import * as core from "@terrascript/core";

export interface Ec2ClientVpnNetworkAssociationArgs extends core.ResourceArgs {
  /**
   * (Required) The ID of the Client VPN endpoint.
   */
  clientVpnEndpointId: string | core.StringOut;

  /**
   * (Optional, **Deprecated** use the `security_group_ids` argument of the `aws_ec2_client_vpn_endpoint`
   * resource instead) A list of up to five custom security groups to apply to the target network. If no
   * t specified, the VPC's default security group is assigned.
   */
  securityGroups?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * (Required) The ID of the subnet to associate with the Client VPN endpoint.
   */
  subnetId: string | core.StringOut;
}

export class Ec2ClientVpnNetworkAssociation extends core.Resource<Ec2ClientVpnNetworkAssociationArgs> {
  /**
   * The unique ID of the target network association.
   */
  @core.attr(String, { computed: true })
  public associationId!: string | core.StringOut;

  /**
   * (Required) The ID of the Client VPN endpoint.
   */
  @core.attr(String)
  public clientVpnEndpointId!: string | core.StringOut;

  /**
   * The unique ID of the target network association.
   */
  @core.attr(String, { computed: true })
  public id!: string | core.StringOut;

  /**
   * (Optional, **Deprecated** use the `security_group_ids` argument of the `aws_ec2_client_vpn_endpoint`
   * resource instead) A list of up to five custom security groups to apply to the target network. If no
   * t specified, the VPC's default security group is assigned.
   */
  @core.attr(String, { computed: true, kind: "array" })
  public securityGroups?: core.Array<string> | core.ArrayOut<core.StringOut>;

  /**
   * **Deprecated** The current state of the target network association.
   */
  @core.attr(String, { computed: true })
  public status!: string | core.StringOut;

  /**
   * (Required) The ID of the subnet to associate with the Client VPN endpoint.
   */
  @core.attr(String)
  public subnetId!: string | core.StringOut;

  /**
   * The ID of the VPC in which the target subnet is located.
   */
  @core.attr(String, { computed: true })
  public vpcId!: string | core.StringOut;

  constructor(name: string, args?: Ec2ClientVpnNetworkAssociationArgs) {
    super(name, "aws_ec2_client_vpn_network_association", args);
  }

  public override getNamespace(): string {
    return "aws_vpn";
  }
}