paymentcryptography

type Key struct {
	pulumi.CustomResourceState

	// ARN of the key.
	Arn                  pulumi.StringOutput `pulumi:"arn"`
	DeletionWindowInDays pulumi.IntOutput    `pulumi:"deletionWindowInDays"`
	// Whether to enable the key.
	Enabled pulumi.BoolOutput `pulumi:"enabled"`
	// Whether the key is exportable from the service.
	Exportable pulumi.BoolOutput `pulumi:"exportable"`
	// Role of the key, the algorithm it supports, and the cryptographic operations allowed with the key.
	//
	// The following arguments are optional:
	KeyAttributes KeyKeyAttributeArrayOutput `pulumi:"keyAttributes"`
	// Key check value (KCV) is used to check if all parties holding a given key have the same key or to detect that a key has changed.
	KeyCheckValue pulumi.StringOutput `pulumi:"keyCheckValue"`
	// Algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV).
	KeyCheckValueAlgorithm pulumi.StringOutput `pulumi:"keyCheckValueAlgorithm"`
	// Source of the key material.
	KeyOrigin pulumi.StringOutput `pulumi:"keyOrigin"`
	// State of key that is being created or deleted.
	KeyState pulumi.StringOutput `pulumi:"keyState"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Map of tags assigned to the WorkSpaces Connection Alias. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll  pulumi.StringMapOutput `pulumi:"tagsAll"`
	Timeouts KeyTimeoutsPtrOutput   `pulumi:"timeouts"`
}

type KeyAlias struct {
	pulumi.CustomResourceState

	// Name of the Key Alias.
	//
	// The following arguments are optional:
	AliasName pulumi.StringOutput `pulumi:"aliasName"`
	// ARN of the key.
	KeyArn pulumi.StringPtrOutput `pulumi:"keyArn"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
}

type KeyAliasArgs struct {
	// Name of the Key Alias.
	//
	// The following arguments are optional:
	AliasName pulumi.StringInput
	// ARN of the key.
	KeyArn pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

type KeyAliasArray []KeyAliasInput

type KeyAliasArrayInput interface {
	pulumi.Input

	ToKeyAliasArrayOutput() KeyAliasArrayOutput
	ToKeyAliasArrayOutputWithContext(context.Context) KeyAliasArrayOutput
}

type KeyAliasArrayOutput struct{ *pulumi.OutputState }

type KeyAliasInput interface {
	pulumi.Input

	ToKeyAliasOutput() KeyAliasOutput
	ToKeyAliasOutputWithContext(ctx context.Context) KeyAliasOutput
}

type KeyAliasMap map[string]KeyAliasInput

type KeyAliasMapInput interface {
	pulumi.Input

	ToKeyAliasMapOutput() KeyAliasMapOutput
	ToKeyAliasMapOutputWithContext(context.Context) KeyAliasMapOutput
}

type KeyAliasMapOutput struct{ *pulumi.OutputState }

type KeyAliasOutput struct{ *pulumi.OutputState }

type KeyAliasState struct {
	// Name of the Key Alias.
	//
	// The following arguments are optional:
	AliasName pulumi.StringPtrInput
	// ARN of the key.
	KeyArn pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
}

type KeyArgs struct {
	DeletionWindowInDays pulumi.IntPtrInput
	// Whether to enable the key.
	Enabled pulumi.BoolPtrInput
	// Whether the key is exportable from the service.
	Exportable pulumi.BoolInput
	// Role of the key, the algorithm it supports, and the cryptographic operations allowed with the key.
	//
	// The following arguments are optional:
	KeyAttributes KeyKeyAttributeArrayInput
	// Algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV).
	KeyCheckValueAlgorithm pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Map of tags assigned to the WorkSpaces Connection Alias. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags     pulumi.StringMapInput
	Timeouts KeyTimeoutsPtrInput
}

type KeyArray []KeyInput

type KeyArrayInput interface {
	pulumi.Input

	ToKeyArrayOutput() KeyArrayOutput
	ToKeyArrayOutputWithContext(context.Context) KeyArrayOutput
}

type KeyArrayOutput struct{ *pulumi.OutputState }

type KeyInput interface {
	pulumi.Input

	ToKeyOutput() KeyOutput
	ToKeyOutputWithContext(ctx context.Context) KeyOutput
}

type KeyKeyAttribute struct {
	// Key algorithm to be use during creation of an AWS Payment Cryptography key.
	KeyAlgorithm string `pulumi:"keyAlgorithm"`
	// Type of AWS Payment Cryptography key to create.
	KeyClass string `pulumi:"keyClass"`
	// List of cryptographic operations that you can perform using the key.
	KeyModesOfUses []KeyKeyAttributeKeyModesOfUse `pulumi:"keyModesOfUses"`
	// Cryptographic usage of an AWS Payment Cryptography key as defined in section A.5.2 of the TR-31 spec.
	KeyUsage string `pulumi:"keyUsage"`
}

type KeyKeyAttributeArgs struct {
	// Key algorithm to be use during creation of an AWS Payment Cryptography key.
	KeyAlgorithm pulumi.StringInput `pulumi:"keyAlgorithm"`
	// Type of AWS Payment Cryptography key to create.
	KeyClass pulumi.StringInput `pulumi:"keyClass"`
	// List of cryptographic operations that you can perform using the key.
	KeyModesOfUses KeyKeyAttributeKeyModesOfUseArrayInput `pulumi:"keyModesOfUses"`
	// Cryptographic usage of an AWS Payment Cryptography key as defined in section A.5.2 of the TR-31 spec.
	KeyUsage pulumi.StringInput `pulumi:"keyUsage"`
}

type KeyKeyAttributeArray []KeyKeyAttributeInput

type KeyKeyAttributeArrayInput interface {
	pulumi.Input

	ToKeyKeyAttributeArrayOutput() KeyKeyAttributeArrayOutput
	ToKeyKeyAttributeArrayOutputWithContext(context.Context) KeyKeyAttributeArrayOutput
}

type KeyKeyAttributeArrayOutput struct{ *pulumi.OutputState }

type KeyKeyAttributeInput interface {
	pulumi.Input

	ToKeyKeyAttributeOutput() KeyKeyAttributeOutput
	ToKeyKeyAttributeOutputWithContext(context.Context) KeyKeyAttributeOutput
}

type KeyKeyAttributeKeyModesOfUse struct {
	// Whether an AWS Payment Cryptography key can be used to decrypt data.
	Decrypt *bool `pulumi:"decrypt"`
	// Whether an AWS Payment Cryptography key can be used to derive new keys.
	DeriveKey *bool `pulumi:"deriveKey"`
	// Whether an AWS Payment Cryptography key can be used to encrypt data.
	Encrypt *bool `pulumi:"encrypt"`
	// Whether an AWS Payment Cryptography key can be used to generate and verify other card and PIN verification keys.
	Generate *bool `pulumi:"generate"`
	// Whether an AWS Payment Cryptography key has no special restrictions other than the restrictions implied by KeyUsage.
	NoRestrictions *bool `pulumi:"noRestrictions"`
	// Whether an AWS Payment Cryptography key can be used for signing.
	Sign *bool `pulumi:"sign"`
	// Whether an AWS Payment Cryptography key can be used to unwrap other keys.
	Unwrap *bool `pulumi:"unwrap"`
	// Whether an AWS Payment Cryptography key can be used to verify signatures.
	Verify *bool `pulumi:"verify"`
	// Whether an AWS Payment Cryptography key can be used to wrap other keys.
	Wrap *bool `pulumi:"wrap"`
}

type KeyKeyAttributeKeyModesOfUseArgs struct {
	// Whether an AWS Payment Cryptography key can be used to decrypt data.
	Decrypt pulumi.BoolPtrInput `pulumi:"decrypt"`
	// Whether an AWS Payment Cryptography key can be used to derive new keys.
	DeriveKey pulumi.BoolPtrInput `pulumi:"deriveKey"`
	// Whether an AWS Payment Cryptography key can be used to encrypt data.
	Encrypt pulumi.BoolPtrInput `pulumi:"encrypt"`
	// Whether an AWS Payment Cryptography key can be used to generate and verify other card and PIN verification keys.
	Generate pulumi.BoolPtrInput `pulumi:"generate"`
	// Whether an AWS Payment Cryptography key has no special restrictions other than the restrictions implied by KeyUsage.
	NoRestrictions pulumi.BoolPtrInput `pulumi:"noRestrictions"`
	// Whether an AWS Payment Cryptography key can be used for signing.
	Sign pulumi.BoolPtrInput `pulumi:"sign"`
	// Whether an AWS Payment Cryptography key can be used to unwrap other keys.
	Unwrap pulumi.BoolPtrInput `pulumi:"unwrap"`
	// Whether an AWS Payment Cryptography key can be used to verify signatures.
	Verify pulumi.BoolPtrInput `pulumi:"verify"`
	// Whether an AWS Payment Cryptography key can be used to wrap other keys.
	Wrap pulumi.BoolPtrInput `pulumi:"wrap"`
}

type KeyKeyAttributeKeyModesOfUseArray []KeyKeyAttributeKeyModesOfUseInput

type KeyKeyAttributeKeyModesOfUseArrayInput interface {
	pulumi.Input

	ToKeyKeyAttributeKeyModesOfUseArrayOutput() KeyKeyAttributeKeyModesOfUseArrayOutput
	ToKeyKeyAttributeKeyModesOfUseArrayOutputWithContext(context.Context) KeyKeyAttributeKeyModesOfUseArrayOutput
}

type KeyKeyAttributeKeyModesOfUseArrayOutput struct{ *pulumi.OutputState }

type KeyKeyAttributeKeyModesOfUseInput interface {
	pulumi.Input

	ToKeyKeyAttributeKeyModesOfUseOutput() KeyKeyAttributeKeyModesOfUseOutput
	ToKeyKeyAttributeKeyModesOfUseOutputWithContext(context.Context) KeyKeyAttributeKeyModesOfUseOutput
}

type KeyKeyAttributeKeyModesOfUseOutput struct{ *pulumi.OutputState }

type KeyKeyAttributeOutput struct{ *pulumi.OutputState }

type KeyMap map[string]KeyInput

type KeyMapInput interface {
	pulumi.Input

	ToKeyMapOutput() KeyMapOutput
	ToKeyMapOutputWithContext(context.Context) KeyMapOutput
}

type KeyMapOutput struct{ *pulumi.OutputState }

type KeyOutput struct{ *pulumi.OutputState }

type KeyState struct {
	// ARN of the key.
	Arn                  pulumi.StringPtrInput
	DeletionWindowInDays pulumi.IntPtrInput
	// Whether to enable the key.
	Enabled pulumi.BoolPtrInput
	// Whether the key is exportable from the service.
	Exportable pulumi.BoolPtrInput
	// Role of the key, the algorithm it supports, and the cryptographic operations allowed with the key.
	//
	// The following arguments are optional:
	KeyAttributes KeyKeyAttributeArrayInput
	// Key check value (KCV) is used to check if all parties holding a given key have the same key or to detect that a key has changed.
	KeyCheckValue pulumi.StringPtrInput
	// Algorithm that AWS Payment Cryptography uses to calculate the key check value (KCV).
	KeyCheckValueAlgorithm pulumi.StringPtrInput
	// Source of the key material.
	KeyOrigin pulumi.StringPtrInput
	// State of key that is being created or deleted.
	KeyState pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Map of tags assigned to the WorkSpaces Connection Alias. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll  pulumi.StringMapInput
	Timeouts KeyTimeoutsPtrInput
}

type KeyTimeouts struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create *string `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete *string `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update *string `pulumi:"update"`
}

type KeyTimeoutsArgs struct {
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Create pulumi.StringPtrInput `pulumi:"create"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
	Delete pulumi.StringPtrInput `pulumi:"delete"`
	// A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
	Update pulumi.StringPtrInput `pulumi:"update"`
}

type KeyTimeoutsInput interface {
	pulumi.Input

	ToKeyTimeoutsOutput() KeyTimeoutsOutput
	ToKeyTimeoutsOutputWithContext(context.Context) KeyTimeoutsOutput
}

type KeyTimeoutsOutput struct{ *pulumi.OutputState }

type KeyTimeoutsPtrInput interface {
	pulumi.Input

	ToKeyTimeoutsPtrOutput() KeyTimeoutsPtrOutput
	ToKeyTimeoutsPtrOutputWithContext(context.Context) KeyTimeoutsPtrOutput
}

type KeyTimeoutsPtrOutput struct{ *pulumi.OutputState }