securitylake

type AwsLogSource struct {
	pulumi.CustomResourceState

	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Specify the natively-supported AWS service to add as a source in Security Lake.
	Source AwsLogSourceSourcePtrOutput `pulumi:"source"`
}

type AwsLogSourceArgs struct {
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Specify the natively-supported AWS service to add as a source in Security Lake.
	Source AwsLogSourceSourcePtrInput
}

type AwsLogSourceArray []AwsLogSourceInput

type AwsLogSourceArrayInput interface {
	pulumi.Input

	ToAwsLogSourceArrayOutput() AwsLogSourceArrayOutput
	ToAwsLogSourceArrayOutputWithContext(context.Context) AwsLogSourceArrayOutput
}

type AwsLogSourceArrayOutput struct{ *pulumi.OutputState }

type AwsLogSourceInput interface {
	pulumi.Input

	ToAwsLogSourceOutput() AwsLogSourceOutput
	ToAwsLogSourceOutputWithContext(ctx context.Context) AwsLogSourceOutput
}

type AwsLogSourceMap map[string]AwsLogSourceInput

type AwsLogSourceMapInput interface {
	pulumi.Input

	ToAwsLogSourceMapOutput() AwsLogSourceMapOutput
	ToAwsLogSourceMapOutputWithContext(context.Context) AwsLogSourceMapOutput
}

type AwsLogSourceMapOutput struct{ *pulumi.OutputState }

type AwsLogSourceOutput struct{ *pulumi.OutputState }

type AwsLogSourceSource struct {
	// Specify the AWS account information where you want to enable Security Lake.
	// If not specified, uses all accounts included in the Security Lake.
	Accounts []string `pulumi:"accounts"`
	// Specify the Regions where you want to enable Security Lake.
	Regions []string `pulumi:"regions"`
	// The name for a AWS source. This must be a Regionally unique value. Valid values: `ROUTE53`, `VPC_FLOW`, `SH_FINDINGS`, `CLOUD_TRAIL_MGMT`, `LAMBDA_EXECUTION`, `S3_DATA`, `EKS_AUDIT`, `WAF`.
	SourceName string `pulumi:"sourceName"`
	// The version for a AWS source.
	// If not specified, the version will be the default.
	// This must be a Regionally unique value.
	SourceVersion *string `pulumi:"sourceVersion"`
}

type AwsLogSourceSourceArgs struct {
	// Specify the AWS account information where you want to enable Security Lake.
	// If not specified, uses all accounts included in the Security Lake.
	Accounts pulumi.StringArrayInput `pulumi:"accounts"`
	// Specify the Regions where you want to enable Security Lake.
	Regions pulumi.StringArrayInput `pulumi:"regions"`
	// The name for a AWS source. This must be a Regionally unique value. Valid values: `ROUTE53`, `VPC_FLOW`, `SH_FINDINGS`, `CLOUD_TRAIL_MGMT`, `LAMBDA_EXECUTION`, `S3_DATA`, `EKS_AUDIT`, `WAF`.
	SourceName pulumi.StringInput `pulumi:"sourceName"`
	// The version for a AWS source.
	// If not specified, the version will be the default.
	// This must be a Regionally unique value.
	SourceVersion pulumi.StringPtrInput `pulumi:"sourceVersion"`
}

type AwsLogSourceSourceInput interface {
	pulumi.Input

	ToAwsLogSourceSourceOutput() AwsLogSourceSourceOutput
	ToAwsLogSourceSourceOutputWithContext(context.Context) AwsLogSourceSourceOutput
}

type AwsLogSourceSourceOutput struct{ *pulumi.OutputState }

type AwsLogSourceSourcePtrInput interface {
	pulumi.Input

	ToAwsLogSourceSourcePtrOutput() AwsLogSourceSourcePtrOutput
	ToAwsLogSourceSourcePtrOutputWithContext(context.Context) AwsLogSourceSourcePtrOutput
}

type AwsLogSourceSourcePtrOutput struct{ *pulumi.OutputState }

type AwsLogSourceState struct {
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Specify the natively-supported AWS service to add as a source in Security Lake.
	Source AwsLogSourceSourcePtrInput
}

type CustomLogSource struct {
	pulumi.CustomResourceState

	// The attributes of a third-party custom source.
	Attributes CustomLogSourceAttributeArrayOutput `pulumi:"attributes"`
	// The configuration for the third-party custom source.
	Configuration CustomLogSourceConfigurationPtrOutput `pulumi:"configuration"`
	// The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake.
	EventClasses pulumi.StringArrayOutput `pulumi:"eventClasses"`
	// The details of the log provider for a third-party custom source.
	ProviderDetails CustomLogSourceProviderDetailArrayOutput `pulumi:"providerDetails"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Specify the name for a third-party custom source.
	// This must be a Regionally unique value.
	// Has a maximum length of 20.
	SourceName pulumi.StringOutput `pulumi:"sourceName"`
	// Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.
	SourceVersion pulumi.StringOutput `pulumi:"sourceVersion"`
}

type CustomLogSourceArgs struct {
	// The configuration for the third-party custom source.
	Configuration CustomLogSourceConfigurationPtrInput
	// The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake.
	EventClasses pulumi.StringArrayInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Specify the name for a third-party custom source.
	// This must be a Regionally unique value.
	// Has a maximum length of 20.
	SourceName pulumi.StringInput
	// Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.
	SourceVersion pulumi.StringPtrInput
}

type CustomLogSourceArray []CustomLogSourceInput

type CustomLogSourceArrayInput interface {
	pulumi.Input

	ToCustomLogSourceArrayOutput() CustomLogSourceArrayOutput
	ToCustomLogSourceArrayOutputWithContext(context.Context) CustomLogSourceArrayOutput
}

type CustomLogSourceArrayOutput struct{ *pulumi.OutputState }

type CustomLogSourceAttribute struct {
	// The ARN of the AWS Glue crawler.
	CrawlerArn string `pulumi:"crawlerArn"`
	// The ARN of the AWS Glue database where results are written.
	DatabaseArn string `pulumi:"databaseArn"`
	// The ARN of the AWS Glue table.
	TableArn string `pulumi:"tableArn"`
}

type CustomLogSourceAttributeArgs struct {
	// The ARN of the AWS Glue crawler.
	CrawlerArn pulumi.StringInput `pulumi:"crawlerArn"`
	// The ARN of the AWS Glue database where results are written.
	DatabaseArn pulumi.StringInput `pulumi:"databaseArn"`
	// The ARN of the AWS Glue table.
	TableArn pulumi.StringInput `pulumi:"tableArn"`
}

type CustomLogSourceAttributeArray []CustomLogSourceAttributeInput

type CustomLogSourceAttributeArrayInput interface {
	pulumi.Input

	ToCustomLogSourceAttributeArrayOutput() CustomLogSourceAttributeArrayOutput
	ToCustomLogSourceAttributeArrayOutputWithContext(context.Context) CustomLogSourceAttributeArrayOutput
}

type CustomLogSourceAttributeArrayOutput struct{ *pulumi.OutputState }

type CustomLogSourceAttributeInput interface {
	pulumi.Input

	ToCustomLogSourceAttributeOutput() CustomLogSourceAttributeOutput
	ToCustomLogSourceAttributeOutputWithContext(context.Context) CustomLogSourceAttributeOutput
}

type CustomLogSourceAttributeOutput struct{ *pulumi.OutputState }

type CustomLogSourceConfiguration struct {
	// The configuration for the Glue Crawler for the third-party custom source.
	CrawlerConfiguration *CustomLogSourceConfigurationCrawlerConfiguration `pulumi:"crawlerConfiguration"`
	// The identity of the log provider for the third-party custom source.
	ProviderIdentity *CustomLogSourceConfigurationProviderIdentity `pulumi:"providerIdentity"`
}

type CustomLogSourceConfigurationArgs struct {
	// The configuration for the Glue Crawler for the third-party custom source.
	CrawlerConfiguration CustomLogSourceConfigurationCrawlerConfigurationPtrInput `pulumi:"crawlerConfiguration"`
	// The identity of the log provider for the third-party custom source.
	ProviderIdentity CustomLogSourceConfigurationProviderIdentityPtrInput `pulumi:"providerIdentity"`
}

type CustomLogSourceConfigurationCrawlerConfiguration struct {
	// The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role to be used by the AWS Glue crawler.
	RoleArn string `pulumi:"roleArn"`
}

type CustomLogSourceConfigurationCrawlerConfigurationArgs struct {
	// The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role to be used by the AWS Glue crawler.
	RoleArn pulumi.StringInput `pulumi:"roleArn"`
}

type CustomLogSourceConfigurationCrawlerConfigurationInput interface {
	pulumi.Input

	ToCustomLogSourceConfigurationCrawlerConfigurationOutput() CustomLogSourceConfigurationCrawlerConfigurationOutput
	ToCustomLogSourceConfigurationCrawlerConfigurationOutputWithContext(context.Context) CustomLogSourceConfigurationCrawlerConfigurationOutput
}

type CustomLogSourceConfigurationCrawlerConfigurationOutput struct{ *pulumi.OutputState }

type CustomLogSourceConfigurationCrawlerConfigurationPtrInput interface {
	pulumi.Input

	ToCustomLogSourceConfigurationCrawlerConfigurationPtrOutput() CustomLogSourceConfigurationCrawlerConfigurationPtrOutput
	ToCustomLogSourceConfigurationCrawlerConfigurationPtrOutputWithContext(context.Context) CustomLogSourceConfigurationCrawlerConfigurationPtrOutput
}

type CustomLogSourceConfigurationCrawlerConfigurationPtrOutput struct{ *pulumi.OutputState }

type CustomLogSourceConfigurationInput interface {
	pulumi.Input

	ToCustomLogSourceConfigurationOutput() CustomLogSourceConfigurationOutput
	ToCustomLogSourceConfigurationOutputWithContext(context.Context) CustomLogSourceConfigurationOutput
}

type CustomLogSourceConfigurationOutput struct{ *pulumi.OutputState }

type CustomLogSourceConfigurationProviderIdentity struct {
	// The external ID used to estalish trust relationship with the AWS identity.
	ExternalId string `pulumi:"externalId"`
	// The AWS identity principal.
	Principal string `pulumi:"principal"`
}

type CustomLogSourceConfigurationProviderIdentityArgs struct {
	// The external ID used to estalish trust relationship with the AWS identity.
	ExternalId pulumi.StringInput `pulumi:"externalId"`
	// The AWS identity principal.
	Principal pulumi.StringInput `pulumi:"principal"`
}

type CustomLogSourceConfigurationProviderIdentityInput interface {
	pulumi.Input

	ToCustomLogSourceConfigurationProviderIdentityOutput() CustomLogSourceConfigurationProviderIdentityOutput
	ToCustomLogSourceConfigurationProviderIdentityOutputWithContext(context.Context) CustomLogSourceConfigurationProviderIdentityOutput
}

type CustomLogSourceConfigurationProviderIdentityOutput struct{ *pulumi.OutputState }

type CustomLogSourceConfigurationProviderIdentityPtrInput interface {
	pulumi.Input

	ToCustomLogSourceConfigurationProviderIdentityPtrOutput() CustomLogSourceConfigurationProviderIdentityPtrOutput
	ToCustomLogSourceConfigurationProviderIdentityPtrOutputWithContext(context.Context) CustomLogSourceConfigurationProviderIdentityPtrOutput
}

type CustomLogSourceConfigurationProviderIdentityPtrOutput struct{ *pulumi.OutputState }

type CustomLogSourceConfigurationPtrInput interface {
	pulumi.Input

	ToCustomLogSourceConfigurationPtrOutput() CustomLogSourceConfigurationPtrOutput
	ToCustomLogSourceConfigurationPtrOutputWithContext(context.Context) CustomLogSourceConfigurationPtrOutput
}

type CustomLogSourceConfigurationPtrOutput struct{ *pulumi.OutputState }

type CustomLogSourceInput interface {
	pulumi.Input

	ToCustomLogSourceOutput() CustomLogSourceOutput
	ToCustomLogSourceOutputWithContext(ctx context.Context) CustomLogSourceOutput
}

type CustomLogSourceMap map[string]CustomLogSourceInput

type CustomLogSourceMapInput interface {
	pulumi.Input

	ToCustomLogSourceMapOutput() CustomLogSourceMapOutput
	ToCustomLogSourceMapOutputWithContext(context.Context) CustomLogSourceMapOutput
}

type CustomLogSourceMapOutput struct{ *pulumi.OutputState }

type CustomLogSourceOutput struct{ *pulumi.OutputState }

type CustomLogSourceProviderDetail struct {
	// The location of the partition in the Amazon S3 bucket for Security Lake.
	Location string `pulumi:"location"`
	// The ARN of the IAM role to be used by the entity putting logs into your custom source partition.
	RoleArn string `pulumi:"roleArn"`
}

type CustomLogSourceProviderDetailArgs struct {
	// The location of the partition in the Amazon S3 bucket for Security Lake.
	Location pulumi.StringInput `pulumi:"location"`
	// The ARN of the IAM role to be used by the entity putting logs into your custom source partition.
	RoleArn pulumi.StringInput `pulumi:"roleArn"`
}

type CustomLogSourceProviderDetailArray []CustomLogSourceProviderDetailInput

type CustomLogSourceProviderDetailArrayInput interface {
	pulumi.Input

	ToCustomLogSourceProviderDetailArrayOutput() CustomLogSourceProviderDetailArrayOutput
	ToCustomLogSourceProviderDetailArrayOutputWithContext(context.Context) CustomLogSourceProviderDetailArrayOutput
}

type CustomLogSourceProviderDetailArrayOutput struct{ *pulumi.OutputState }

type CustomLogSourceProviderDetailInput interface {
	pulumi.Input

	ToCustomLogSourceProviderDetailOutput() CustomLogSourceProviderDetailOutput
	ToCustomLogSourceProviderDetailOutputWithContext(context.Context) CustomLogSourceProviderDetailOutput
}

type CustomLogSourceProviderDetailOutput struct{ *pulumi.OutputState }

type CustomLogSourceState struct {
	// The attributes of a third-party custom source.
	Attributes CustomLogSourceAttributeArrayInput
	// The configuration for the third-party custom source.
	Configuration CustomLogSourceConfigurationPtrInput
	// The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake.
	EventClasses pulumi.StringArrayInput
	// The details of the log provider for a third-party custom source.
	ProviderDetails CustomLogSourceProviderDetailArrayInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Specify the name for a third-party custom source.
	// This must be a Regionally unique value.
	// Has a maximum length of 20.
	SourceName pulumi.StringPtrInput
	// Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.
	SourceVersion pulumi.StringPtrInput
}

type DataLake struct {
	pulumi.CustomResourceState

	// ARN of the Data Lake.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Specify the Region or Regions that will contribute data to the rollup region.
	Configuration DataLakeConfigurationPtrOutput `pulumi:"configuration"`
	// The Amazon Resource Name (ARN) used to create and update the AWS Glue table. This table contains partitions generated by the ingestion and normalization of AWS log sources and custom sources.
	MetaStoreManagerRoleArn pulumi.StringOutput `pulumi:"metaStoreManagerRoleArn"`
	// The AWS Regions where Security Lake is automatically enabled.
	Region pulumi.StringOutput `pulumi:"region"`
	// The ARN for the Amazon Security Lake Amazon S3 bucket.
	S3BucketArn pulumi.StringOutput `pulumi:"s3BucketArn"`
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll  pulumi.StringMapOutput    `pulumi:"tagsAll"`
	Timeouts DataLakeTimeoutsPtrOutput `pulumi:"timeouts"`
}

type DataLakeArgs struct {
	// Specify the Region or Regions that will contribute data to the rollup region.
	Configuration DataLakeConfigurationPtrInput
	// The Amazon Resource Name (ARN) used to create and update the AWS Glue table. This table contains partitions generated by the ingestion and normalization of AWS log sources and custom sources.
	MetaStoreManagerRoleArn pulumi.StringInput
	// The AWS Regions where Security Lake is automatically enabled.
	Region pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags     pulumi.StringMapInput
	Timeouts DataLakeTimeoutsPtrInput
}

type DataLakeArray []DataLakeInput

type DataLakeArrayInput interface {
	pulumi.Input

	ToDataLakeArrayOutput() DataLakeArrayOutput
	ToDataLakeArrayOutputWithContext(context.Context) DataLakeArrayOutput
}

type DataLakeArrayOutput struct{ *pulumi.OutputState }

type DataLakeConfiguration struct {
	// Provides encryption details of Amazon Security Lake object.
	EncryptionConfigurations []DataLakeConfigurationEncryptionConfiguration `pulumi:"encryptionConfigurations"`
	// Provides lifecycle details of Amazon Security Lake object.
	LifecycleConfiguration *DataLakeConfigurationLifecycleConfiguration `pulumi:"lifecycleConfiguration"`
	// The AWS Regions where Security Lake is automatically enabled.
	Region string `pulumi:"region"`
	// Provides replication details of Amazon Security Lake object.
	ReplicationConfiguration *DataLakeConfigurationReplicationConfiguration `pulumi:"replicationConfiguration"`
}

type DataLakeConfigurationArgs struct {
	// Provides encryption details of Amazon Security Lake object.
	EncryptionConfigurations DataLakeConfigurationEncryptionConfigurationArrayInput `pulumi:"encryptionConfigurations"`
	// Provides lifecycle details of Amazon Security Lake object.
	LifecycleConfiguration DataLakeConfigurationLifecycleConfigurationPtrInput `pulumi:"lifecycleConfiguration"`
	// The AWS Regions where Security Lake is automatically enabled.
	Region pulumi.StringInput `pulumi:"region"`
	// Provides replication details of Amazon Security Lake object.
	ReplicationConfiguration DataLakeConfigurationReplicationConfigurationPtrInput `pulumi:"replicationConfiguration"`
}

type DataLakeConfigurationEncryptionConfiguration struct {
	// The id of KMS encryption key used by Amazon Security Lake to encrypt the Security Lake object.
	KmsKeyId string `pulumi:"kmsKeyId"`
}

type DataLakeConfigurationEncryptionConfigurationArgs struct {
	// The id of KMS encryption key used by Amazon Security Lake to encrypt the Security Lake object.
	KmsKeyId pulumi.StringInput `pulumi:"kmsKeyId"`
}

type DataLakeConfigurationEncryptionConfigurationArray []DataLakeConfigurationEncryptionConfigurationInput

type DataLakeConfigurationEncryptionConfigurationArrayInput interface {
	pulumi.Input

	ToDataLakeConfigurationEncryptionConfigurationArrayOutput() DataLakeConfigurationEncryptionConfigurationArrayOutput
	ToDataLakeConfigurationEncryptionConfigurationArrayOutputWithContext(context.Context) DataLakeConfigurationEncryptionConfigurationArrayOutput
}

type DataLakeConfigurationEncryptionConfigurationArrayOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationEncryptionConfigurationInput interface {
	pulumi.Input

	ToDataLakeConfigurationEncryptionConfigurationOutput() DataLakeConfigurationEncryptionConfigurationOutput
	ToDataLakeConfigurationEncryptionConfigurationOutputWithContext(context.Context) DataLakeConfigurationEncryptionConfigurationOutput
}

type DataLakeConfigurationEncryptionConfigurationOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationInput interface {
	pulumi.Input

	ToDataLakeConfigurationOutput() DataLakeConfigurationOutput
	ToDataLakeConfigurationOutputWithContext(context.Context) DataLakeConfigurationOutput
}

type DataLakeConfigurationLifecycleConfiguration struct {
	// Provides data expiration details of Amazon Security Lake object.
	Expiration *DataLakeConfigurationLifecycleConfigurationExpiration `pulumi:"expiration"`
	// Provides data storage transition details of Amazon Security Lake object.
	Transitions []DataLakeConfigurationLifecycleConfigurationTransition `pulumi:"transitions"`
}

type DataLakeConfigurationLifecycleConfigurationArgs struct {
	// Provides data expiration details of Amazon Security Lake object.
	Expiration DataLakeConfigurationLifecycleConfigurationExpirationPtrInput `pulumi:"expiration"`
	// Provides data storage transition details of Amazon Security Lake object.
	Transitions DataLakeConfigurationLifecycleConfigurationTransitionArrayInput `pulumi:"transitions"`
}

type DataLakeConfigurationLifecycleConfigurationExpiration struct {
	// Number of days before data transition to a different S3 Storage Class in the Amazon Security Lake object.
	Days *int `pulumi:"days"`
}

type DataLakeConfigurationLifecycleConfigurationExpirationArgs struct {
	// Number of days before data transition to a different S3 Storage Class in the Amazon Security Lake object.
	Days pulumi.IntPtrInput `pulumi:"days"`
}

type DataLakeConfigurationLifecycleConfigurationExpirationInput interface {
	pulumi.Input

	ToDataLakeConfigurationLifecycleConfigurationExpirationOutput() DataLakeConfigurationLifecycleConfigurationExpirationOutput
	ToDataLakeConfigurationLifecycleConfigurationExpirationOutputWithContext(context.Context) DataLakeConfigurationLifecycleConfigurationExpirationOutput
}

type DataLakeConfigurationLifecycleConfigurationExpirationOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationLifecycleConfigurationExpirationPtrInput interface {
	pulumi.Input

	ToDataLakeConfigurationLifecycleConfigurationExpirationPtrOutput() DataLakeConfigurationLifecycleConfigurationExpirationPtrOutput
	ToDataLakeConfigurationLifecycleConfigurationExpirationPtrOutputWithContext(context.Context) DataLakeConfigurationLifecycleConfigurationExpirationPtrOutput
}

type DataLakeConfigurationLifecycleConfigurationExpirationPtrOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationLifecycleConfigurationInput interface {
	pulumi.Input

	ToDataLakeConfigurationLifecycleConfigurationOutput() DataLakeConfigurationLifecycleConfigurationOutput
	ToDataLakeConfigurationLifecycleConfigurationOutputWithContext(context.Context) DataLakeConfigurationLifecycleConfigurationOutput
}

type DataLakeConfigurationLifecycleConfigurationOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationLifecycleConfigurationPtrInput interface {
	pulumi.Input

	ToDataLakeConfigurationLifecycleConfigurationPtrOutput() DataLakeConfigurationLifecycleConfigurationPtrOutput
	ToDataLakeConfigurationLifecycleConfigurationPtrOutputWithContext(context.Context) DataLakeConfigurationLifecycleConfigurationPtrOutput
}

type DataLakeConfigurationLifecycleConfigurationPtrOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationLifecycleConfigurationTransition struct {
	// Number of days before data transition to a different S3 Storage Class in the Amazon Security Lake object.
	Days *int `pulumi:"days"`
	// The range of storage classes that you can choose from based on the data access, resiliency, and cost requirements of your workloads.
	StorageClass *string `pulumi:"storageClass"`
}

type DataLakeConfigurationLifecycleConfigurationTransitionArgs struct {
	// Number of days before data transition to a different S3 Storage Class in the Amazon Security Lake object.
	Days pulumi.IntPtrInput `pulumi:"days"`
	// The range of storage classes that you can choose from based on the data access, resiliency, and cost requirements of your workloads.
	StorageClass pulumi.StringPtrInput `pulumi:"storageClass"`
}

type DataLakeConfigurationLifecycleConfigurationTransitionArray []DataLakeConfigurationLifecycleConfigurationTransitionInput

type DataLakeConfigurationLifecycleConfigurationTransitionArrayInput interface {
	pulumi.Input

	ToDataLakeConfigurationLifecycleConfigurationTransitionArrayOutput() DataLakeConfigurationLifecycleConfigurationTransitionArrayOutput
	ToDataLakeConfigurationLifecycleConfigurationTransitionArrayOutputWithContext(context.Context) DataLakeConfigurationLifecycleConfigurationTransitionArrayOutput
}

type DataLakeConfigurationLifecycleConfigurationTransitionArrayOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationLifecycleConfigurationTransitionInput interface {
	pulumi.Input

	ToDataLakeConfigurationLifecycleConfigurationTransitionOutput() DataLakeConfigurationLifecycleConfigurationTransitionOutput
	ToDataLakeConfigurationLifecycleConfigurationTransitionOutputWithContext(context.Context) DataLakeConfigurationLifecycleConfigurationTransitionOutput
}

type DataLakeConfigurationLifecycleConfigurationTransitionOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationPtrInput interface {
	pulumi.Input

	ToDataLakeConfigurationPtrOutput() DataLakeConfigurationPtrOutput
	ToDataLakeConfigurationPtrOutputWithContext(context.Context) DataLakeConfigurationPtrOutput
}

type DataLakeConfigurationPtrOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationReplicationConfiguration struct {
	// Replication enables automatic, asynchronous copying of objects across Amazon S3 buckets. Amazon S3 buckets that are configured for object replication can be owned by the same AWS account or by different accounts. You can replicate objects to a single destination bucket or to multiple destination buckets. The destination buckets can be in different AWS Regions or within the same Region as the source bucket.
	Regions []string `pulumi:"regions"`
	// Replication settings for the Amazon S3 buckets. This parameter uses the AWS Identity and Access Management (IAM) role you created that is managed by Security Lake, to ensure the replication setting is correct.
	RoleArn *string `pulumi:"roleArn"`
}

type DataLakeConfigurationReplicationConfigurationArgs struct {
	// Replication enables automatic, asynchronous copying of objects across Amazon S3 buckets. Amazon S3 buckets that are configured for object replication can be owned by the same AWS account or by different accounts. You can replicate objects to a single destination bucket or to multiple destination buckets. The destination buckets can be in different AWS Regions or within the same Region as the source bucket.
	Regions pulumi.StringArrayInput `pulumi:"regions"`
	// Replication settings for the Amazon S3 buckets. This parameter uses the AWS Identity and Access Management (IAM) role you created that is managed by Security Lake, to ensure the replication setting is correct.
	RoleArn pulumi.StringPtrInput `pulumi:"roleArn"`
}

type DataLakeConfigurationReplicationConfigurationInput interface {
	pulumi.Input

	ToDataLakeConfigurationReplicationConfigurationOutput() DataLakeConfigurationReplicationConfigurationOutput
	ToDataLakeConfigurationReplicationConfigurationOutputWithContext(context.Context) DataLakeConfigurationReplicationConfigurationOutput
}

type DataLakeConfigurationReplicationConfigurationOutput struct{ *pulumi.OutputState }

type DataLakeConfigurationReplicationConfigurationPtrInput interface {
	pulumi.Input

	ToDataLakeConfigurationReplicationConfigurationPtrOutput() DataLakeConfigurationReplicationConfigurationPtrOutput
	ToDataLakeConfigurationReplicationConfigurationPtrOutputWithContext(context.Context) DataLakeConfigurationReplicationConfigurationPtrOutput
}

type DataLakeConfigurationReplicationConfigurationPtrOutput struct{ *pulumi.OutputState }

type DataLakeInput interface {
	pulumi.Input

	ToDataLakeOutput() DataLakeOutput
	ToDataLakeOutputWithContext(ctx context.Context) DataLakeOutput
}

type DataLakeMap map[string]DataLakeInput

type DataLakeMapInput interface {
	pulumi.Input

	ToDataLakeMapOutput() DataLakeMapOutput
	ToDataLakeMapOutputWithContext(context.Context) DataLakeMapOutput
}

type DataLakeMapOutput struct{ *pulumi.OutputState }

type DataLakeOutput struct{ *pulumi.OutputState }

type DataLakeState struct {
	// ARN of the Data Lake.
	Arn pulumi.StringPtrInput
	// Specify the Region or Regions that will contribute data to the rollup region.
	Configuration DataLakeConfigurationPtrInput
	// The Amazon Resource Name (ARN) used to create and update the AWS Glue table. This table contains partitions generated by the ingestion and normalization of AWS log sources and custom sources.
	MetaStoreManagerRoleArn pulumi.StringPtrInput
	// The AWS Regions where Security Lake is automatically enabled.
	Region pulumi.StringPtrInput
	// The ARN for the Amazon Security Lake Amazon S3 bucket.
	S3BucketArn pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll  pulumi.StringMapInput
	Timeouts DataLakeTimeoutsPtrInput
}

type DataLakeTimeouts struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create *string `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete *string `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update *string `pulumi:"update"`
}

type DataLakeTimeoutsArgs struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create pulumi.StringPtrInput `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete pulumi.StringPtrInput `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update pulumi.StringPtrInput `pulumi:"update"`
}

type DataLakeTimeoutsInput interface {
	pulumi.Input

	ToDataLakeTimeoutsOutput() DataLakeTimeoutsOutput
	ToDataLakeTimeoutsOutputWithContext(context.Context) DataLakeTimeoutsOutput
}

type DataLakeTimeoutsOutput struct{ *pulumi.OutputState }

type DataLakeTimeoutsPtrInput interface {
	pulumi.Input

	ToDataLakeTimeoutsPtrOutput() DataLakeTimeoutsPtrOutput
	ToDataLakeTimeoutsPtrOutputWithContext(context.Context) DataLakeTimeoutsPtrOutput
}

type DataLakeTimeoutsPtrOutput struct{ *pulumi.OutputState }

type Subscriber struct {
	pulumi.CustomResourceState

	// The Amazon S3 or Lake Formation access type.
	AccessType pulumi.StringOutput `pulumi:"accessType"`
	// ARN of the Data Lake.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// The Amazon Resource Name (ARN) which uniquely defines the AWS RAM resource share. Before accepting the RAM resource share invitation, you can view details related to the RAM resource share.
	ResourceShareArn pulumi.StringOutput `pulumi:"resourceShareArn"`
	// The name of the resource share.
	ResourceShareName pulumi.StringOutput `pulumi:"resourceShareName"`
	// The ARN of the IAM role to be used by the entity putting logs into your custom source partition.
	RoleArn pulumi.StringOutput `pulumi:"roleArn"`
	// The ARN for the Amazon Security Lake Amazon S3 bucket.
	S3BucketArn pulumi.StringOutput `pulumi:"s3BucketArn"`
	// The supported AWS services from which logs and events are collected. Security Lake supports log and event collection for natively supported AWS services. See `source` Blocks below.
	Sources SubscriberSourceArrayOutput `pulumi:"sources"`
	// The description for your subscriber account in Security Lake.
	SubscriberDescription pulumi.StringPtrOutput `pulumi:"subscriberDescription"`
	// The subscriber endpoint to which exception messages are posted.
	SubscriberEndpoint pulumi.StringOutput `pulumi:"subscriberEndpoint"`
	// The AWS identity used to access your data. See `subscriberIdentity` Block below.
	SubscriberIdentity SubscriberSubscriberIdentityPtrOutput `pulumi:"subscriberIdentity"`
	// The name of your Security Lake subscriber account.
	SubscriberName pulumi.StringPtrOutput `pulumi:"subscriberName"`
	// The subscriber status of the Amazon Security Lake subscriber account.
	SubscriberStatus pulumi.StringOutput `pulumi:"subscriberStatus"`
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll  pulumi.StringMapOutput      `pulumi:"tagsAll"`
	Timeouts SubscriberTimeoutsPtrOutput `pulumi:"timeouts"`
}

type SubscriberArgs struct {
	// The Amazon S3 or Lake Formation access type.
	AccessType pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The supported AWS services from which logs and events are collected. Security Lake supports log and event collection for natively supported AWS services. See `source` Blocks below.
	Sources SubscriberSourceArrayInput
	// The description for your subscriber account in Security Lake.
	SubscriberDescription pulumi.StringPtrInput
	// The AWS identity used to access your data. See `subscriberIdentity` Block below.
	SubscriberIdentity SubscriberSubscriberIdentityPtrInput
	// The name of your Security Lake subscriber account.
	SubscriberName pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags     pulumi.StringMapInput
	Timeouts SubscriberTimeoutsPtrInput
}

type SubscriberArray []SubscriberInput

type SubscriberArrayInput interface {
	pulumi.Input

	ToSubscriberArrayOutput() SubscriberArrayOutput
	ToSubscriberArrayOutputWithContext(context.Context) SubscriberArrayOutput
}

type SubscriberArrayOutput struct{ *pulumi.OutputState }

type SubscriberInput interface {
	pulumi.Input

	ToSubscriberOutput() SubscriberOutput
	ToSubscriberOutputWithContext(ctx context.Context) SubscriberOutput
}

type SubscriberMap map[string]SubscriberInput

type SubscriberMapInput interface {
	pulumi.Input

	ToSubscriberMapOutput() SubscriberMapOutput
	ToSubscriberMapOutputWithContext(context.Context) SubscriberMapOutput
}

type SubscriberMapOutput struct{ *pulumi.OutputState }

type SubscriberNotification struct {
	pulumi.CustomResourceState

	// Specify the configuration using which you want to create the subscriber notification..
	Configuration SubscriberNotificationConfigurationPtrOutput `pulumi:"configuration"`
	// (**Deprecated**) The subscriber endpoint to which exception messages are posted.
	//
	// Deprecated: Use subscriberEndpoint instead
	EndpointId pulumi.StringOutput `pulumi:"endpointId"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// The subscriber endpoint to which exception messages are posted.
	SubscriberEndpoint pulumi.StringOutput `pulumi:"subscriberEndpoint"`
	// The subscriber ID for the notification subscription.
	SubscriberId pulumi.StringOutput `pulumi:"subscriberId"`
}

type SubscriberNotificationArgs struct {
	// Specify the configuration using which you want to create the subscriber notification..
	Configuration SubscriberNotificationConfigurationPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The subscriber ID for the notification subscription.
	SubscriberId pulumi.StringInput
}