)
  public action!: string | core.StringOut;

  @core.attr(String)
  public cidrBlock?: string | core.StringOut;

  @core.attr(Number)
  public fromPort!: number | core.NumberOut;

  @core.attr(Number)
  public icmpCode?: number | core.NumberOut;

  @core.attr(Number)
  public icmpType?: number | core.NumberOut;

  @core.attr(String)
  public ipv6CidrBlock?: string | core.StringOut;

  @core.attr(String)
  public protocol!: string | core.StringOut;

  @core.attr(Number)
  public ruleNo!: number | core.NumberOut;

  @core.attr(Number)
  public toPort!: number | core.NumberOut;
}

export interface IngressArgs extends core.SchemaArgs {
  action: string | core.StringOut;

  cidrBlock?: string | core.StringOut;

  fromPort: number | core.NumberOut;

  icmpCode?: number | core.NumberOut;

  icmpType?: number | core.NumberOut;

  ipv6CidrBlock?: string | core.StringOut;

  protocol: string | core.StringOut;

  ruleNo: number | core.NumberOut;

  toPort: number | core.NumberOut;
}

export class Ingress extends core.Schema<IngressArgs> {
  @core.attr(String)
  public action!: string | core.StringOut;

  @core.attr(String)
  public cidrBlock?: string | core.StringOut;

  @core.attr(Number)
  public fromPort!: number | core.NumberOut;

  @core.attr(Number)
  public icmpCode?: number | core.NumberOut;

  @core.attr(Number)
  public icmpType?: number | core.NumberOut;

  @core.attr(String)
  public ipv6CidrBlock?: string | core.StringOut;

  @core.attr(String)
  public protocol!: string | core.StringOut;

  @core.attr(Number)
  public ruleNo!: number | core.NumberOut;

  @core.attr(Number)
  public toPort!: number | core.NumberOut;
}

export interface DefaultNetworkAclArgs extends core.ResourceArgs {
  /**
   * (Required) Network ACL ID to manage. This attribute is exported from `aws_vpc`, or manually found vi
   * a the AWS Console.
   */
  defaultNetworkAclId: string | core.StringOut;

  /**
   * (Optional) Configuration block for an egress rule. Detailed below.
   */
  egress?: core.Array<Egress> | core.ArrayOut<Egress>;

  /**
   * (Optional) Configuration block for an ingress rule. Detailed below.
   */
  ingress?: core.Array<Ingress> | core.ArrayOut<Ingress>;

  /**
   * (Optional) List of Subnet IDs to apply the ACL to. See the notes below on managing Subnets in the De
   * fault Network ACL
   */
  subnetIds?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) Map of tags to assign to the resource. If configured with a provider [`default_tags` conf
   * iguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-conf
   * iguration-block) present, tags with matching keys will overwrite those defined at the provider-level
   * .
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;
}

export class DefaultNetworkAcl extends core.Resource<DefaultNetworkAclArgs> {
  /**
   * ARN of the Default Network ACL
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Required) Network ACL ID to manage. This attribute is exported from `aws_vpc`, or manually found vi
   * a the AWS Console.
   */
  @core.attr(String)
  public defaultNetworkAclId!: string | core.StringOut;

  /**
   * (Optional) Configuration block for an egress rule. Detailed below.
   */
  @core.attr(Egress, { kind: "array" })
  public egress?: core.Array<Egress> | core.ArrayOut<Egress>;

  /**
   * ID of the Default Network ACL
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Optional) Configuration block for an ingress rule. Detailed below.
   */
  @core.attr(Ingress, { kind: "array" })
  public ingress?: core.Array<Ingress> | core.ArrayOut<Ingress>;

  /**
   * ID of the AWS account that owns the Default Network ACL
   */
  @core.attr(String, { computed: true })
  public ownerId!: string | core.StringOut;

  /**
   * (Optional) List of Subnet IDs to apply the ACL to. See the notes below on managing Subnets in the De
   * fault Network ACL
   */
  @core.attr(String, { kind: "array" })
  public subnetIds?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) Map of tags to assign to the resource. If configured with a provider [`default_tags` conf
   * iguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-conf
   * iguration-block) present, tags with matching keys will overwrite those defined at the provider-level
   * .
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * ID of the associated VPC
   */
  @core.attr(String, { computed: true })
  public vpcId!: string | core.StringOut;

  constructor(name: string, args?: DefaultNetworkAclArgs) {
    super(name, "aws_default_network_acl", args);
  }

  public override getNamespace(): string {
    return "aws_vpc";
  }
}