verifiedaccess

type Endpoint struct {
	pulumi.CustomResourceState

	// The DNS name for users to reach your application. This parameter is required if the endpoint type is `load-balancer` or `network-interface`.
	ApplicationDomain pulumi.StringPtrOutput `pulumi:"applicationDomain"`
	// The type of attachment. Currently, only `vpc` is supported.
	AttachmentType pulumi.StringOutput `pulumi:"attachmentType"`
	// The CIDR block details. This parameter is required if the endpoint type is `cidr`.
	CidrOptions EndpointCidrOptionsPtrOutput `pulumi:"cidrOptions"`
	// A description for the Verified Access endpoint.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Returned if endpoint has a device trust provider attached.
	DeviceValidationDomain pulumi.StringOutput `pulumi:"deviceValidationDomain"`
	// The ARN of the public TLS/SSL certificate in AWS Certificate Manager to associate with the endpoint. The CN in the certificate must match the DNS name your end users will use to reach your application. This parameter is required if the endpoint type is `load-balancer` or `network-interface`.
	DomainCertificateArn pulumi.StringPtrOutput `pulumi:"domainCertificateArn"`
	// A DNS name that is generated for the endpoint.
	EndpointDomain pulumi.StringOutput `pulumi:"endpointDomain"`
	// A custom identifier that is prepended to the DNS name that is generated for the endpoint.
	EndpointDomainPrefix pulumi.StringPtrOutput `pulumi:"endpointDomainPrefix"`
	// The type of Verified Access endpoint to create. Currently `load-balancer` or `network-interface` are supported.
	EndpointType pulumi.StringOutput `pulumi:"endpointType"`
	// The load balancer details. This parameter is required if the endpoint type is `load-balancer`.
	LoadBalancerOptions EndpointLoadBalancerOptionsPtrOutput `pulumi:"loadBalancerOptions"`
	// The network interface details. This parameter is required if the endpoint type is `network-interface`.
	NetworkInterfaceOptions EndpointNetworkInterfaceOptionsPtrOutput `pulumi:"networkInterfaceOptions"`
	// The policy document that is associated with this resource.
	PolicyDocument pulumi.StringPtrOutput      `pulumi:"policyDocument"`
	RdsOptions     EndpointRdsOptionsPtrOutput `pulumi:"rdsOptions"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// List of the the security groups IDs to associate with the Verified Access endpoint.
	SecurityGroupIds pulumi.StringArrayOutput `pulumi:"securityGroupIds"`
	// The options in use for server side encryption.
	SseSpecification EndpointSseSpecificationOutput `pulumi:"sseSpecification"`
	// Key-value tags for the Verified Access Endpoint. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapOutput `pulumi:"tags"`
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
	// The ID of the Verified Access group to associate the endpoint with.
	//
	// The following arguments are optional:
	VerifiedAccessGroupId    pulumi.StringOutput `pulumi:"verifiedAccessGroupId"`
	VerifiedAccessInstanceId pulumi.StringOutput `pulumi:"verifiedAccessInstanceId"`
}

type EndpointArgs struct {
	// The DNS name for users to reach your application. This parameter is required if the endpoint type is `load-balancer` or `network-interface`.
	ApplicationDomain pulumi.StringPtrInput
	// The type of attachment. Currently, only `vpc` is supported.
	AttachmentType pulumi.StringInput
	// The CIDR block details. This parameter is required if the endpoint type is `cidr`.
	CidrOptions EndpointCidrOptionsPtrInput
	// A description for the Verified Access endpoint.
	Description pulumi.StringPtrInput
	// The ARN of the public TLS/SSL certificate in AWS Certificate Manager to associate with the endpoint. The CN in the certificate must match the DNS name your end users will use to reach your application. This parameter is required if the endpoint type is `load-balancer` or `network-interface`.
	DomainCertificateArn pulumi.StringPtrInput
	// A custom identifier that is prepended to the DNS name that is generated for the endpoint.
	EndpointDomainPrefix pulumi.StringPtrInput
	// The type of Verified Access endpoint to create. Currently `load-balancer` or `network-interface` are supported.
	EndpointType pulumi.StringInput
	// The load balancer details. This parameter is required if the endpoint type is `load-balancer`.
	LoadBalancerOptions EndpointLoadBalancerOptionsPtrInput
	// The network interface details. This parameter is required if the endpoint type is `network-interface`.
	NetworkInterfaceOptions EndpointNetworkInterfaceOptionsPtrInput
	// The policy document that is associated with this resource.
	PolicyDocument pulumi.StringPtrInput
	RdsOptions     EndpointRdsOptionsPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// List of the the security groups IDs to associate with the Verified Access endpoint.
	SecurityGroupIds pulumi.StringArrayInput
	// The options in use for server side encryption.
	SseSpecification EndpointSseSpecificationPtrInput
	// Key-value tags for the Verified Access Endpoint. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// The ID of the Verified Access group to associate the endpoint with.
	//
	// The following arguments are optional:
	VerifiedAccessGroupId pulumi.StringInput
}

type EndpointArray []EndpointInput

type EndpointArrayInput interface {
	pulumi.Input

	ToEndpointArrayOutput() EndpointArrayOutput
	ToEndpointArrayOutputWithContext(context.Context) EndpointArrayOutput
}

type EndpointArrayOutput struct{ *pulumi.OutputState }

type EndpointCidrOptions struct {
	Cidr       string                         `pulumi:"cidr"`
	PortRanges []EndpointCidrOptionsPortRange `pulumi:"portRanges"`
	Protocol   *string                        `pulumi:"protocol"`
	SubnetIds  []string                       `pulumi:"subnetIds"`
}

type EndpointCidrOptionsArgs struct {
	Cidr       pulumi.StringInput                     `pulumi:"cidr"`
	PortRanges EndpointCidrOptionsPortRangeArrayInput `pulumi:"portRanges"`
	Protocol   pulumi.StringPtrInput                  `pulumi:"protocol"`
	SubnetIds  pulumi.StringArrayInput                `pulumi:"subnetIds"`
}

type EndpointCidrOptionsInput interface {
	pulumi.Input

	ToEndpointCidrOptionsOutput() EndpointCidrOptionsOutput
	ToEndpointCidrOptionsOutputWithContext(context.Context) EndpointCidrOptionsOutput
}

type EndpointCidrOptionsOutput struct{ *pulumi.OutputState }

type EndpointCidrOptionsPortRange struct {
	FromPort int `pulumi:"fromPort"`
	ToPort   int `pulumi:"toPort"`
}

type EndpointCidrOptionsPortRangeArgs struct {
	FromPort pulumi.IntInput `pulumi:"fromPort"`
	ToPort   pulumi.IntInput `pulumi:"toPort"`
}

type EndpointCidrOptionsPortRangeArray []EndpointCidrOptionsPortRangeInput

type EndpointCidrOptionsPortRangeArrayInput interface {
	pulumi.Input

	ToEndpointCidrOptionsPortRangeArrayOutput() EndpointCidrOptionsPortRangeArrayOutput
	ToEndpointCidrOptionsPortRangeArrayOutputWithContext(context.Context) EndpointCidrOptionsPortRangeArrayOutput
}

type EndpointCidrOptionsPortRangeArrayOutput struct{ *pulumi.OutputState }

type EndpointCidrOptionsPortRangeInput interface {
	pulumi.Input

	ToEndpointCidrOptionsPortRangeOutput() EndpointCidrOptionsPortRangeOutput
	ToEndpointCidrOptionsPortRangeOutputWithContext(context.Context) EndpointCidrOptionsPortRangeOutput
}

type EndpointCidrOptionsPortRangeOutput struct{ *pulumi.OutputState }

type EndpointCidrOptionsPtrInput interface {
	pulumi.Input

	ToEndpointCidrOptionsPtrOutput() EndpointCidrOptionsPtrOutput
	ToEndpointCidrOptionsPtrOutputWithContext(context.Context) EndpointCidrOptionsPtrOutput
}

type EndpointCidrOptionsPtrOutput struct{ *pulumi.OutputState }

type EndpointInput interface {
	pulumi.Input

	ToEndpointOutput() EndpointOutput
	ToEndpointOutputWithContext(ctx context.Context) EndpointOutput
}

type EndpointLoadBalancerOptions struct {
	LoadBalancerArn *string                                `pulumi:"loadBalancerArn"`
	Port            *int                                   `pulumi:"port"`
	PortRanges      []EndpointLoadBalancerOptionsPortRange `pulumi:"portRanges"`
	Protocol        *string                                `pulumi:"protocol"`
	SubnetIds       []string                               `pulumi:"subnetIds"`
}

type EndpointLoadBalancerOptionsArgs struct {
	LoadBalancerArn pulumi.StringPtrInput                          `pulumi:"loadBalancerArn"`
	Port            pulumi.IntPtrInput                             `pulumi:"port"`
	PortRanges      EndpointLoadBalancerOptionsPortRangeArrayInput `pulumi:"portRanges"`
	Protocol        pulumi.StringPtrInput                          `pulumi:"protocol"`
	SubnetIds       pulumi.StringArrayInput                        `pulumi:"subnetIds"`
}

type EndpointLoadBalancerOptionsInput interface {
	pulumi.Input

	ToEndpointLoadBalancerOptionsOutput() EndpointLoadBalancerOptionsOutput
	ToEndpointLoadBalancerOptionsOutputWithContext(context.Context) EndpointLoadBalancerOptionsOutput
}

type EndpointLoadBalancerOptionsOutput struct{ *pulumi.OutputState }

type EndpointLoadBalancerOptionsPortRange struct {
	FromPort int `pulumi:"fromPort"`
	ToPort   int `pulumi:"toPort"`
}

type EndpointLoadBalancerOptionsPortRangeArgs struct {
	FromPort pulumi.IntInput `pulumi:"fromPort"`
	ToPort   pulumi.IntInput `pulumi:"toPort"`
}

type EndpointLoadBalancerOptionsPortRangeArray []EndpointLoadBalancerOptionsPortRangeInput

type EndpointLoadBalancerOptionsPortRangeArrayInput interface {
	pulumi.Input

	ToEndpointLoadBalancerOptionsPortRangeArrayOutput() EndpointLoadBalancerOptionsPortRangeArrayOutput
	ToEndpointLoadBalancerOptionsPortRangeArrayOutputWithContext(context.Context) EndpointLoadBalancerOptionsPortRangeArrayOutput
}

type EndpointLoadBalancerOptionsPortRangeArrayOutput struct{ *pulumi.OutputState }

type EndpointLoadBalancerOptionsPortRangeInput interface {
	pulumi.Input

	ToEndpointLoadBalancerOptionsPortRangeOutput() EndpointLoadBalancerOptionsPortRangeOutput
	ToEndpointLoadBalancerOptionsPortRangeOutputWithContext(context.Context) EndpointLoadBalancerOptionsPortRangeOutput
}

type EndpointLoadBalancerOptionsPortRangeOutput struct{ *pulumi.OutputState }

type EndpointLoadBalancerOptionsPtrInput interface {
	pulumi.Input

	ToEndpointLoadBalancerOptionsPtrOutput() EndpointLoadBalancerOptionsPtrOutput
	ToEndpointLoadBalancerOptionsPtrOutputWithContext(context.Context) EndpointLoadBalancerOptionsPtrOutput
}

type EndpointLoadBalancerOptionsPtrOutput struct{ *pulumi.OutputState }

type EndpointMap map[string]EndpointInput

type EndpointMapInput interface {
	pulumi.Input

	ToEndpointMapOutput() EndpointMapOutput
	ToEndpointMapOutputWithContext(context.Context) EndpointMapOutput
}

type EndpointMapOutput struct{ *pulumi.OutputState }

type EndpointNetworkInterfaceOptions struct {
	NetworkInterfaceId *string                                    `pulumi:"networkInterfaceId"`
	Port               *int                                       `pulumi:"port"`
	PortRanges         []EndpointNetworkInterfaceOptionsPortRange `pulumi:"portRanges"`
	Protocol           *string                                    `pulumi:"protocol"`
}

type EndpointNetworkInterfaceOptionsArgs struct {
	NetworkInterfaceId pulumi.StringPtrInput                              `pulumi:"networkInterfaceId"`
	Port               pulumi.IntPtrInput                                 `pulumi:"port"`
	PortRanges         EndpointNetworkInterfaceOptionsPortRangeArrayInput `pulumi:"portRanges"`
	Protocol           pulumi.StringPtrInput                              `pulumi:"protocol"`
}

type EndpointNetworkInterfaceOptionsInput interface {
	pulumi.Input

	ToEndpointNetworkInterfaceOptionsOutput() EndpointNetworkInterfaceOptionsOutput
	ToEndpointNetworkInterfaceOptionsOutputWithContext(context.Context) EndpointNetworkInterfaceOptionsOutput
}

type EndpointNetworkInterfaceOptionsOutput struct{ *pulumi.OutputState }

type EndpointNetworkInterfaceOptionsPortRange struct {
	FromPort int `pulumi:"fromPort"`
	ToPort   int `pulumi:"toPort"`
}

type EndpointNetworkInterfaceOptionsPortRangeArgs struct {
	FromPort pulumi.IntInput `pulumi:"fromPort"`
	ToPort   pulumi.IntInput `pulumi:"toPort"`
}

type EndpointNetworkInterfaceOptionsPortRangeArray []EndpointNetworkInterfaceOptionsPortRangeInput

type EndpointNetworkInterfaceOptionsPortRangeArrayInput interface {
	pulumi.Input

	ToEndpointNetworkInterfaceOptionsPortRangeArrayOutput() EndpointNetworkInterfaceOptionsPortRangeArrayOutput
	ToEndpointNetworkInterfaceOptionsPortRangeArrayOutputWithContext(context.Context) EndpointNetworkInterfaceOptionsPortRangeArrayOutput
}

type EndpointNetworkInterfaceOptionsPortRangeArrayOutput struct{ *pulumi.OutputState }

type EndpointNetworkInterfaceOptionsPortRangeInput interface {
	pulumi.Input

	ToEndpointNetworkInterfaceOptionsPortRangeOutput() EndpointNetworkInterfaceOptionsPortRangeOutput
	ToEndpointNetworkInterfaceOptionsPortRangeOutputWithContext(context.Context) EndpointNetworkInterfaceOptionsPortRangeOutput
}

type EndpointNetworkInterfaceOptionsPortRangeOutput struct{ *pulumi.OutputState }

type EndpointNetworkInterfaceOptionsPtrInput interface {
	pulumi.Input

	ToEndpointNetworkInterfaceOptionsPtrOutput() EndpointNetworkInterfaceOptionsPtrOutput
	ToEndpointNetworkInterfaceOptionsPtrOutputWithContext(context.Context) EndpointNetworkInterfaceOptionsPtrOutput
}

type EndpointNetworkInterfaceOptionsPtrOutput struct{ *pulumi.OutputState }

type EndpointOutput struct{ *pulumi.OutputState }

type EndpointRdsOptions struct {
	Port             *int     `pulumi:"port"`
	Protocol         *string  `pulumi:"protocol"`
	RdsDbClusterArn  *string  `pulumi:"rdsDbClusterArn"`
	RdsDbInstanceArn *string  `pulumi:"rdsDbInstanceArn"`
	RdsDbProxyArn    *string  `pulumi:"rdsDbProxyArn"`
	RdsEndpoint      *string  `pulumi:"rdsEndpoint"`
	SubnetIds        []string `pulumi:"subnetIds"`
}

type EndpointRdsOptionsArgs struct {
	Port             pulumi.IntPtrInput      `pulumi:"port"`
	Protocol         pulumi.StringPtrInput   `pulumi:"protocol"`
	RdsDbClusterArn  pulumi.StringPtrInput   `pulumi:"rdsDbClusterArn"`
	RdsDbInstanceArn pulumi.StringPtrInput   `pulumi:"rdsDbInstanceArn"`
	RdsDbProxyArn    pulumi.StringPtrInput   `pulumi:"rdsDbProxyArn"`
	RdsEndpoint      pulumi.StringPtrInput   `pulumi:"rdsEndpoint"`
	SubnetIds        pulumi.StringArrayInput `pulumi:"subnetIds"`
}

type EndpointRdsOptionsInput interface {
	pulumi.Input

	ToEndpointRdsOptionsOutput() EndpointRdsOptionsOutput
	ToEndpointRdsOptionsOutputWithContext(context.Context) EndpointRdsOptionsOutput
}

type EndpointRdsOptionsOutput struct{ *pulumi.OutputState }

type EndpointRdsOptionsPtrInput interface {
	pulumi.Input

	ToEndpointRdsOptionsPtrOutput() EndpointRdsOptionsPtrOutput
	ToEndpointRdsOptionsPtrOutputWithContext(context.Context) EndpointRdsOptionsPtrOutput
}

type EndpointRdsOptionsPtrOutput struct{ *pulumi.OutputState }

type EndpointSseSpecification struct {
	CustomerManagedKeyEnabled *bool   `pulumi:"customerManagedKeyEnabled"`
	KmsKeyArn                 *string `pulumi:"kmsKeyArn"`
}

type EndpointSseSpecificationArgs struct {
	CustomerManagedKeyEnabled pulumi.BoolPtrInput   `pulumi:"customerManagedKeyEnabled"`
	KmsKeyArn                 pulumi.StringPtrInput `pulumi:"kmsKeyArn"`
}

type EndpointSseSpecificationInput interface {
	pulumi.Input

	ToEndpointSseSpecificationOutput() EndpointSseSpecificationOutput
	ToEndpointSseSpecificationOutputWithContext(context.Context) EndpointSseSpecificationOutput
}

type EndpointSseSpecificationOutput struct{ *pulumi.OutputState }

type EndpointSseSpecificationPtrInput interface {
	pulumi.Input

	ToEndpointSseSpecificationPtrOutput() EndpointSseSpecificationPtrOutput
	ToEndpointSseSpecificationPtrOutputWithContext(context.Context) EndpointSseSpecificationPtrOutput
}

type EndpointSseSpecificationPtrOutput struct{ *pulumi.OutputState }

type EndpointState struct {
	// The DNS name for users to reach your application. This parameter is required if the endpoint type is `load-balancer` or `network-interface`.
	ApplicationDomain pulumi.StringPtrInput
	// The type of attachment. Currently, only `vpc` is supported.
	AttachmentType pulumi.StringPtrInput
	// The CIDR block details. This parameter is required if the endpoint type is `cidr`.
	CidrOptions EndpointCidrOptionsPtrInput
	// A description for the Verified Access endpoint.
	Description pulumi.StringPtrInput
	// Returned if endpoint has a device trust provider attached.
	DeviceValidationDomain pulumi.StringPtrInput
	// The ARN of the public TLS/SSL certificate in AWS Certificate Manager to associate with the endpoint. The CN in the certificate must match the DNS name your end users will use to reach your application. This parameter is required if the endpoint type is `load-balancer` or `network-interface`.
	DomainCertificateArn pulumi.StringPtrInput
	// A DNS name that is generated for the endpoint.
	EndpointDomain pulumi.StringPtrInput
	// A custom identifier that is prepended to the DNS name that is generated for the endpoint.
	EndpointDomainPrefix pulumi.StringPtrInput
	// The type of Verified Access endpoint to create. Currently `load-balancer` or `network-interface` are supported.
	EndpointType pulumi.StringPtrInput
	// The load balancer details. This parameter is required if the endpoint type is `load-balancer`.
	LoadBalancerOptions EndpointLoadBalancerOptionsPtrInput
	// The network interface details. This parameter is required if the endpoint type is `network-interface`.
	NetworkInterfaceOptions EndpointNetworkInterfaceOptionsPtrInput
	// The policy document that is associated with this resource.
	PolicyDocument pulumi.StringPtrInput
	RdsOptions     EndpointRdsOptionsPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// List of the the security groups IDs to associate with the Verified Access endpoint.
	SecurityGroupIds pulumi.StringArrayInput
	// The options in use for server side encryption.
	SseSpecification EndpointSseSpecificationPtrInput
	// Key-value tags for the Verified Access Endpoint. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapInput
	TagsAll pulumi.StringMapInput
	// The ID of the Verified Access group to associate the endpoint with.
	//
	// The following arguments are optional:
	VerifiedAccessGroupId    pulumi.StringPtrInput
	VerifiedAccessInstanceId pulumi.StringPtrInput
}

type Group struct {
	pulumi.CustomResourceState

	// Timestamp when the access group was created.
	CreationTime pulumi.StringOutput `pulumi:"creationTime"`
	// Timestamp when the access group was deleted.
	DeletionTime pulumi.StringOutput `pulumi:"deletionTime"`
	// Description of the verified access group.
	Description pulumi.StringOutput `pulumi:"description"`
	// Timestamp when the access group was last updated.
	LastUpdatedTime pulumi.StringOutput `pulumi:"lastUpdatedTime"`
	// AWS account number owning this resource.
	Owner pulumi.StringOutput `pulumi:"owner"`
	// The policy document that is associated with this resource.
	PolicyDocument pulumi.StringPtrOutput `pulumi:"policyDocument"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Configuration block to use KMS keys for server-side encryption.
	SseConfiguration GroupSseConfigurationOutput `pulumi:"sseConfiguration"`
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapOutput `pulumi:"tags"`
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
	// ARN of this verified acess group.
	VerifiedaccessGroupArn pulumi.StringOutput `pulumi:"verifiedaccessGroupArn"`
	// ID of this verified access group.
	VerifiedaccessGroupId pulumi.StringOutput `pulumi:"verifiedaccessGroupId"`
	// The id of the verified access instance this group is associated with.
	//
	// The following arguments are optional:
	VerifiedaccessInstanceId pulumi.StringOutput `pulumi:"verifiedaccessInstanceId"`
}

type GroupArgs struct {
	// Description of the verified access group.
	Description pulumi.StringPtrInput
	// The policy document that is associated with this resource.
	PolicyDocument pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Configuration block to use KMS keys for server-side encryption.
	SseConfiguration GroupSseConfigurationPtrInput
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// The id of the verified access instance this group is associated with.
	//
	// The following arguments are optional:
	VerifiedaccessInstanceId pulumi.StringInput
}

type GroupArray []GroupInput

type GroupArrayInput interface {
	pulumi.Input

	ToGroupArrayOutput() GroupArrayOutput
	ToGroupArrayOutputWithContext(context.Context) GroupArrayOutput
}

type GroupArrayOutput struct{ *pulumi.OutputState }

type GroupInput interface {
	pulumi.Input

	ToGroupOutput() GroupOutput
	ToGroupOutputWithContext(ctx context.Context) GroupOutput
}

type GroupMap map[string]GroupInput

type GroupMapInput interface {
	pulumi.Input

	ToGroupMapOutput() GroupMapOutput
	ToGroupMapOutputWithContext(context.Context) GroupMapOutput
}

type GroupMapOutput struct{ *pulumi.OutputState }

type GroupOutput struct{ *pulumi.OutputState }

type GroupSseConfiguration struct {
	// Boolean flag to indicate that the CMK should be used.
	CustomerManagedKeyEnabled *bool `pulumi:"customerManagedKeyEnabled"`
	// ARN of the KMS key to use.
	KmsKeyArn *string `pulumi:"kmsKeyArn"`
}

type GroupSseConfigurationArgs struct {
	// Boolean flag to indicate that the CMK should be used.
	CustomerManagedKeyEnabled pulumi.BoolPtrInput `pulumi:"customerManagedKeyEnabled"`
	// ARN of the KMS key to use.
	KmsKeyArn pulumi.StringPtrInput `pulumi:"kmsKeyArn"`
}

type GroupSseConfigurationInput interface {
	pulumi.Input

	ToGroupSseConfigurationOutput() GroupSseConfigurationOutput
	ToGroupSseConfigurationOutputWithContext(context.Context) GroupSseConfigurationOutput
}

type GroupSseConfigurationOutput struct{ *pulumi.OutputState }

type GroupSseConfigurationPtrInput interface {
	pulumi.Input

	ToGroupSseConfigurationPtrOutput() GroupSseConfigurationPtrOutput
	ToGroupSseConfigurationPtrOutputWithContext(context.Context) GroupSseConfigurationPtrOutput
}

type GroupSseConfigurationPtrOutput struct{ *pulumi.OutputState }

type GroupState struct {
	// Timestamp when the access group was created.
	CreationTime pulumi.StringPtrInput
	// Timestamp when the access group was deleted.
	DeletionTime pulumi.StringPtrInput
	// Description of the verified access group.
	Description pulumi.StringPtrInput
	// Timestamp when the access group was last updated.
	LastUpdatedTime pulumi.StringPtrInput
	// AWS account number owning this resource.
	Owner pulumi.StringPtrInput
	// The policy document that is associated with this resource.
	PolicyDocument pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Configuration block to use KMS keys for server-side encryption.
	SseConfiguration GroupSseConfigurationPtrInput
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapInput
	TagsAll pulumi.StringMapInput
	// ARN of this verified acess group.
	VerifiedaccessGroupArn pulumi.StringPtrInput
	// ID of this verified access group.
	VerifiedaccessGroupId pulumi.StringPtrInput
	// The id of the verified access instance this group is associated with.
	//
	// The following arguments are optional:
	VerifiedaccessInstanceId pulumi.StringPtrInput
}

type Instance struct {
	pulumi.CustomResourceState

	// The custom subdomain for the CIDR endpoints.
	CidrEndpointsCustomSubdomain pulumi.StringPtrOutput `pulumi:"cidrEndpointsCustomSubdomain"`
	// The time that the Verified Access Instance was created.
	CreationTime pulumi.StringOutput `pulumi:"creationTime"`
	// A description for the AWS Verified Access Instance.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Enable or disable support for Federal Information Processing Standards (FIPS) on the AWS Verified Access Instance.
	FipsEnabled pulumi.BoolPtrOutput `pulumi:"fipsEnabled"`
	// The time that the Verified Access Instance was last updated.
	LastUpdatedTime pulumi.StringOutput      `pulumi:"lastUpdatedTime"`
	NameServers     pulumi.StringArrayOutput `pulumi:"nameServers"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapOutput `pulumi:"tags"`
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
	// One or more blocks of providing information about the AWS Verified Access Trust Providers. See verifiedAccessTrustProviders below for details.One or more blocks
	VerifiedAccessTrustProviders InstanceVerifiedAccessTrustProviderArrayOutput `pulumi:"verifiedAccessTrustProviders"`
}

type InstanceArgs struct {
	// The custom subdomain for the CIDR endpoints.
	CidrEndpointsCustomSubdomain pulumi.StringPtrInput
	// A description for the AWS Verified Access Instance.
	Description pulumi.StringPtrInput
	// Enable or disable support for Federal Information Processing Standards (FIPS) on the AWS Verified Access Instance.
	FipsEnabled pulumi.BoolPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Key-value mapping of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type InstanceArray []InstanceInput

type InstanceArrayInput interface {
	pulumi.Input

	ToInstanceArrayOutput() InstanceArrayOutput
	ToInstanceArrayOutputWithContext(context.Context) InstanceArrayOutput
}

type InstanceArrayOutput struct{ *pulumi.OutputState }

type InstanceInput interface {
	pulumi.Input

	ToInstanceOutput() InstanceOutput
	ToInstanceOutputWithContext(ctx context.Context) InstanceOutput
}

type InstanceLoggingConfiguration struct {
	pulumi.CustomResourceState

	// A block that specifies the configuration options for Verified Access instances. Detailed below.
	AccessLogs InstanceLoggingConfigurationAccessLogsOutput `pulumi:"accessLogs"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// The ID of the Verified Access instance.
	VerifiedaccessInstanceId pulumi.StringOutput `pulumi:"verifiedaccessInstanceId"`
}

type InstanceLoggingConfigurationAccessLogs struct {
	// A block that specifies configures sending Verified Access logs to CloudWatch Logs. Detailed below.
	CloudwatchLogs *InstanceLoggingConfigurationAccessLogsCloudwatchLogs `pulumi:"cloudwatchLogs"`
	// Include trust data sent by trust providers into the logs.
	IncludeTrustContext *bool `pulumi:"includeTrustContext"`
	// A block that specifies configures sending Verified Access logs to Kinesis. Detailed below.
	KinesisDataFirehose *InstanceLoggingConfigurationAccessLogsKinesisDataFirehose `pulumi:"kinesisDataFirehose"`
	// The logging version to use. Refer to [VerifiedAccessLogOptions](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_VerifiedAccessLogOptions.html) for the allowed values.
	LogVersion *string `pulumi:"logVersion"`
	// A block that specifies configures sending Verified Access logs to S3. Detailed below.
	S3 *InstanceLoggingConfigurationAccessLogsS3 `pulumi:"s3"`
}

type InstanceLoggingConfigurationAccessLogsArgs struct {
	// A block that specifies configures sending Verified Access logs to CloudWatch Logs. Detailed below.
	CloudwatchLogs InstanceLoggingConfigurationAccessLogsCloudwatchLogsPtrInput `pulumi:"cloudwatchLogs"`
	// Include trust data sent by trust providers into the logs.
	IncludeTrustContext pulumi.BoolPtrInput `pulumi:"includeTrustContext"`
	// A block that specifies configures sending Verified Access logs to Kinesis. Detailed below.
	KinesisDataFirehose InstanceLoggingConfigurationAccessLogsKinesisDataFirehosePtrInput `pulumi:"kinesisDataFirehose"`
	// The logging version to use. Refer to [VerifiedAccessLogOptions](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_VerifiedAccessLogOptions.html) for the allowed values.
	LogVersion pulumi.StringPtrInput `pulumi:"logVersion"`
	// A block that specifies configures sending Verified Access logs to S3. Detailed below.
	S3 InstanceLoggingConfigurationAccessLogsS3PtrInput `pulumi:"s3"`
}

type InstanceLoggingConfigurationAccessLogsCloudwatchLogs struct {
	// Indicates whether logging is enabled.
	Enabled bool `pulumi:"enabled"`
	// The name of the CloudWatch Logs Log Group.
	LogGroup *string `pulumi:"logGroup"`
}

type InstanceLoggingConfigurationAccessLogsCloudwatchLogsArgs struct {
	// Indicates whether logging is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The name of the CloudWatch Logs Log Group.
	LogGroup pulumi.StringPtrInput `pulumi:"logGroup"`
}

type InstanceLoggingConfigurationAccessLogsCloudwatchLogsInput interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsCloudwatchLogsOutput() InstanceLoggingConfigurationAccessLogsCloudwatchLogsOutput
	ToInstanceLoggingConfigurationAccessLogsCloudwatchLogsOutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsCloudwatchLogsOutput
}

type InstanceLoggingConfigurationAccessLogsCloudwatchLogsOutput struct{ *pulumi.OutputState }

type InstanceLoggingConfigurationAccessLogsCloudwatchLogsPtrInput interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsCloudwatchLogsPtrOutput() InstanceLoggingConfigurationAccessLogsCloudwatchLogsPtrOutput
	ToInstanceLoggingConfigurationAccessLogsCloudwatchLogsPtrOutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsCloudwatchLogsPtrOutput
}

type InstanceLoggingConfigurationAccessLogsCloudwatchLogsPtrOutput struct{ *pulumi.OutputState }

type InstanceLoggingConfigurationAccessLogsInput interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsOutput() InstanceLoggingConfigurationAccessLogsOutput
	ToInstanceLoggingConfigurationAccessLogsOutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsOutput
}

type InstanceLoggingConfigurationAccessLogsKinesisDataFirehose struct {
	// The name of the delivery stream.
	DeliveryStream *string `pulumi:"deliveryStream"`
	// Indicates whether logging is enabled.
	Enabled bool `pulumi:"enabled"`
}

type InstanceLoggingConfigurationAccessLogsKinesisDataFirehoseArgs struct {
	// The name of the delivery stream.
	DeliveryStream pulumi.StringPtrInput `pulumi:"deliveryStream"`
	// Indicates whether logging is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
}

type InstanceLoggingConfigurationAccessLogsKinesisDataFirehoseInput interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsKinesisDataFirehoseOutput() InstanceLoggingConfigurationAccessLogsKinesisDataFirehoseOutput
	ToInstanceLoggingConfigurationAccessLogsKinesisDataFirehoseOutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsKinesisDataFirehoseOutput
}

type InstanceLoggingConfigurationAccessLogsKinesisDataFirehoseOutput struct{ *pulumi.OutputState }

type InstanceLoggingConfigurationAccessLogsKinesisDataFirehosePtrInput interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsKinesisDataFirehosePtrOutput() InstanceLoggingConfigurationAccessLogsKinesisDataFirehosePtrOutput
	ToInstanceLoggingConfigurationAccessLogsKinesisDataFirehosePtrOutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsKinesisDataFirehosePtrOutput
}

type InstanceLoggingConfigurationAccessLogsKinesisDataFirehosePtrOutput struct{ *pulumi.OutputState }

type InstanceLoggingConfigurationAccessLogsOutput struct{ *pulumi.OutputState }

type InstanceLoggingConfigurationAccessLogsPtrInput interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsPtrOutput() InstanceLoggingConfigurationAccessLogsPtrOutput
	ToInstanceLoggingConfigurationAccessLogsPtrOutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsPtrOutput
}

type InstanceLoggingConfigurationAccessLogsPtrOutput struct{ *pulumi.OutputState }

type InstanceLoggingConfigurationAccessLogsS3 struct {
	// The name of S3 bucket.
	BucketName *string `pulumi:"bucketName"`
	// The ID of the AWS account that owns the Amazon S3 bucket.
	BucketOwner *string `pulumi:"bucketOwner"`
	// Indicates whether logging is enabled.
	Enabled bool `pulumi:"enabled"`
	// The bucket prefix.
	Prefix *string `pulumi:"prefix"`
}

type InstanceLoggingConfigurationAccessLogsS3Args struct {
	// The name of S3 bucket.
	BucketName pulumi.StringPtrInput `pulumi:"bucketName"`
	// The ID of the AWS account that owns the Amazon S3 bucket.
	BucketOwner pulumi.StringPtrInput `pulumi:"bucketOwner"`
	// Indicates whether logging is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The bucket prefix.
	Prefix pulumi.StringPtrInput `pulumi:"prefix"`
}

type InstanceLoggingConfigurationAccessLogsS3Input interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsS3Output() InstanceLoggingConfigurationAccessLogsS3Output
	ToInstanceLoggingConfigurationAccessLogsS3OutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsS3Output
}

type InstanceLoggingConfigurationAccessLogsS3Output struct{ *pulumi.OutputState }

type InstanceLoggingConfigurationAccessLogsS3PtrInput interface {
	pulumi.Input

	ToInstanceLoggingConfigurationAccessLogsS3PtrOutput() InstanceLoggingConfigurationAccessLogsS3PtrOutput
	ToInstanceLoggingConfigurationAccessLogsS3PtrOutputWithContext(context.Context) InstanceLoggingConfigurationAccessLogsS3PtrOutput
}

type InstanceLoggingConfigurationAccessLogsS3PtrOutput struct{ *pulumi.OutputState }