import * as iam from "@distilled.cloud/aws/iam";
import * as Redacted from "effect/Redacted";
import * as Provider from "../../Provider.ts";
import { Resource } from "../../Resource.ts";
import { AWSEnvironment } from "../Environment.ts";
import type { Providers } from "../Providers.ts";
export interface SAMLProviderProps {
    /**
     * The friendly SAML provider name.
     */
    name: string;
    /**
     * The provider metadata document.
     */
    samlMetadataDocument: string;
    /**
     * Optional assertion encryption mode.
     */
    assertionEncryptionMode?: iam.AssertionEncryptionModeType;
    /**
     * Optional private key added during creation/update.
     */
    addPrivateKey?: Redacted.Redacted<string> | string;
    /**
     * User-defined tags.
     */
    tags?: Record<string, string>;
}
export interface SAMLProvider extends Resource<"AWS.IAM.SAMLProvider", SAMLProviderProps, {
    /** The ARN of the SAML provider. */
    samlProviderArn: string;
    /** The name of the SAML provider. */
    name: string;
    /** The unique ID AWS assigns to the provider. */
    samlProviderUUID: string | undefined;
    /** The SAML metadata document from the identity provider. */
    samlMetadataDocument: string | undefined;
    /** Whether SAML assertions must be encrypted (`Required` / `Allowed`). */
    assertionEncryptionMode: iam.AssertionEncryptionModeType | undefined;
    /** The tags applied to the provider. */
    tags: Record<string, string>;
}, never, Providers> {
}
/**
 * An IAM SAML identity provider.
 *
 * `SAMLProvider` registers a SAML metadata document so IAM roles can trust an
 * external workforce or application identity provider.
 * ### Federating with SAML
 * **Example:** Create a SAML Identity Provider
 * ```typescript
 * const provider = yield* SAMLProvider("WorkforceSaml", {
 *   name: "workforce-saml",
 *   samlMetadataDocument: "<EntityDescriptor>...</EntityDescriptor>",
 * });
 * ```
 *
 * @resource
 */
export declare const SAMLProvider: import("../../Resource.ts").ResourceClass<SAMLProvider>;
export declare const SAMLProviderProvider: () => import("effect/Layer").Layer<Provider.Provider<SAMLProvider>, never, AWSEnvironment | import("@distilled.cloud/aws/Credentials").Credentials | import("effect/unstable/http/HttpClient").HttpClient | import("../../Stack.ts").Stack | import("../../Stage.ts").Stage>;
//# sourceMappingURL=SAMLProvider.d.ts.map