v1alpha1

type AmbiguousRoleResolutionType string

type CustomIdentityPoolParameters struct {

	// The Amazon Resource Names (ARN) of the OpenID Connect providers.
	// +crossplane:generate:reference:type=github.com/crossplane-contrib/provider-aws/apis/iam/v1beta1.OpenIDConnectProvider
	// +crossplane:generate:reference:refFieldName=OpenIDConnectProviderARNRefs
	// +crossplane:generate:reference:selectorFieldName=OpenIDConnectProviderARNSelector
	// +optional
	OpenIDConnectProviderARNs []*string `json:"openIdConnectProviderARNs,omitempty"`

	// OpenIDConnectProviderARNRefs is a list of references to OpenIDConnectProviderARNs.
	// +optional
	OpenIDConnectProviderARNRefs []xpv1.Reference `json:"openIdConnectProviderARNRefs,omitempty"`

	// OpenIDConnectProviderARNSelector selects references to OpenIDConnectProviderARNs.
	// +optional
	OpenIDConnectProviderARNSelector *xpv1.Selector `json:"openIdConnectProviderARNSelector,omitempty"`

	// An array of Amazon Cognito user pools and their client IDs.
	CognitoIdentityProviders []*Provider `json:"cognitoIdentityProviders,omitempty"`

	// TRUE if the identity pool supports unauthenticated logins.
	// +kubebuilder:validation:Required
	AllowUnauthenticatedIdentities *bool `json:"allowUnauthenticatedIdentities"`
}

type ErrorCode string

type IdentityPool struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              IdentityPoolSpec   `json:"spec"`
	Status            IdentityPoolStatus `json:"status,omitempty"`
}

type IdentityPoolList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []IdentityPool `json:"items"`
}

type IdentityPoolObservation struct {
	// TRUE if the identity pool supports unauthenticated logins.
	AllowUnauthenticatedIDentities *bool `json:"allowUnauthenticatedIDentities,omitempty"`
	// A list representing an Amazon Cognito user pool and its client ID.
	CognitoIdentityProviders []*Provider `json:"cognitoIdentityProviders,omitempty"`
	// An identity pool ID in the format REGION:GUID.
	IdentityPoolID *string `json:"identityPoolID,omitempty"`
	// The ARNs of the OpenID Connect providers.
	OpenIDConnectProviderARNs []*string `json:"openIDConnectProviderARNs,omitempty"`
}

type IdentityPoolParameters struct {
	// Region is which region the IdentityPool will be created.
	// +kubebuilder:validation:Required
	Region string `json:"region"`
	// Enables or disables the Basic (Classic) authentication flow. For more information,
	// see Identity Pools (Federated Identities) Authentication Flow (https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html)
	// in the Amazon Cognito Developer Guide.
	AllowClassicFlow *bool `json:"allowClassicFlow,omitempty"`
	// The "domain" by which Cognito will refer to your users. This name acts as
	// a placeholder that allows your backend and the Cognito service to communicate
	// about the developer provider. For the DeveloperProviderName, you can use
	// letters as well as period (.), underscore (_), and dash (-).
	//
	// Once you have set a developer provider name, you cannot change it. Please
	// take care in setting this parameter.
	DeveloperProviderName *string `json:"developerProviderName,omitempty"`
	// A string that you provide.
	// +kubebuilder:validation:Required
	IdentityPoolName *string `json:"identityPoolName"`
	// Tags to assign to the identity pool. A tag is a label that you can apply
	// to identity pools to categorize and manage them in different ways, such as
	// by purpose, owner, environment, or other criteria.
	IdentityPoolTags map[string]*string `json:"identityPoolTags,omitempty"`
	// An array of Amazon Resource Names (ARNs) of the SAML provider for your identity
	// pool.
	SamlProviderARNs []*string `json:"samlProviderARNs,omitempty"`
	// Optional key:value pairs mapping provider names to provider app IDs.
	SupportedLoginProviders      map[string]*string `json:"supportedLoginProviders,omitempty"`
	CustomIdentityPoolParameters `json:",inline"`
}

type IdentityPoolShortDescription struct {
	IdentityPoolID *string `json:"identityPoolID,omitempty"`

	IdentityPoolName *string `json:"identityPoolName,omitempty"`
}

type IdentityPoolSpec struct {
	xpv1.ResourceSpec `json:",inline"`
	ForProvider       IdentityPoolParameters `json:"forProvider"`
}

type IdentityPoolStatus struct {
	xpv1.ResourceStatus `json:",inline"`
	AtProvider          IdentityPoolObservation `json:"atProvider,omitempty"`
}

type MappingRule struct {
	RoleARN *string `json:"roleARN,omitempty"`
}

type MappingRuleMatchType string

type Provider struct {
	// The client ID for the Amazon Cognito user pool client.
	// +crossplane:generate:reference:type=github.com/crossplane-contrib/provider-aws/apis/cognitoidentityprovider/v1alpha1.UserPoolClient
	// + optional
	ClientID *string `json:"clientId,omitempty"`

	// ClientIDRef is a reference to an ClientID.
	// +optional
	ClientIDRef *xpv1.Reference `json:"clientIdRef,omitempty"`

	// ClientIDSelector selects references to ClientID.
	// +optional
	ClientIDSelector *xpv1.Selector `json:"clientIdSelector,omitempty"`

	// The provider name for an Amazon Cognito user pool.
	// +crossplane:generate:reference:type=github.com/crossplane-contrib/provider-aws/apis/cognitoidentityprovider/v1alpha1.UserPool
	// +crossplane:generate:reference:extractor=github.com/crossplane-contrib/provider-aws/apis/cognitoidentityprovider/v1alpha1.UserPoolName()
	// +optional
	ProviderName *string `json:"providerName,omitempty"`

	// ProviderNameRef is a reference to an ProviderName.
	// +optional
	ProviderNameRef *xpv1.Reference `json:"providerNameRef,omitempty"`

	// ProviderNameSelector selects references to ProviderName.
	// +optional
	ProviderNameSelector *xpv1.Selector `json:"providerNameSelector,omitempty"`

	// Whether the server-side token validation is enabled for the identity provider’s token.
	// +optional
	ServerSideTokenCheck *bool `json:"serverSideTokenCheck,omitempty"`
}

type RoleMappingType string