import * as core from "@terrascript/core";

export interface Ec2ClientVpnAuthorizationRuleArgs extends core.ResourceArgs {
  /**
   * (Optional) The ID of the group to which the authorization rule grants access. One of `access_group_i
   * d` or `authorize_all_groups` must be set.
   */
  accessGroupId?: string | core.StringOut;

  /**
   * (Optional) Indicates whether the authorization rule grants access to all clients. One of `access_gro
   * up_id` or `authorize_all_groups` must be set.
   */
  authorizeAllGroups?: boolean | core.BooleanOut;

  /**
   * (Required) The ID of the Client VPN endpoint.
   */
  clientVpnEndpointId: string | core.StringOut;

  /**
   * (Optional) A brief description of the authorization rule.
   */
  description?: string | core.StringOut;

  /**
   * (Required) The IPv4 address range, in CIDR notation, of the network to which the authorization rule
   * applies.
   */
  targetNetworkCidr: string | core.StringOut;
}

export class Ec2ClientVpnAuthorizationRule extends core.Resource<Ec2ClientVpnAuthorizationRuleArgs> {
  /**
   * (Optional) The ID of the group to which the authorization rule grants access. One of `access_group_i
   * d` or `authorize_all_groups` must be set.
   */
  @core.attr(String)
  public accessGroupId?: string | core.StringOut;

  /**
   * (Optional) Indicates whether the authorization rule grants access to all clients. One of `access_gro
   * up_id` or `authorize_all_groups` must be set.
   */
  @core.attr(Boolean)
  public authorizeAllGroups?: boolean | core.BooleanOut;

  /**
   * (Required) The ID of the Client VPN endpoint.
   */
  @core.attr(String)
  public clientVpnEndpointId!: string | core.StringOut;

  /**
   * (Optional) A brief description of the authorization rule.
   */
  @core.attr(String)
  public description?: string | core.StringOut;

  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Required) The IPv4 address range, in CIDR notation, of the network to which the authorization rule
   * applies.
   */
  @core.attr(String)
  public targetNetworkCidr!: string | core.StringOut;

  constructor(name: string, args?: Ec2ClientVpnAuthorizationRuleArgs) {
    super(name, "aws_ec2_client_vpn_authorization_rule", args);
  }

  public override getNamespace(): string {
    return "aws_vpn";
  }
}