auditmanager

type AccountRegistration struct {
	pulumi.CustomResourceState

	// Identifier for the delegated administrator account.
	DelegatedAdminAccount pulumi.StringPtrOutput `pulumi:"delegatedAdminAccount"`
	// Flag to deregister AuditManager in the account upon destruction. Defaults to `false` (ie. AuditManager will remain active in the account, even if this resource is removed).
	DeregisterOnDestroy pulumi.BoolPtrOutput `pulumi:"deregisterOnDestroy"`
	// KMS key identifier.
	KmsKey pulumi.StringPtrOutput `pulumi:"kmsKey"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Status of the account registration request.
	Status pulumi.StringOutput `pulumi:"status"`
}

type AccountRegistrationArgs struct {
	// Identifier for the delegated administrator account.
	DelegatedAdminAccount pulumi.StringPtrInput
	// Flag to deregister AuditManager in the account upon destruction. Defaults to `false` (ie. AuditManager will remain active in the account, even if this resource is removed).
	DeregisterOnDestroy pulumi.BoolPtrInput
	// KMS key identifier.
	KmsKey pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

type AccountRegistrationArray []AccountRegistrationInput

type AccountRegistrationArrayInput interface {
	pulumi.Input

	ToAccountRegistrationArrayOutput() AccountRegistrationArrayOutput
	ToAccountRegistrationArrayOutputWithContext(context.Context) AccountRegistrationArrayOutput
}

type AccountRegistrationArrayOutput struct{ *pulumi.OutputState }

type AccountRegistrationInput interface {
	pulumi.Input

	ToAccountRegistrationOutput() AccountRegistrationOutput
	ToAccountRegistrationOutputWithContext(ctx context.Context) AccountRegistrationOutput
}

type AccountRegistrationMap map[string]AccountRegistrationInput

type AccountRegistrationMapInput interface {
	pulumi.Input

	ToAccountRegistrationMapOutput() AccountRegistrationMapOutput
	ToAccountRegistrationMapOutputWithContext(context.Context) AccountRegistrationMapOutput
}

type AccountRegistrationMapOutput struct{ *pulumi.OutputState }

type AccountRegistrationOutput struct{ *pulumi.OutputState }

type AccountRegistrationState struct {
	// Identifier for the delegated administrator account.
	DelegatedAdminAccount pulumi.StringPtrInput
	// Flag to deregister AuditManager in the account upon destruction. Defaults to `false` (ie. AuditManager will remain active in the account, even if this resource is removed).
	DeregisterOnDestroy pulumi.BoolPtrInput
	// KMS key identifier.
	KmsKey pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Status of the account registration request.
	Status pulumi.StringPtrInput
}

type Assessment struct {
	pulumi.CustomResourceState

	// Amazon Resource Name (ARN) of the assessment.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Assessment report storage destination configuration. See `assessmentReportsDestination` below.
	AssessmentReportsDestination AssessmentAssessmentReportsDestinationPtrOutput `pulumi:"assessmentReportsDestination"`
	// Description of the assessment.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Unique identifier of the framework the assessment will be created from.
	FrameworkId pulumi.StringOutput `pulumi:"frameworkId"`
	// Name of the assessment.
	Name pulumi.StringOutput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// List of roles for the assessment. See `roles` below.
	Roles AssessmentRoleArrayOutput `pulumi:"roles"`
	// Complete list of all roles with access to the assessment. This includes both roles explicitly configured via the `roles` block, and any roles which have access to all Audit Manager assessments by default.
	RolesAlls AssessmentRolesAllArrayOutput `pulumi:"rolesAlls"`
	// Amazon Web Services accounts and services that are in scope for the assessment. See `scope` below.
	//
	// The following arguments are optional:
	Scope AssessmentScopePtrOutput `pulumi:"scope"`
	// Status of the assessment. Valid values are `ACTIVE` and `INACTIVE`.
	Status pulumi.StringOutput `pulumi:"status"`
	// A map of tags to assign to the assessment. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapOutput `pulumi:"tags"`
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

type AssessmentArgs struct {
	// Assessment report storage destination configuration. See `assessmentReportsDestination` below.
	AssessmentReportsDestination AssessmentAssessmentReportsDestinationPtrInput
	// Description of the assessment.
	Description pulumi.StringPtrInput
	// Unique identifier of the framework the assessment will be created from.
	FrameworkId pulumi.StringInput
	// Name of the assessment.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// List of roles for the assessment. See `roles` below.
	Roles AssessmentRoleArrayInput
	// Amazon Web Services accounts and services that are in scope for the assessment. See `scope` below.
	//
	// The following arguments are optional:
	Scope AssessmentScopePtrInput
	// A map of tags to assign to the assessment. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type AssessmentArray []AssessmentInput

type AssessmentArrayInput interface {
	pulumi.Input

	ToAssessmentArrayOutput() AssessmentArrayOutput
	ToAssessmentArrayOutputWithContext(context.Context) AssessmentArrayOutput
}

type AssessmentArrayOutput struct{ *pulumi.OutputState }

type AssessmentAssessmentReportsDestination struct {
	// Destination of the assessment report. This value be in the form `s3://{bucket_name}`.
	Destination string `pulumi:"destination"`
	// Destination type. Currently, `S3` is the only valid value.
	DestinationType string `pulumi:"destinationType"`
}

type AssessmentAssessmentReportsDestinationArgs struct {
	// Destination of the assessment report. This value be in the form `s3://{bucket_name}`.
	Destination pulumi.StringInput `pulumi:"destination"`
	// Destination type. Currently, `S3` is the only valid value.
	DestinationType pulumi.StringInput `pulumi:"destinationType"`
}

type AssessmentAssessmentReportsDestinationInput interface {
	pulumi.Input

	ToAssessmentAssessmentReportsDestinationOutput() AssessmentAssessmentReportsDestinationOutput
	ToAssessmentAssessmentReportsDestinationOutputWithContext(context.Context) AssessmentAssessmentReportsDestinationOutput
}

type AssessmentAssessmentReportsDestinationOutput struct{ *pulumi.OutputState }

type AssessmentAssessmentReportsDestinationPtrInput interface {
	pulumi.Input

	ToAssessmentAssessmentReportsDestinationPtrOutput() AssessmentAssessmentReportsDestinationPtrOutput
	ToAssessmentAssessmentReportsDestinationPtrOutputWithContext(context.Context) AssessmentAssessmentReportsDestinationPtrOutput
}

type AssessmentAssessmentReportsDestinationPtrOutput struct{ *pulumi.OutputState }

type AssessmentDelegation struct {
	pulumi.CustomResourceState

	// Identifier for the assessment.
	AssessmentId pulumi.StringOutput `pulumi:"assessmentId"`
	// Comment describing the delegation request.
	Comment pulumi.StringPtrOutput `pulumi:"comment"`
	// Assessment control set name. This value is the control set name used during assessment creation (not the AWS-generated ID). The `_id` suffix on this attribute has been preserved to be consistent with the underlying AWS API.
	ControlSetId pulumi.StringOutput `pulumi:"controlSetId"`
	// Unique identifier for the delegation.
	DelegationId pulumi.StringOutput `pulumi:"delegationId"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Amazon Resource Name (ARN) of the IAM role.
	RoleArn pulumi.StringOutput `pulumi:"roleArn"`
	// Type of customer persona. For assessment delegation, type must always be `RESOURCE_OWNER`.
	//
	// The following arguments are optional:
	RoleType pulumi.StringOutput `pulumi:"roleType"`
	// Status of the delegation.
	Status pulumi.StringOutput `pulumi:"status"`
}

type AssessmentDelegationArgs struct {
	// Identifier for the assessment.
	AssessmentId pulumi.StringInput
	// Comment describing the delegation request.
	Comment pulumi.StringPtrInput
	// Assessment control set name. This value is the control set name used during assessment creation (not the AWS-generated ID). The `_id` suffix on this attribute has been preserved to be consistent with the underlying AWS API.
	ControlSetId pulumi.StringInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Amazon Resource Name (ARN) of the IAM role.
	RoleArn pulumi.StringInput
	// Type of customer persona. For assessment delegation, type must always be `RESOURCE_OWNER`.
	//
	// The following arguments are optional:
	RoleType pulumi.StringInput
}

type AssessmentDelegationArray []AssessmentDelegationInput

type AssessmentDelegationArrayInput interface {
	pulumi.Input

	ToAssessmentDelegationArrayOutput() AssessmentDelegationArrayOutput
	ToAssessmentDelegationArrayOutputWithContext(context.Context) AssessmentDelegationArrayOutput
}

type AssessmentDelegationArrayOutput struct{ *pulumi.OutputState }

type AssessmentDelegationInput interface {
	pulumi.Input

	ToAssessmentDelegationOutput() AssessmentDelegationOutput
	ToAssessmentDelegationOutputWithContext(ctx context.Context) AssessmentDelegationOutput
}

type AssessmentDelegationMap map[string]AssessmentDelegationInput

type AssessmentDelegationMapInput interface {
	pulumi.Input

	ToAssessmentDelegationMapOutput() AssessmentDelegationMapOutput
	ToAssessmentDelegationMapOutputWithContext(context.Context) AssessmentDelegationMapOutput
}

type AssessmentDelegationMapOutput struct{ *pulumi.OutputState }

type AssessmentDelegationOutput struct{ *pulumi.OutputState }

type AssessmentDelegationState struct {
	// Identifier for the assessment.
	AssessmentId pulumi.StringPtrInput
	// Comment describing the delegation request.
	Comment pulumi.StringPtrInput
	// Assessment control set name. This value is the control set name used during assessment creation (not the AWS-generated ID). The `_id` suffix on this attribute has been preserved to be consistent with the underlying AWS API.
	ControlSetId pulumi.StringPtrInput
	// Unique identifier for the delegation.
	DelegationId pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Amazon Resource Name (ARN) of the IAM role.
	RoleArn pulumi.StringPtrInput
	// Type of customer persona. For assessment delegation, type must always be `RESOURCE_OWNER`.
	//
	// The following arguments are optional:
	RoleType pulumi.StringPtrInput
	// Status of the delegation.
	Status pulumi.StringPtrInput
}

type AssessmentInput interface {
	pulumi.Input

	ToAssessmentOutput() AssessmentOutput
	ToAssessmentOutputWithContext(ctx context.Context) AssessmentOutput
}

type AssessmentMap map[string]AssessmentInput

type AssessmentMapInput interface {
	pulumi.Input

	ToAssessmentMapOutput() AssessmentMapOutput
	ToAssessmentMapOutputWithContext(context.Context) AssessmentMapOutput
}

type AssessmentMapOutput struct{ *pulumi.OutputState }

type AssessmentOutput struct{ *pulumi.OutputState }

type AssessmentReport struct {
	pulumi.CustomResourceState

	// Unique identifier of the assessment to create the report from.
	//
	// The following arguments are optional:
	AssessmentId pulumi.StringOutput `pulumi:"assessmentId"`
	// Name of the user who created the assessment report.
	Author pulumi.StringOutput `pulumi:"author"`
	// Description of the assessment report.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Name of the assessment report.
	Name pulumi.StringOutput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Current status of the specified assessment report. Valid values are `COMPLETE`, `IN_PROGRESS`, and `FAILED`.
	Status pulumi.StringOutput `pulumi:"status"`
}

type AssessmentReportArgs struct {
	// Unique identifier of the assessment to create the report from.
	//
	// The following arguments are optional:
	AssessmentId pulumi.StringInput
	// Description of the assessment report.
	Description pulumi.StringPtrInput
	// Name of the assessment report.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

type AssessmentReportArray []AssessmentReportInput

type AssessmentReportArrayInput interface {
	pulumi.Input

	ToAssessmentReportArrayOutput() AssessmentReportArrayOutput
	ToAssessmentReportArrayOutputWithContext(context.Context) AssessmentReportArrayOutput
}

type AssessmentReportArrayOutput struct{ *pulumi.OutputState }

type AssessmentReportInput interface {
	pulumi.Input

	ToAssessmentReportOutput() AssessmentReportOutput
	ToAssessmentReportOutputWithContext(ctx context.Context) AssessmentReportOutput
}

type AssessmentReportMap map[string]AssessmentReportInput

type AssessmentReportMapInput interface {
	pulumi.Input

	ToAssessmentReportMapOutput() AssessmentReportMapOutput
	ToAssessmentReportMapOutputWithContext(context.Context) AssessmentReportMapOutput
}

type AssessmentReportMapOutput struct{ *pulumi.OutputState }

type AssessmentReportOutput struct{ *pulumi.OutputState }

type AssessmentReportState struct {
	// Unique identifier of the assessment to create the report from.
	//
	// The following arguments are optional:
	AssessmentId pulumi.StringPtrInput
	// Name of the user who created the assessment report.
	Author pulumi.StringPtrInput
	// Description of the assessment report.
	Description pulumi.StringPtrInput
	// Name of the assessment report.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Current status of the specified assessment report. Valid values are `COMPLETE`, `IN_PROGRESS`, and `FAILED`.
	Status pulumi.StringPtrInput
}

type AssessmentRole struct {
	// Amazon Resource Name (ARN) of the IAM role.
	RoleArn string `pulumi:"roleArn"`
	// Type of customer persona. For assessment creation, type must always be `PROCESS_OWNER`.
	RoleType string `pulumi:"roleType"`
}

type AssessmentRoleArgs struct {
	// Amazon Resource Name (ARN) of the IAM role.
	RoleArn pulumi.StringInput `pulumi:"roleArn"`
	// Type of customer persona. For assessment creation, type must always be `PROCESS_OWNER`.
	RoleType pulumi.StringInput `pulumi:"roleType"`
}

type AssessmentRoleArray []AssessmentRoleInput

type AssessmentRoleArrayInput interface {
	pulumi.Input

	ToAssessmentRoleArrayOutput() AssessmentRoleArrayOutput
	ToAssessmentRoleArrayOutputWithContext(context.Context) AssessmentRoleArrayOutput
}

type AssessmentRoleArrayOutput struct{ *pulumi.OutputState }

type AssessmentRoleInput interface {
	pulumi.Input

	ToAssessmentRoleOutput() AssessmentRoleOutput
	ToAssessmentRoleOutputWithContext(context.Context) AssessmentRoleOutput
}

type AssessmentRoleOutput struct{ *pulumi.OutputState }

type AssessmentRolesAll struct {
	// Amazon Resource Name (ARN) of the IAM role.
	RoleArn string `pulumi:"roleArn"`
	// Type of customer persona. For assessment creation, type must always be `PROCESS_OWNER`.
	RoleType string `pulumi:"roleType"`
}

type AssessmentRolesAllArgs struct {
	// Amazon Resource Name (ARN) of the IAM role.
	RoleArn pulumi.StringInput `pulumi:"roleArn"`
	// Type of customer persona. For assessment creation, type must always be `PROCESS_OWNER`.
	RoleType pulumi.StringInput `pulumi:"roleType"`
}

type AssessmentRolesAllArray []AssessmentRolesAllInput

type AssessmentRolesAllArrayInput interface {
	pulumi.Input

	ToAssessmentRolesAllArrayOutput() AssessmentRolesAllArrayOutput
	ToAssessmentRolesAllArrayOutputWithContext(context.Context) AssessmentRolesAllArrayOutput
}

type AssessmentRolesAllArrayOutput struct{ *pulumi.OutputState }

type AssessmentRolesAllInput interface {
	pulumi.Input

	ToAssessmentRolesAllOutput() AssessmentRolesAllOutput
	ToAssessmentRolesAllOutputWithContext(context.Context) AssessmentRolesAllOutput
}

type AssessmentRolesAllOutput struct{ *pulumi.OutputState }

type AssessmentScope struct {
	// Amazon Web Services accounts that are in scope for the assessment. See `awsAccounts` below.
	AwsAccounts []AssessmentScopeAwsAccount `pulumi:"awsAccounts"`
	// Amazon Web Services services that are included in the scope of the assessment. See `awsServices` below.
	AwsServices []AssessmentScopeAwsService `pulumi:"awsServices"`
}

type AssessmentScopeArgs struct {
	// Amazon Web Services accounts that are in scope for the assessment. See `awsAccounts` below.
	AwsAccounts AssessmentScopeAwsAccountArrayInput `pulumi:"awsAccounts"`
	// Amazon Web Services services that are included in the scope of the assessment. See `awsServices` below.
	AwsServices AssessmentScopeAwsServiceArrayInput `pulumi:"awsServices"`
}

type AssessmentScopeAwsAccount struct {
	// Identifier for the Amazon Web Services account.
	Id string `pulumi:"id"`
}

type AssessmentScopeAwsAccountArgs struct {
	// Identifier for the Amazon Web Services account.
	Id pulumi.StringInput `pulumi:"id"`
}

type AssessmentScopeAwsAccountArray []AssessmentScopeAwsAccountInput

type AssessmentScopeAwsAccountArrayInput interface {
	pulumi.Input

	ToAssessmentScopeAwsAccountArrayOutput() AssessmentScopeAwsAccountArrayOutput
	ToAssessmentScopeAwsAccountArrayOutputWithContext(context.Context) AssessmentScopeAwsAccountArrayOutput
}

type AssessmentScopeAwsAccountArrayOutput struct{ *pulumi.OutputState }

type AssessmentScopeAwsAccountInput interface {
	pulumi.Input

	ToAssessmentScopeAwsAccountOutput() AssessmentScopeAwsAccountOutput
	ToAssessmentScopeAwsAccountOutputWithContext(context.Context) AssessmentScopeAwsAccountOutput
}

type AssessmentScopeAwsAccountOutput struct{ *pulumi.OutputState }

type AssessmentScopeAwsService struct {
	// Name of the Amazon Web Service.
	ServiceName string `pulumi:"serviceName"`
}

type AssessmentScopeAwsServiceArgs struct {
	// Name of the Amazon Web Service.
	ServiceName pulumi.StringInput `pulumi:"serviceName"`
}

type AssessmentScopeAwsServiceArray []AssessmentScopeAwsServiceInput

type AssessmentScopeAwsServiceArrayInput interface {
	pulumi.Input

	ToAssessmentScopeAwsServiceArrayOutput() AssessmentScopeAwsServiceArrayOutput
	ToAssessmentScopeAwsServiceArrayOutputWithContext(context.Context) AssessmentScopeAwsServiceArrayOutput
}

type AssessmentScopeAwsServiceArrayOutput struct{ *pulumi.OutputState }

type AssessmentScopeAwsServiceInput interface {
	pulumi.Input

	ToAssessmentScopeAwsServiceOutput() AssessmentScopeAwsServiceOutput
	ToAssessmentScopeAwsServiceOutputWithContext(context.Context) AssessmentScopeAwsServiceOutput
}

type AssessmentScopeAwsServiceOutput struct{ *pulumi.OutputState }

type AssessmentScopeInput interface {
	pulumi.Input

	ToAssessmentScopeOutput() AssessmentScopeOutput
	ToAssessmentScopeOutputWithContext(context.Context) AssessmentScopeOutput
}

type AssessmentScopeOutput struct{ *pulumi.OutputState }

type AssessmentScopePtrInput interface {
	pulumi.Input

	ToAssessmentScopePtrOutput() AssessmentScopePtrOutput
	ToAssessmentScopePtrOutputWithContext(context.Context) AssessmentScopePtrOutput
}

type AssessmentScopePtrOutput struct{ *pulumi.OutputState }

type AssessmentState struct {
	// Amazon Resource Name (ARN) of the assessment.
	Arn pulumi.StringPtrInput
	// Assessment report storage destination configuration. See `assessmentReportsDestination` below.
	AssessmentReportsDestination AssessmentAssessmentReportsDestinationPtrInput
	// Description of the assessment.
	Description pulumi.StringPtrInput
	// Unique identifier of the framework the assessment will be created from.
	FrameworkId pulumi.StringPtrInput
	// Name of the assessment.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// List of roles for the assessment. See `roles` below.
	Roles AssessmentRoleArrayInput
	// Complete list of all roles with access to the assessment. This includes both roles explicitly configured via the `roles` block, and any roles which have access to all Audit Manager assessments by default.
	RolesAlls AssessmentRolesAllArrayInput
	// Amazon Web Services accounts and services that are in scope for the assessment. See `scope` below.
	//
	// The following arguments are optional:
	Scope AssessmentScopePtrInput
	// Status of the assessment. Valid values are `ACTIVE` and `INACTIVE`.
	Status pulumi.StringPtrInput
	// A map of tags to assign to the assessment. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapInput
	TagsAll pulumi.StringMapInput
}

type Control struct {
	pulumi.CustomResourceState

	// Recommended actions to carry out if the control isn't fulfilled.
	ActionPlanInstructions pulumi.StringPtrOutput `pulumi:"actionPlanInstructions"`
	// Title of the action plan for remediating the control.
	ActionPlanTitle pulumi.StringPtrOutput `pulumi:"actionPlanTitle"`
	// Amazon Resource Name (ARN) of the control.
	// * `control_mapping_sources.*.source_id` - Unique identifier for the source.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Data mapping sources. See `controlMappingSources` below.
	//
	// The following arguments are optional:
	ControlMappingSources ControlControlMappingSourceArrayOutput `pulumi:"controlMappingSources"`
	// Description of the control.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Name of the control.
	Name pulumi.StringOutput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// A map of tags to assign to the control. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapOutput `pulumi:"tags"`
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
	// Steps to follow to determine if the control is satisfied.
	TestingInformation pulumi.StringPtrOutput `pulumi:"testingInformation"`
	// Type of control, such as a custom control or a standard control.
	Type pulumi.StringOutput `pulumi:"type"`
}

type ControlArgs struct {
	// Recommended actions to carry out if the control isn't fulfilled.
	ActionPlanInstructions pulumi.StringPtrInput
	// Title of the action plan for remediating the control.
	ActionPlanTitle pulumi.StringPtrInput
	// Data mapping sources. See `controlMappingSources` below.
	//
	// The following arguments are optional:
	ControlMappingSources ControlControlMappingSourceArrayInput
	// Description of the control.
	Description pulumi.StringPtrInput
	// Name of the control.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// A map of tags to assign to the control. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// Steps to follow to determine if the control is satisfied.
	TestingInformation pulumi.StringPtrInput
}

type ControlArray []ControlInput

type ControlArrayInput interface {
	pulumi.Input

	ToControlArrayOutput() ControlArrayOutput
	ToControlArrayOutputWithContext(context.Context) ControlArrayOutput
}

type ControlArrayOutput struct{ *pulumi.OutputState }

type ControlControlMappingSource struct {
	// Description of the source.
	SourceDescription *string `pulumi:"sourceDescription"`
	// Frequency of evidence collection. Valid values are `DAILY`, `WEEKLY`, or `MONTHLY`.
	SourceFrequency *string `pulumi:"sourceFrequency"`
	SourceId        *string `pulumi:"sourceId"`
	// The keyword to search for in CloudTrail logs, Config rules, Security Hub checks, and Amazon Web Services API names. See `sourceKeyword` below.
	SourceKeyword *ControlControlMappingSourceSourceKeyword `pulumi:"sourceKeyword"`
	// Name of the source.
	SourceName string `pulumi:"sourceName"`
	// The setup option for the data source. This option reflects if the evidence collection is automated or manual. Valid values are `System_Controls_Mapping` (automated) and `Procedural_Controls_Mapping` (manual).
	SourceSetUpOption string `pulumi:"sourceSetUpOption"`
	// Type of data source for evidence collection. If `sourceSetUpOption` is manual, the only valid value is `MANUAL`. If `sourceSetUpOption` is automated, valid values are `AWS_Cloudtrail`, `AWS_Config`, `AWS_Security_Hub`, or `AWS_API_Call`.
	//
	// The following arguments are optional:
	SourceType string `pulumi:"sourceType"`
	// Instructions for troubleshooting the control.
	TroubleshootingText *string `pulumi:"troubleshootingText"`
}

type ControlControlMappingSourceArgs struct {
	// Description of the source.
	SourceDescription pulumi.StringPtrInput `pulumi:"sourceDescription"`
	// Frequency of evidence collection. Valid values are `DAILY`, `WEEKLY`, or `MONTHLY`.
	SourceFrequency pulumi.StringPtrInput `pulumi:"sourceFrequency"`
	SourceId        pulumi.StringPtrInput `pulumi:"sourceId"`
	// The keyword to search for in CloudTrail logs, Config rules, Security Hub checks, and Amazon Web Services API names. See `sourceKeyword` below.
	SourceKeyword ControlControlMappingSourceSourceKeywordPtrInput `pulumi:"sourceKeyword"`
	// Name of the source.
	SourceName pulumi.StringInput `pulumi:"sourceName"`
	// The setup option for the data source. This option reflects if the evidence collection is automated or manual. Valid values are `System_Controls_Mapping` (automated) and `Procedural_Controls_Mapping` (manual).
	SourceSetUpOption pulumi.StringInput `pulumi:"sourceSetUpOption"`
	// Type of data source for evidence collection. If `sourceSetUpOption` is manual, the only valid value is `MANUAL`. If `sourceSetUpOption` is automated, valid values are `AWS_Cloudtrail`, `AWS_Config`, `AWS_Security_Hub`, or `AWS_API_Call`.
	//
	// The following arguments are optional:
	SourceType pulumi.StringInput `pulumi:"sourceType"`
	// Instructions for troubleshooting the control.
	TroubleshootingText pulumi.StringPtrInput `pulumi:"troubleshootingText"`
}

type ControlControlMappingSourceArray []ControlControlMappingSourceInput

type ControlControlMappingSourceArrayInput interface {
	pulumi.Input

	ToControlControlMappingSourceArrayOutput() ControlControlMappingSourceArrayOutput
	ToControlControlMappingSourceArrayOutputWithContext(context.Context) ControlControlMappingSourceArrayOutput
}

type ControlControlMappingSourceArrayOutput struct{ *pulumi.OutputState }

type ControlControlMappingSourceInput interface {
	pulumi.Input

	ToControlControlMappingSourceOutput() ControlControlMappingSourceOutput
	ToControlControlMappingSourceOutputWithContext(context.Context) ControlControlMappingSourceOutput
}

type ControlControlMappingSourceOutput struct{ *pulumi.OutputState }

type ControlControlMappingSourceSourceKeyword struct {
	// Input method for the keyword. Valid values are `INPUT_TEXT`, `SELECT_FROM_LIST`, or `UPLOAD_FILE`.
	KeywordInputType string `pulumi:"keywordInputType"`
	// The value of the keyword that's used when mapping a control data source. For example, this can be a CloudTrail event name, a rule name for Config, a Security Hub control, or the name of an Amazon Web Services API call. See the [Audit Manager supported control data sources documentation](https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources.html) for more information.
	KeywordValue string `pulumi:"keywordValue"`
}

type ControlControlMappingSourceSourceKeywordArgs struct {
	// Input method for the keyword. Valid values are `INPUT_TEXT`, `SELECT_FROM_LIST`, or `UPLOAD_FILE`.
	KeywordInputType pulumi.StringInput `pulumi:"keywordInputType"`
	// The value of the keyword that's used when mapping a control data source. For example, this can be a CloudTrail event name, a rule name for Config, a Security Hub control, or the name of an Amazon Web Services API call. See the [Audit Manager supported control data sources documentation](https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources.html) for more information.
	KeywordValue pulumi.StringInput `pulumi:"keywordValue"`
}

type ControlControlMappingSourceSourceKeywordInput interface {
	pulumi.Input

	ToControlControlMappingSourceSourceKeywordOutput() ControlControlMappingSourceSourceKeywordOutput
	ToControlControlMappingSourceSourceKeywordOutputWithContext(context.Context) ControlControlMappingSourceSourceKeywordOutput
}

type ControlControlMappingSourceSourceKeywordOutput struct{ *pulumi.OutputState }

type ControlControlMappingSourceSourceKeywordPtrInput interface {
	pulumi.Input

	ToControlControlMappingSourceSourceKeywordPtrOutput() ControlControlMappingSourceSourceKeywordPtrOutput
	ToControlControlMappingSourceSourceKeywordPtrOutputWithContext(context.Context) ControlControlMappingSourceSourceKeywordPtrOutput
}

type ControlControlMappingSourceSourceKeywordPtrOutput struct{ *pulumi.OutputState }

type ControlInput interface {
	pulumi.Input

	ToControlOutput() ControlOutput
	ToControlOutputWithContext(ctx context.Context) ControlOutput
}

type ControlMap map[string]ControlInput

type ControlMapInput interface {
	pulumi.Input

	ToControlMapOutput() ControlMapOutput
	ToControlMapOutputWithContext(context.Context) ControlMapOutput
}

type ControlMapOutput struct{ *pulumi.OutputState }

type ControlOutput struct{ *pulumi.OutputState }

type ControlState struct {
	// Recommended actions to carry out if the control isn't fulfilled.
	ActionPlanInstructions pulumi.StringPtrInput
	// Title of the action plan for remediating the control.
	ActionPlanTitle pulumi.StringPtrInput
	// Amazon Resource Name (ARN) of the control.
	// * `control_mapping_sources.*.source_id` - Unique identifier for the source.
	Arn pulumi.StringPtrInput
	// Data mapping sources. See `controlMappingSources` below.
	//
	// The following arguments are optional:
	ControlMappingSources ControlControlMappingSourceArrayInput
	// Description of the control.
	Description pulumi.StringPtrInput
	// Name of the control.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// A map of tags to assign to the control. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapInput
	TagsAll pulumi.StringMapInput
	// Steps to follow to determine if the control is satisfied.
	TestingInformation pulumi.StringPtrInput
	// Type of control, such as a custom control or a standard control.
	Type pulumi.StringPtrInput
}

type Framework struct {
	pulumi.CustomResourceState

	// Amazon Resource Name (ARN) of the framework.
	// * `control_sets[*].id` - Unique identifier for the framework control set.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Compliance type that the new custom framework supports, such as `CIS` or `HIPAA`.
	ComplianceType pulumi.StringPtrOutput `pulumi:"complianceType"`
	// Configuration block(s) for the control sets that are associated with the framework. See `controlSets` Block below for details.
	//
	// The following arguments are optional:
	ControlSets FrameworkControlSetArrayOutput `pulumi:"controlSets"`
	// Description of the framework.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// Framework type, such as a custom framework or a standard framework.
	FrameworkType pulumi.StringOutput `pulumi:"frameworkType"`
	// Name of the framework.
	Name pulumi.StringOutput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// A map of tags to assign to the framework. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags    pulumi.StringMapOutput `pulumi:"tags"`
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

type FrameworkArgs struct {
	// Compliance type that the new custom framework supports, such as `CIS` or `HIPAA`.
	ComplianceType pulumi.StringPtrInput
	// Configuration block(s) for the control sets that are associated with the framework. See `controlSets` Block below for details.
	//
	// The following arguments are optional:
	ControlSets FrameworkControlSetArrayInput
	// Description of the framework.
	Description pulumi.StringPtrInput
	// Name of the framework.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// A map of tags to assign to the framework. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type FrameworkArray []FrameworkInput

type FrameworkArrayInput interface {
	pulumi.Input

	ToFrameworkArrayOutput() FrameworkArrayOutput
	ToFrameworkArrayOutputWithContext(context.Context) FrameworkArrayOutput
}

type FrameworkArrayOutput struct{ *pulumi.OutputState }

type FrameworkControlSet struct {
	// Configuration block(s) for the controls within the control set. See `controls` Block below for details.
	Controls []FrameworkControlSetControl `pulumi:"controls"`
	// Unique identifier for the framework.
	Id *string `pulumi:"id"`
	// Name of the control set.
	Name string `pulumi:"name"`
}

type FrameworkControlSetArgs struct {
	// Configuration block(s) for the controls within the control set. See `controls` Block below for details.
	Controls FrameworkControlSetControlArrayInput `pulumi:"controls"`
	// Unique identifier for the framework.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// Name of the control set.
	Name pulumi.StringInput `pulumi:"name"`
}

type FrameworkControlSetArray []FrameworkControlSetInput

type FrameworkControlSetArrayInput interface {
	pulumi.Input

	ToFrameworkControlSetArrayOutput() FrameworkControlSetArrayOutput
	ToFrameworkControlSetArrayOutputWithContext(context.Context) FrameworkControlSetArrayOutput
}

type FrameworkControlSetArrayOutput struct{ *pulumi.OutputState }

type FrameworkControlSetControl struct {
	// Unique identifier of the control.
	Id string `pulumi:"id"`
}

type FrameworkControlSetControlArgs struct {
	// Unique identifier of the control.
	Id pulumi.StringInput `pulumi:"id"`
}

type FrameworkControlSetControlArray []FrameworkControlSetControlInput

type FrameworkControlSetControlArrayInput interface {
	pulumi.Input

	ToFrameworkControlSetControlArrayOutput() FrameworkControlSetControlArrayOutput
	ToFrameworkControlSetControlArrayOutputWithContext(context.Context) FrameworkControlSetControlArrayOutput
}

type FrameworkControlSetControlArrayOutput struct{ *pulumi.OutputState }

type FrameworkControlSetControlInput interface {
	pulumi.Input

	ToFrameworkControlSetControlOutput() FrameworkControlSetControlOutput
	ToFrameworkControlSetControlOutputWithContext(context.Context) FrameworkControlSetControlOutput
}

type FrameworkControlSetControlOutput struct{ *pulumi.OutputState }

type FrameworkControlSetInput interface {
	pulumi.Input

	ToFrameworkControlSetOutput() FrameworkControlSetOutput
	ToFrameworkControlSetOutputWithContext(context.Context) FrameworkControlSetOutput
}

type FrameworkControlSetOutput struct{ *pulumi.OutputState }

type FrameworkInput interface {
	pulumi.Input

	ToFrameworkOutput() FrameworkOutput
	ToFrameworkOutputWithContext(ctx context.Context) FrameworkOutput
}