v1beta1

type AccessKey struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AccessKeySpec   `json:"spec"`
	Status AccessKeyStatus `json:"status,omitempty"`
}

type AccessKeyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AccessKey `json:"items"`
}

type AccessKeyParameters struct {
	// Username contains the name of the User.
	// +optional
	// +immutable
	// +crossplane:generate:reference:type=User
	Username string `json:"userName,omitempty"`

	// UsernameRef references to an User to retrieve its userName
	// +optional
	UsernameRef *xpv1.Reference `json:"userNameRef,omitempty"`

	// UsernameSelector selects a reference to an User to retrieve its userName
	// +optional
	UsernameSelector *xpv1.Selector `json:"userNameSelector,omitempty"`

	// The current status of this AccessKey on the AWS
	// Must be either Active or Inactive.
	// +kubebuilder:validation:Enum=Active;Inactive
	Status string `json:"accessKeyStatus,omitempty"`
}

type AccessKeySpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       AccessKeyParameters `json:"forProvider"`
}

type AccessKeyStatus struct {
	xpv1.ResourceStatus `json:",inline"`
}

type Group struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec GroupSpec `json:"spec"`

	Status GroupStatus `json:"status,omitempty"`
}

type GroupList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Group `json:"items"`
}

type GroupObservation struct {
	// The Amazon Resource Name (ARN) that identifies the group.
	ARN string `json:"arn,omitempty"`

	// The stable and unique string identifying the group.
	GroupID string `json:"groupId,omitempty"`
}

type GroupParameters struct {
	// The path for the group name.
	// +optional
	Path *string `json:"path,omitempty"`
}

type GroupPolicyAttachment struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GroupPolicyAttachmentSpec   `json:"spec"`
	Status GroupPolicyAttachmentStatus `json:"status,omitempty"`
}

type GroupPolicyAttachmentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GroupPolicyAttachment `json:"items"`
}

type GroupPolicyAttachmentObservation struct {
	// AttachedPolicyARN is the arn for the attached policy. If nil, the policy
	// is not yet attached
	AttachedPolicyARN string `json:"attachedPolicyArn"`
}

type GroupPolicyAttachmentParameters struct {

	// PolicyARN is the Amazon Resource Name (ARN) of the IAM policy you want to
	// attach.
	// +immutable
	// +crossplane:generate:reference:type=Policy
	// +crossplane:generate:reference:extractor=PolicyARN()
	PolicyARN string `json:"policyArn,omitempty"`

	// PolicyARNRef references a Policy to retrieve its Policy ARN.
	// +optional
	PolicyARNRef *xpv1.Reference `json:"policyArnRef,omitempty"`

	// PolicyARNSelector selects a reference to a Policy to retrieve its
	// Policy ARN
	// +optional
	PolicyARNSelector *xpv1.Selector `json:"policyArnSelector,omitempty"`

	// GroupName presents the name of the Group.
	// +immutable
	// +crossplane:generate:reference:type=Group
	GroupName string `json:"groupName,omitempty"`

	// GroupNameRef references to an Group to retrieve its groupName
	// +optional
	GroupNameRef *xpv1.Reference `json:"groupNameRef,omitempty"`

	// GroupNameSelector selects a reference to an Group to retrieve its groupName
	// +optional
	GroupNameSelector *xpv1.Selector `json:"groupNameSelector,omitempty"`
}

type GroupPolicyAttachmentSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       GroupPolicyAttachmentParameters `json:"forProvider"`
}

type GroupPolicyAttachmentStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          GroupPolicyAttachmentObservation `json:"atProvider,omitempty"`
}

type GroupSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       GroupParameters `json:"forProvider,omitempty"`
}

type GroupStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          GroupObservation `json:"atProvider,omitempty"`
}

type GroupUserMembership struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   GroupUserMembershipSpec   `json:"spec"`
	Status GroupUserMembershipStatus `json:"status,omitempty"`
}

type GroupUserMembershipList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []GroupUserMembership `json:"items"`
}

type GroupUserMembershipObservation struct {
	// AttachedGroupARN is the arn for the attached group. If nil, the group
	// is not yet attached
	AttachedGroupARN string `json:"attachedGroupArn"`
}

type GroupUserMembershipParameters struct {

	// GroupName is the Amazon IAM Group Name (Group) of the IAM group you want to
	// add User to.
	// +immutable
	// +crossplane:generate:reference:type=Group
	GroupName string `json:"groupName,omitempty"`

	// GroupNameRef references to a Group to retrieve its groupName
	// +optional
	// +immutable
	GroupNameRef *xpv1.Reference `json:"groupNameRef,omitempty"`

	// GroupNameSelector selects a reference to a Group to retrieve its groupName
	// +optional
	GroupNameSelector *xpv1.Selector `json:"groupNameSelector,omitempty"`

	// UserName presents the name of the User.
	// +immutable
	// +crossplane:generate:reference:type=User
	UserName string `json:"userName,omitempty"`

	// UserNameRef references to a User to retrieve its userName
	// +optional
	// +immutable
	UserNameRef *xpv1.Reference `json:"userNameRef,omitempty"`

	// UserNameSelector selects a reference to a User to retrieve its userName
	// +optional
	UserNameSelector *xpv1.Selector `json:"userNameSelector,omitempty"`
}

type GroupUserMembershipSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       GroupUserMembershipParameters `json:"forProvider"`
}

type GroupUserMembershipStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          GroupUserMembershipObservation `json:"atProvider,omitempty"`
}

type OpenIDConnectProvider struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              OpenIDConnectProviderSpec   `json:"spec"`
	Status            OpenIDConnectProviderStatus `json:"status,omitempty"`
}

type OpenIDConnectProviderList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []OpenIDConnectProvider `json:"items"`
}

type OpenIDConnectProviderObservation struct {
	// The date and time when the IAM OIDC provider resource object was created
	// in the AWS account.
	CreateDate *metav1.Time `json:"createDate,omitempty"`
}

type OpenIDConnectProviderParameters struct {
	// A list of client IDs (also known as audiences). When a mobile or web app
	// registers with an OpenID Connect provider, they establish a value that identifies
	// the application. (This is the value that's sent as the client_id parameter
	// on OAuth requests.)
	//
	// You can register multiple client IDs with the same provider. For example,
	// you might have multiple applications that use the same OIDC provider. You
	// cannot register more than 100 client IDs with a single IAM OIDC provider.
	//
	// There is no defined format for a client ID. The CreateOpenIDConnectProviderRequest
	// operation accepts client IDs up to 255 characters long.
	// +kubebuilder:validation:MaxItems:=100
	// +optional
	ClientIDList []string `json:"clientIDList,omitempty"`

	// Tags. For more information about
	// tagging, see Tagging OpenID Connect (OIDC) identity providers (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags_idps_oidc.html)
	// in the IAM User Guide.
	// +optional
	Tags []Tag `json:"tags,omitempty"`

	// A list of server certificate thumbprints for the OpenID Connect (OIDC) identity
	// provider's server certificates. Typically this list includes only one entry.
	// However, IAM lets you have up to five thumbprints for an OIDC provider. This
	// lets you maintain multiple thumbprints if the identity provider is rotating
	// certificates.
	//
	// The server certificate thumbprint is the hex-encoded SHA-1 hash value of
	// the X.509 certificate used by the domain where the OpenID Connect provider
	// makes its keys available. It is always a 40-character string.
	//
	// You must provide at least one thumbprint when creating an IAM OIDC provider.
	// For example, assume that the OIDC provider is server.example.com and the
	// provider stores its keys at https://keys.server.example.com/openid-connect.
	// In that case, the thumbprint string would be the hex-encoded SHA-1 hash value
	// of the certificate used by https://keys.server.example.com.
	//
	// For more information about obtaining the OIDC provider's thumbprint, see
	// Obtaining the Thumbprint for an OpenID Connect Provider (https://docs.aws.amazon.com/IAM/latest/UserGuide/identity-providers-oidc-obtain-thumbprint.html)
	// in the IAM User Guide.
	// +kubebuilder:validation:MinItems:=1
	// +kubebuilder:validation:MaxItems:=5
	ThumbprintList []string `json:"thumbprintList"`

	// The URL of the identity provider. The URL must begin with https:// and should
	// correspond to the iss claim in the provider's OpenID Connect ID tokens. Per
	// the OIDC standard, path components are allowed but query parameters are not.
	// Typically the URL consists of only a hostname, like https://server.example.org
	// or https://example.com.
	//
	// You cannot register the same provider multiple times in a single AWS account.
	// If you try to submit a URL that has already been used for an OpenID Connect
	// provider in the AWS account, you will get an error.
	URL string `json:"url"`
}

type OpenIDConnectProviderSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       OpenIDConnectProviderParameters `json:"forProvider"`
}

type OpenIDConnectProviderStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          OpenIDConnectProviderObservation `json:"atProvider,omitempty"`
}

type Policy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   PolicySpec   `json:"spec"`
	Status PolicyStatus `json:"status,omitempty"`
}

type PolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Policy `json:"items"`
}

type PolicyObservation struct {
	// The Amazon PolicyObservation Name (ARN) of the policy
	ARN string `json:"arn,omitempty"`

	// The number of entities (users, groups, and roles) that the policy is attached
	// to.
	AttachmentCount int32 `json:"attachmentCount,omitempty"`

	// The identifier for the version of the policy that is set as the default version.
	DefaultVersionID string `json:"defaultVersionId,omitempty"`

	// Specifies whether the policy can be attached to an IAM user, group, or role.
	IsAttachable bool `json:"isAttachable,omitempty"`

	// The number of entities (users and roles) for which the policy is used to
	// set the permissions boundary.
	PermissionsBoundaryUsageCount int32 `json:"permissionsBoundaryUsageCount,omitempty"`

	// The stable and unique string identifying the policy.
	PolicyID string `json:"policyId,omitempty"`
}

type PolicyParameters struct {
	// A description of the policy.
	// +optional
	Description *string `json:"description,omitempty"`

	// The path to the policy.
	// +optional
	Path *string `json:"path,omitempty"`

	// The JSON policy document that is the content for the policy.
	Document string `json:"document"`

	// The name of the policy.
	Name string `json:"name"`

	// Tags. For more information about
	// tagging, see Tagging IAM Identities (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
	// in the IAM User Guide.
	// +immutable
	// +optional
	Tags []Tag `json:"tags,omitempty"`
}

type PolicySpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       PolicyParameters `json:"forProvider"`
}

type PolicyStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          PolicyObservation `json:"atProvider,omitempty"`
}

type Role struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RoleSpec   `json:"spec"`
	Status RoleStatus `json:"status,omitempty"`
}

type RoleExternalStatus struct {
	// ARN is the Amazon Resource Name (ARN) specifying the role. For more information
	// about ARNs and how to use them in policies, see IAM Identifiers (http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
	// in the IAM User Guide guide.
	ARN string `json:"arn"`

	// RoleID is the stable and unique string identifying the role. For more information about
	// IDs, see IAM Identifiers (http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html)
	// in the Using IAM guide.
	RoleID string `json:"roleID"`
}

type RoleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Role `json:"items"`
}

type RoleParameters struct {

	// AssumeRolePolicyDocument is the the trust relationship policy document
	// that grants an entity permission to assume the role.
	// +immutable
	AssumeRolePolicyDocument string `json:"assumeRolePolicyDocument"`

	// Description is a description of the role.
	// +optional
	Description *string `json:"description,omitempty"`

	// MaxSessionDuration is the duration (in seconds) that you want to set for the specified
	// role. The default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
	// Default: 3600
	// +optional
	MaxSessionDuration *int32 `json:"maxSessionDuration,omitempty"`

	// Path is the path to the role.
	// Default: /
	// +immutable
	// +optional
	Path *string `json:"path,omitempty"`

	// PermissionsBoundary is the ARN of the policy that is used to set the permissions boundary for the role.
	// +immutable
	// +optional
	PermissionsBoundary *string `json:"permissionsBoundary,omitempty"`

	// Tags. For more information about
	// tagging, see Tagging IAM Identities (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html)
	// in the IAM User Guide.
	// +immutable
	// +optional
	Tags []Tag `json:"tags,omitempty"`
}

type RolePolicyAttachment struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RolePolicyAttachmentSpec   `json:"spec"`
	Status RolePolicyAttachmentStatus `json:"status,omitempty"`
}

type RolePolicyAttachmentExternalStatus struct {
	// AttachedPolicyARN is the arn for the attached policy. If nil, the policy
	// is not yet attached
	AttachedPolicyARN string `json:"attachedPolicyArn"`
}

type RolePolicyAttachmentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RolePolicyAttachment `json:"items"`
}

type RolePolicyAttachmentParameters struct {

	// PolicyARN is the Amazon Resource Name (ARN) of the IAM policy you want to
	// attach.
	// +immutable
	// +crossplane:generate:reference:type=Policy
	// +crossplane:generate:reference:extractor=PolicyARN()
	PolicyARN string `json:"policyArn,omitempty"`

	// PolicyARNRef references a Policy to retrieve its Policy ARN.
	// +optional
	PolicyARNRef *xpv1.Reference `json:"policyArnRef,omitempty"`

	// PolicyARNSelector selects a reference to a Policy to retrieve its
	// Policy ARN
	// +optional
	PolicyARNSelector *xpv1.Selector `json:"policyArnSelector,omitempty"`

	// RoleName presents the name of the IAM role.
	// +immutable
	// +crossplane:generate:reference:type=Role
	RoleName string `json:"roleName,omitempty"`

	// RoleNameRef references a Role to retrieve its Name
	// +optional
	RoleNameRef *xpv1.Reference `json:"roleNameRef,omitempty"`

	// RoleNameSelector selects a reference to a Role to retrieve its Name
	// +optional
	RoleNameSelector *xpv1.Selector `json:"roleNameSelector,omitempty"`
}

type RolePolicyAttachmentSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       RolePolicyAttachmentParameters `json:"forProvider"`
}

type RolePolicyAttachmentStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          RolePolicyAttachmentExternalStatus `json:"atProvider,omitempty"`
}

type RoleSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       RoleParameters `json:"forProvider"`
}

type RoleStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          RoleExternalStatus `json:"atProvider,omitempty"`
}

type Tag struct {

	// The key name that can be used to look up or retrieve the associated value.
	// For example, Department or Cost Center are common choices.
	Key string `json:"key"`

	// The value associated with this tag. For example, tags with a key name of
	// Department could have values such as Human Resources, Accounting, and Support.
	// Tags with a key name of Cost Center might have values that consist of the
	// number associated with the different cost centers in your company. Typically,
	// many resources have tags with the same key name but with different values.
	//
	// AWS always interprets the tag Value as a single string. If you need to store
	// an array, you can store comma-separated values in the string. However, you
	// must interpret the value in your code.
	// +optional
	Value string `json:"value,omitempty"`
}

type User struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   UserSpec   `json:"spec"`
	Status UserStatus `json:"status,omitempty"`
}

type UserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []User `json:"items"`
}

type UserObservation struct {
	// The Amazon Resource Name (ARN) that identifies the user.
	ARN string `json:"arn,omitempty"`

	// The stable and unique string identifying the user.
	UserID string `json:"userId,omitempty"`
}

type UserParameters struct {
	// The path for the user name.
	// +optional
	Path *string `json:"path,omitempty"`

	// The ARN of the policy that is used to set the permissions boundary for the
	// user.
	// +optional
	PermissionsBoundary *string `json:"permissionsBoundary,omitempty"`

	// A list of tags that you want to attach to the newly created user.
	// +optional
	Tags []Tag `json:"tags,omitempty"`
}

type UserPolicyAttachment struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   UserPolicyAttachmentSpec   `json:"spec"`
	Status UserPolicyAttachmentStatus `json:"status,omitempty"`
}

type UserPolicyAttachmentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []UserPolicyAttachment `json:"items"`
}

type UserPolicyAttachmentObservation struct {
	// AttachedPolicyARN is the arn for the attached policy. If nil, the policy
	// is not yet attached
	AttachedPolicyARN string `json:"attachedPolicyArn"`
}

type UserPolicyAttachmentParameters struct {

	// PolicyARN is the Amazon Resource Name (ARN) of the IAM policy you want to
	// attach.
	// +immutable
	// +crossplane:generate:reference:type=Policy
	// +crossplane:generate:reference:extractor=PolicyARN()
	PolicyARN string `json:"policyArn,omitempty"`

	// PolicyARNRef references a Policy to retrieve its Policy ARN.
	// +optional
	PolicyARNRef *xpv1.Reference `json:"policyArnRef,omitempty"`

	// PolicyARNSelector selects a reference to a Policy to retrieve its
	// Policy ARN
	// +optional
	PolicyARNSelector *xpv1.Selector `json:"policyArnSelector,omitempty"`

	// UserName presents the name of the User.
	// +immutable
	// +crossplane:generate:reference:type=User
	UserName string `json:"userName,omitempty"`

	// UserNameRef references to an User to retrieve its userName
	// +optional
	UserNameRef *xpv1.Reference `json:"userNameRef,omitempty"`

	// UserNameSelector selects a reference to an User to retrieve its userName
	// +optional
	UserNameSelector *xpv1.Selector `json:"userNameSelector,omitempty"`
}

type UserPolicyAttachmentSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       UserPolicyAttachmentParameters `json:"forProvider"`
}

type UserPolicyAttachmentStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          UserPolicyAttachmentObservation `json:"atProvider,omitempty"`
}

type UserSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       UserParameters `json:"forProvider"`
}

type UserStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          UserObservation `json:"atProvider,omitempty"`
}