import * as core from "@terrascript/core";

export interface EgressArgs extends core.SchemaArgs {
  action: string | core.StringOut;

  cidrBlock?: string | core.StringOut;

  fromPort: number | core.NumberOut;

  icmpCode?: number | core.NumberOut;

  icmpType?: number | core.NumberOut;

  ipv6CidrBlock?: string | core.StringOut;

  protocol: string | core.StringOut;

  ruleNo: number | core.NumberOut;

  toPort: number | core.NumberOut;
}

export class Egress extends core.Schema<EgressArgs> {
  @core.attr(String)
  public action!: string | core.StringOut;

  @core.attr(String)
  public cidrBlock?: string | core.StringOut;

  @core.attr(Number)
  public fromPort!: number | core.NumberOut;

  @core.attr(Number)
  public icmpCode?: number | core.NumberOut;

  @core.attr(Number)
  public icmpType?: number | core.NumberOut;

  @core.attr(String)
  public ipv6CidrBlock?: string | core.StringOut;

  @core.attr(String)
  public protocol!: string | core.StringOut;

  @core.attr(Number)
  public ruleNo!: number | core.NumberOut;

  @core.attr(Number)
  public toPort!: number | core.NumberOut;
}

export interface IngressArgs extends core.SchemaArgs {
  action: string | core.StringOut;

  cidrBlock?: string | core.StringOut;

  fromPort: number | core.NumberOut;

  icmpCode?: number | core.NumberOut;

  icmpType?: number | core.NumberOut;

  ipv6CidrBlock?: string | core.StringOut;

  protocol: string | core.StringOut;

  ruleNo: number | core.NumberOut;

  toPort: number | core.NumberOut;
}

export class Ingress extends core.Schema<IngressArgs> {
  @core.attr(String)
  public action!: string | core.StringOut;

  @core.attr(String)
  public cidrBlock?: string | core.StringOut;

  @core.attr(Number)
  public fromPort!: number | core.NumberOut;

  @core.attr(Number)
  public icmpCode?: number | core.NumberOut;

  @core.attr(Number)
  public icmpType?: number | core.NumberOut;

  @core.attr(String)
  public ipv6CidrBlock?: string | core.StringOut;

  @core.attr(String)
  public protocol!: string | core.StringOut;

  @core.attr(Number)
  public ruleNo!: number | core.NumberOut;

  @core.attr(Number)
  public toPort!: number | core.NumberOut;
}

export interface NetworkAclArgs extends core.ResourceArgs {
  /**
   * (Optional) Specifies an egress rule. Parameters defined below.
   */
  egress?: core.Array<Egress> | core.ArrayOut<Egress>;

  /**
   * (Optional) Specifies an ingress rule. Parameters defined below.
   */
  ingress?: core.Array<Ingress> | core.ArrayOut<Ingress>;

  /**
   * (Optional) A list of Subnet IDs to apply the ACL to
   */
  subnetIds?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) A map of tags to assign to the resource. If configured with a provider [`default_tags` co
   * nfiguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-co
   * nfiguration-block) present, tags with matching keys will overwrite those defined at the provider-lev
   * el.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Required) The ID of the associated VPC.
   */
  vpcId: string | core.StringOut;
}

export class NetworkAcl extends core.Resource<NetworkAclArgs> {
  /**
   * The ARN of the network ACL
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * (Optional) Specifies an egress rule. Parameters defined below.
   */
  @core.attr(Egress, { computed: true, kind: "array" })
  public egress?: core.Array<Egress> | core.ArrayOut<Egress>;

  /**
   * The ID of the network ACL
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Optional) Specifies an ingress rule. Parameters defined below.
   */
  @core.attr(Ingress, { computed: true, kind: "array" })
  public ingress?: core.Array<Ingress> | core.ArrayOut<Ingress>;

  /**
   * The ID of the AWS account that owns the network ACL.
   */
  @core.attr(String, { computed: true })
  public ownerId!: string | core.StringOut;

  /**
   * (Optional) A list of Subnet IDs to apply the ACL to
   */
  @core.attr(String, { computed: true, kind: "array" })
  public subnetIds?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) A map of tags to assign to the resource. If configured with a provider [`default_tags` co
   * nfiguration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-co
   * nfiguration-block) present, tags with matching keys will overwrite those defined at the provider-lev
   * el.
   */
  @core.attr(String, { kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * A map of tags assigned to the resource, including those inherited from the provider [`default_tags`
   * configuration block](https://registry.terraform.io/providers/hashicorp/aws/latest/docs#default_tags-
   * configuration-block).
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tagsAll?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * (Required) The ID of the associated VPC.
   */
  @core.attr(String)
  public vpcId!: string | core.StringOut;

  constructor(name: string, args?: NetworkAclArgs) {
    super(name, "aws_network_acl", args);
  }

  public override getNamespace(): string {
    return "aws_vpc";
  }
}