import * as core from "@terrascript/core";

export interface AuthenticationOptionsArgs extends core.SchemaArgs {
  activeDirectoryId: string | core.StringOut;

  rootCertificateChainArn: string | core.StringOut;

  samlProviderArn: string | core.StringOut;

  selfServiceSamlProviderArn: string | core.StringOut;

  type: string | core.StringOut;
}

export class AuthenticationOptions extends core.Schema<AuthenticationOptionsArgs> {
  @core.attr(String, { computed: true })
  public activeDirectoryId!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public rootCertificateChainArn!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public samlProviderArn!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public selfServiceSamlProviderArn!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public type!: string | core.StringOut;
}

export interface ConnectionLogOptionsArgs extends core.SchemaArgs {
  cloudwatchLogGroup: string | core.StringOut;

  cloudwatchLogStream: string | core.StringOut;

  enabled: boolean | core.BooleanOut;
}

export class ConnectionLogOptions extends core.Schema<ConnectionLogOptionsArgs> {
  @core.attr(String, { computed: true })
  public cloudwatchLogGroup!: string | core.StringOut;

  @core.attr(String, { computed: true })
  public cloudwatchLogStream!: string | core.StringOut;

  @core.attr(Boolean, { computed: true })
  public enabled!: boolean | core.BooleanOut;
}

export interface ClientLoginBannerOptionsArgs extends core.SchemaArgs {
  bannerText: string | core.StringOut;

  enabled: boolean | core.BooleanOut;
}

export class ClientLoginBannerOptions extends core.Schema<ClientLoginBannerOptionsArgs> {
  @core.attr(String, { computed: true })
  public bannerText!: string | core.StringOut;

  @core.attr(Boolean, { computed: true })
  public enabled!: boolean | core.BooleanOut;
}

export interface FilterArgs extends core.SchemaArgs {
  name: string | core.StringOut;

  values: core.Array<string> | core.ArrayOut<core.StringOut>;
}

export class Filter extends core.Schema<FilterArgs> {
  @core.attr(String)
  public name!: string | core.StringOut;

  @core.attr(String, { kind: "array" })
  public values!: core.Array<string> | core.ArrayOut<core.StringOut>;
}

export interface ClientConnectOptionsArgs extends core.SchemaArgs {
  enabled: boolean | core.BooleanOut;

  lambdaFunctionArn: string | core.StringOut;
}

export class ClientConnectOptions extends core.Schema<ClientConnectOptionsArgs> {
  @core.attr(Boolean, { computed: true })
  public enabled!: boolean | core.BooleanOut;

  @core.attr(String, { computed: true })
  public lambdaFunctionArn!: string | core.StringOut;
}

export interface DsEc2ClientVpnEndpointArgs {
  /**
   * (Optional) The ID of the Client VPN endpoint.
   */
  clientVpnEndpointId?: string | core.StringOut;

  /**
   * (Optional) One or more configuration blocks containing name-values filters. Detailed below.
   */
  filter?: core.Array<Filter> | core.ArrayOut<Filter>;

  /**
   * (Optional) Map of tags, each pair of which must exactly match a pair on the desired endpoint.
   */
  tags?: core.Map<string, string> | core.MapOut<core.StringOut>;
}

export class DsEc2ClientVpnEndpoint extends core.Data<DsEc2ClientVpnEndpointArgs> {
  /**
   * The ARN of the Client VPN endpoint.
   */
  @core.attr(String, { computed: true })
  public arn!: string | core.StringOut;

  /**
   * Information about the authentication method used by the Client VPN endpoint.
   */
  @core.attr(AuthenticationOptions, { computed: true, kind: "array" })
  public authenticationOptions!:
    | core.Array<AuthenticationOptions>
    | core.ArrayOut<AuthenticationOptions>;

  /**
   * The IPv4 address range, in CIDR notation, from which client IP addresses are assigned.
   */
  @core.attr(String, { computed: true })
  public clientCidrBlock!: string | core.StringOut;

  /**
   * The options for managing connection authorization for new client connections.
   */
  @core.attr(ClientConnectOptions, { computed: true, kind: "array" })
  public clientConnectOptions!:
    | core.Array<ClientConnectOptions>
    | core.ArrayOut<ClientConnectOptions>;

  /**
   * Options for enabling a customizable text banner that will be displayed on AWS provided clients when
   * a VPN session is established.
   */
  @core.attr(ClientLoginBannerOptions, { computed: true, kind: "array" })
  public clientLoginBannerOptions!:
    | core.Array<ClientLoginBannerOptions>
    | core.ArrayOut<ClientLoginBannerOptions>;

  /**
   * (Optional) The ID of the Client VPN endpoint.
   */
  @core.attr(String, { computed: true })
  public clientVpnEndpointId?: string | core.StringOut;

  /**
   * Information about the client connection logging options for the Client VPN endpoint.
   */
  @core.attr(ConnectionLogOptions, { computed: true, kind: "array" })
  public connectionLogOptions!:
    | core.Array<ConnectionLogOptions>
    | core.ArrayOut<ConnectionLogOptions>;

  /**
   * A brief description of the endpoint.
   */
  @core.attr(String, { computed: true })
  public description!: string | core.StringOut;

  /**
   * The DNS name to be used by clients when connecting to the Client VPN endpoint.
   */
  @core.attr(String, { computed: true })
  public dnsName!: string | core.StringOut;

  /**
   * Information about the DNS servers to be used for DNS resolution.
   */
  @core.attr(String, { computed: true, kind: "array" })
  public dnsServers!: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Optional) One or more configuration blocks containing name-values filters. Detailed below.
   */
  @core.attr(Filter, { kind: "array" })
  public filter?: core.Array<Filter> | core.ArrayOut<Filter>;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * The IDs of the security groups for the target network associated with the Client VPN endpoint.
   */
  @core.attr(String, { computed: true, kind: "array" })
  public securityGroupIds!: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * Indicates whether the self-service portal for the Client VPN endpoint is enabled.
   */
  @core.attr(String, { computed: true })
  public selfServicePortal!: string | core.StringOut;

  /**
   * The ARN of the server certificate.
   */
  @core.attr(String, { computed: true })
  public serverCertificateArn!: string | core.StringOut;

  /**
   * The maximum VPN session duration time in hours.
   */
  @core.attr(Number, { computed: true })
  public sessionTimeoutHours!: number | core.NumberOut;

  /**
   * Indicates whether split-tunnel is enabled in the AWS Client VPN endpoint.
   */
  @core.attr(Boolean, { computed: true })
  public splitTunnel!: boolean | core.BooleanOut;

  /**
   * (Optional) Map of tags, each pair of which must exactly match a pair on the desired endpoint.
   */
  @core.attr(String, { computed: true, kind: "map" })
  public tags?: core.Map<string, string> | core.MapOut<core.StringOut>;

  /**
   * The transport protocol used by the Client VPN endpoint.
   */
  @core.attr(String, { computed: true })
  public transportProtocol!: string | core.StringOut;

  /**
   * The ID of the VPC associated with the Client VPN endpoint.
   */
  @core.attr(String, { computed: true })
  public vpcId!: string | core.StringOut;

  /**
   * The port number for the Client VPN endpoint.
   */
  @core.attr(Number, { computed: true })
  public vpnPort!: number | core.NumberOut;

  constructor(name: string, args?: DsEc2ClientVpnEndpointArgs) {
    super(name, "aws_ec2_client_vpn_endpoint", args);
  }

  public override getNamespace(): string {
    return "aws_vpn";
  }
}