awsx

type Bucket struct {
	// Sets the accelerate configuration of an existing bucket. Can be `Enabled` or `Suspended`. Cannot be used in `cn-north-1` or `us-gov-west-1`. This provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketAccelerateConfiguration` instead.
	//
	// Deprecated: acceleration_status is deprecated. Use the aws.s3.BucketAccelerateConfiguration resource instead.
	AccelerationStatus *string `pulumi:"accelerationStatus"`
	// The [canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl) to apply. Valid values are `private`, `public-read`, `public-read-write`, `aws-exec-read`, `authenticated-read`, and `log-delivery-write`. Defaults to `private`.  Conflicts with `grant`. The provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketAcl` instead.
	Acl *string `pulumi:"acl"`
	// Name of the bucket. If omitted, the provider will assign a random, unique name. Must be lowercase and less than or equal to 63 characters in length. A full list of bucket naming rules [may be found here](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html). The name must not be in the format `[bucket_name]--[azid]--x-s3`. Use the `aws.s3.DirectoryBucket` resource to manage S3 Express buckets.
	Bucket *string `pulumi:"bucket"`
	// Creates a unique bucket name beginning with the specified prefix. Conflicts with `bucket`. Must be lowercase and less than or equal to 37 characters in length. A full list of bucket naming rules [may be found here](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html).
	BucketPrefix *string `pulumi:"bucketPrefix"`
	// Rule of [Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html). See CORS rule below for details. This provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketCorsConfiguration` instead.
	//
	// Deprecated: cors_rule is deprecated. Use the aws.s3.BucketCorsConfiguration resource instead.
	CorsRules []s3.BucketCorsRule `pulumi:"corsRules"`
	// Boolean that indicates all objects (including any [locked objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock-overview.html)) should be deleted from the bucket *when the bucket is destroyed* so that the bucket can be destroyed without error. These objects are *not* recoverable. This only deletes objects when the bucket is destroyed, *not* when setting this parameter to `true`. Once this parameter is set to `true`, there must be a successful `pulumi up` run before a destroy is required to update this value in the resource state. Without a successful `pulumi up` after this parameter is set, this flag will have no effect. If setting this field in the same operation that would require replacing the bucket or destroying the bucket, this flag will not work. Additionally when importing a bucket, a successful `pulumi up` is required to set this value in state before it will take effect on a destroy operation.
	ForceDestroy *bool `pulumi:"forceDestroy"`
	// An [ACL policy grant](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#sample-acl). See Grant below for details. Conflicts with `acl`. The provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketAcl` instead.
	//
	// Deprecated: grant is deprecated. Use the aws.s3.BucketAcl resource instead.
	Grants []s3.BucketGrant `pulumi:"grants"`
	// Configuration of [object lifecycle management](http://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html). See Lifecycle Rule below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketLifecycleConfiguration` instead.
	//
	// Deprecated: lifecycle_rule is deprecated. Use the aws.s3.BucketLifecycleConfiguration resource instead.
	LifecycleRules []s3.BucketLifecycleRule `pulumi:"lifecycleRules"`
	// Configuration of [S3 bucket logging](https://docs.aws.amazon.com/AmazonS3/latest/UG/ManagingBucketLogging.html) parameters. See Logging below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketLogging` instead.
	//
	// Deprecated: logging is deprecated. Use the aws.s3.BucketLogging resource instead.
	Logging *s3.BucketLoggingType `pulumi:"logging"`
	// Configuration of [S3 object locking](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html). See Object Lock Configuration below for details.
	// The provider wil only perform drift detection if a configuration value is provided.
	// Use the `object_lock_enabled` parameter and the resource `aws.s3.BucketObjectLockConfiguration` instead.
	//
	// Deprecated: object_lock_configuration is deprecated. Use the top-level parameter object_lock_enabled and the aws.s3.BucketObjectLockConfiguration resource instead.
	ObjectLockConfiguration *s3.BucketObjectLockConfigurationType `pulumi:"objectLockConfiguration"`
	// Indicates whether this bucket has an Object Lock configuration enabled. Valid values are `true` or `false`. This argument is not supported in all regions or partitions.
	ObjectLockEnabled *bool `pulumi:"objectLockEnabled"`
	// Valid [bucket policy](https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html) JSON document. Note that if the policy document is not specific enough (but still valid), this provider may view the policy as constantly changing. In this case, please make sure you use the verbose/specific version of the policy. For more information about building AWS IAM policy documents with this provider, see the AWS IAM Policy Document Guide.
	// The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketPolicy` instead.
	Policy *string `pulumi:"policy"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
	// Configuration of [replication configuration](http://docs.aws.amazon.com/AmazonS3/latest/dev/crr.html). See Replication Configuration below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketReplicationConfig` instead.
	//
	// Deprecated: replication_configuration is deprecated. Use the aws.s3.BucketReplicationConfig resource instead.
	ReplicationConfiguration *s3.BucketReplicationConfiguration `pulumi:"replicationConfiguration"`
	// Specifies who should bear the cost of Amazon S3 data transfer.
	// Can be either `BucketOwner` or `Requester`. By default, the owner of the S3 bucket would incur the costs of any data transfer.
	// See [Requester Pays Buckets](http://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) developer guide for more information.
	// The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketRequestPaymentConfiguration` instead.
	//
	// Deprecated: request_payer is deprecated. Use the aws.s3.BucketRequestPaymentConfiguration resource instead.
	RequestPayer *string `pulumi:"requestPayer"`
	// Configuration of [server-side encryption configuration](http://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html). See Server Side Encryption Configuration below for details.
	// The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketServerSideEncryptionConfiguration` instead.
	//
	// Deprecated: server_side_encryption_configuration is deprecated. Use the aws.s3.BucketServerSideEncryptionConfiguration resource instead.
	ServerSideEncryptionConfiguration *s3.BucketServerSideEncryptionConfigurationType `pulumi:"serverSideEncryptionConfiguration"`
	// Map of tags to assign to the bucket. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	//
	// The following arguments are deprecated, and will be removed in a future major version:
	Tags map[string]string `pulumi:"tags"`
	// Configuration of the [S3 bucket versioning state](https://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html). See Versioning below for details. The provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketVersioning` instead.
	//
	// Deprecated: versioning is deprecated. Use the aws.s3.BucketVersioning resource instead.
	Versioning *s3.BucketVersioningType `pulumi:"versioning"`
	// Configuration of the [S3 bucket website](https://docs.aws.amazon.com/AmazonS3/latest/userguide/WebsiteHosting.html). See Website below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketWebsiteConfiguration` instead.
	//
	// Deprecated: website is deprecated. Use the aws.s3.BucketWebsiteConfiguration resource instead.
	Website *s3.BucketWebsite `pulumi:"website"`
}

type BucketArgs struct {
	// Sets the accelerate configuration of an existing bucket. Can be `Enabled` or `Suspended`. Cannot be used in `cn-north-1` or `us-gov-west-1`. This provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketAccelerateConfiguration` instead.
	//
	// Deprecated: acceleration_status is deprecated. Use the aws.s3.BucketAccelerateConfiguration resource instead.
	AccelerationStatus pulumi.StringPtrInput `pulumi:"accelerationStatus"`
	// The [canned ACL](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#canned-acl) to apply. Valid values are `private`, `public-read`, `public-read-write`, `aws-exec-read`, `authenticated-read`, and `log-delivery-write`. Defaults to `private`.  Conflicts with `grant`. The provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketAcl` instead.
	Acl pulumi.StringPtrInput `pulumi:"acl"`
	// Name of the bucket. If omitted, the provider will assign a random, unique name. Must be lowercase and less than or equal to 63 characters in length. A full list of bucket naming rules [may be found here](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html). The name must not be in the format `[bucket_name]--[azid]--x-s3`. Use the `aws.s3.DirectoryBucket` resource to manage S3 Express buckets.
	Bucket pulumi.StringPtrInput `pulumi:"bucket"`
	// Creates a unique bucket name beginning with the specified prefix. Conflicts with `bucket`. Must be lowercase and less than or equal to 37 characters in length. A full list of bucket naming rules [may be found here](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html).
	BucketPrefix pulumi.StringPtrInput `pulumi:"bucketPrefix"`
	// Rule of [Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html). See CORS rule below for details. This provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketCorsConfiguration` instead.
	//
	// Deprecated: cors_rule is deprecated. Use the aws.s3.BucketCorsConfiguration resource instead.
	CorsRules s3.BucketCorsRuleArrayInput `pulumi:"corsRules"`
	// Boolean that indicates all objects (including any [locked objects](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock-overview.html)) should be deleted from the bucket *when the bucket is destroyed* so that the bucket can be destroyed without error. These objects are *not* recoverable. This only deletes objects when the bucket is destroyed, *not* when setting this parameter to `true`. Once this parameter is set to `true`, there must be a successful `pulumi up` run before a destroy is required to update this value in the resource state. Without a successful `pulumi up` after this parameter is set, this flag will have no effect. If setting this field in the same operation that would require replacing the bucket or destroying the bucket, this flag will not work. Additionally when importing a bucket, a successful `pulumi up` is required to set this value in state before it will take effect on a destroy operation.
	ForceDestroy pulumi.BoolPtrInput `pulumi:"forceDestroy"`
	// An [ACL policy grant](https://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html#sample-acl). See Grant below for details. Conflicts with `acl`. The provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketAcl` instead.
	//
	// Deprecated: grant is deprecated. Use the aws.s3.BucketAcl resource instead.
	Grants s3.BucketGrantArrayInput `pulumi:"grants"`
	// Configuration of [object lifecycle management](http://docs.aws.amazon.com/AmazonS3/latest/dev/object-lifecycle-mgmt.html). See Lifecycle Rule below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketLifecycleConfiguration` instead.
	//
	// Deprecated: lifecycle_rule is deprecated. Use the aws.s3.BucketLifecycleConfiguration resource instead.
	LifecycleRules s3.BucketLifecycleRuleArrayInput `pulumi:"lifecycleRules"`
	// Configuration of [S3 bucket logging](https://docs.aws.amazon.com/AmazonS3/latest/UG/ManagingBucketLogging.html) parameters. See Logging below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketLogging` instead.
	//
	// Deprecated: logging is deprecated. Use the aws.s3.BucketLogging resource instead.
	Logging s3.BucketLoggingTypePtrInput `pulumi:"logging"`
	// Configuration of [S3 object locking](https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html). See Object Lock Configuration below for details.
	// The provider wil only perform drift detection if a configuration value is provided.
	// Use the `object_lock_enabled` parameter and the resource `aws.s3.BucketObjectLockConfiguration` instead.
	//
	// Deprecated: object_lock_configuration is deprecated. Use the top-level parameter object_lock_enabled and the aws.s3.BucketObjectLockConfiguration resource instead.
	ObjectLockConfiguration s3.BucketObjectLockConfigurationTypePtrInput `pulumi:"objectLockConfiguration"`
	// Indicates whether this bucket has an Object Lock configuration enabled. Valid values are `true` or `false`. This argument is not supported in all regions or partitions.
	ObjectLockEnabled pulumi.BoolPtrInput `pulumi:"objectLockEnabled"`
	// Valid [bucket policy](https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html) JSON document. Note that if the policy document is not specific enough (but still valid), this provider may view the policy as constantly changing. In this case, please make sure you use the verbose/specific version of the policy. For more information about building AWS IAM policy documents with this provider, see the AWS IAM Policy Document Guide.
	// The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketPolicy` instead.
	Policy pulumi.StringPtrInput `pulumi:"policy"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
	// Configuration of [replication configuration](http://docs.aws.amazon.com/AmazonS3/latest/dev/crr.html). See Replication Configuration below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketReplicationConfig` instead.
	//
	// Deprecated: replication_configuration is deprecated. Use the aws.s3.BucketReplicationConfig resource instead.
	ReplicationConfiguration s3.BucketReplicationConfigurationPtrInput `pulumi:"replicationConfiguration"`
	// Specifies who should bear the cost of Amazon S3 data transfer.
	// Can be either `BucketOwner` or `Requester`. By default, the owner of the S3 bucket would incur the costs of any data transfer.
	// See [Requester Pays Buckets](http://docs.aws.amazon.com/AmazonS3/latest/dev/RequesterPaysBuckets.html) developer guide for more information.
	// The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketRequestPaymentConfiguration` instead.
	//
	// Deprecated: request_payer is deprecated. Use the aws.s3.BucketRequestPaymentConfiguration resource instead.
	RequestPayer pulumi.StringPtrInput `pulumi:"requestPayer"`
	// Configuration of [server-side encryption configuration](http://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-encryption.html). See Server Side Encryption Configuration below for details.
	// The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketServerSideEncryptionConfiguration` instead.
	//
	// Deprecated: server_side_encryption_configuration is deprecated. Use the aws.s3.BucketServerSideEncryptionConfiguration resource instead.
	ServerSideEncryptionConfiguration s3.BucketServerSideEncryptionConfigurationTypePtrInput `pulumi:"serverSideEncryptionConfiguration"`
	// Map of tags to assign to the bucket. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	//
	// The following arguments are deprecated, and will be removed in a future major version:
	Tags pulumi.StringMapInput `pulumi:"tags"`
	// Configuration of the [S3 bucket versioning state](https://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html). See Versioning below for details. The provider will only perform drift detection if a configuration value is provided. Use the resource `aws.s3.BucketVersioning` instead.
	//
	// Deprecated: versioning is deprecated. Use the aws.s3.BucketVersioning resource instead.
	Versioning s3.BucketVersioningTypePtrInput `pulumi:"versioning"`
	// Configuration of the [S3 bucket website](https://docs.aws.amazon.com/AmazonS3/latest/userguide/WebsiteHosting.html). See Website below for details. The provider will only perform drift detection if a configuration value is provided.
	// Use the resource `aws.s3.BucketWebsiteConfiguration` instead.
	//
	// Deprecated: website is deprecated. Use the aws.s3.BucketWebsiteConfiguration resource instead.
	Website s3.BucketWebsitePtrInput `pulumi:"website"`
}

type BucketInput interface {
	pulumi.Input

	ToBucketOutput() BucketOutput
	ToBucketOutputWithContext(context.Context) BucketOutput
}

type BucketOutput struct{ *pulumi.OutputState }

type BucketPtrInput interface {
	pulumi.Input

	ToBucketPtrOutput() BucketPtrOutput
	ToBucketPtrOutputWithContext(context.Context) BucketPtrOutput
}

type BucketPtrOutput struct{ *pulumi.OutputState }

type DefaultBucket struct {
	// Arguments to use instead of the default values during creation.
	Args *Bucket `pulumi:"args"`
	// Identity of an existing bucket to use. Cannot be used in combination with `args`.
	Existing *ExistingBucket `pulumi:"existing"`
	// Skip creation of the bucket.
	Skip *bool `pulumi:"skip"`
}

type DefaultLogGroup struct {
	// Arguments to use instead of the default values during creation.
	Args *LogGroup `pulumi:"args"`
	// Identity of an existing log group to use. Cannot be used in combination with `args` or `opts`.
	Existing *ExistingLogGroup `pulumi:"existing"`
	// Skip creation of the log group.
	Skip *bool `pulumi:"skip"`
}

type DefaultLogGroupArgs struct {
	// Arguments to use instead of the default values during creation.
	Args *LogGroupArgs `pulumi:"args"`
	// Identity of an existing log group to use. Cannot be used in combination with `args` or `opts`.
	Existing *ExistingLogGroupArgs `pulumi:"existing"`
	// Skip creation of the log group.
	Skip *bool `pulumi:"skip"`
}

type DefaultLogGroupInput interface {
	pulumi.Input

	ToDefaultLogGroupOutput() DefaultLogGroupOutput
	ToDefaultLogGroupOutputWithContext(context.Context) DefaultLogGroupOutput
}

type DefaultLogGroupOutput struct{ *pulumi.OutputState }

type DefaultLogGroupPtrInput interface {
	pulumi.Input

	ToDefaultLogGroupPtrOutput() DefaultLogGroupPtrOutput
	ToDefaultLogGroupPtrOutputWithContext(context.Context) DefaultLogGroupPtrOutput
}

type DefaultLogGroupPtrOutput struct{ *pulumi.OutputState }

type DefaultRoleWithPolicy struct {
	// Args to use when creating the role and policies. Can't be specified if `roleArn` is used.
	Args *RoleWithPolicy `pulumi:"args"`
	// ARN of existing role to use instead of creating a new role. Cannot be used in combination with `args` or `opts`.
	RoleArn *string `pulumi:"roleArn"`
	// Skips creation of the role if set to `true`.
	Skip *bool `pulumi:"skip"`
}

type DefaultRoleWithPolicyArgs struct {
	// Args to use when creating the role and policies. Can't be specified if `roleArn` is used.
	Args *RoleWithPolicyArgs `pulumi:"args"`
	// ARN of existing role to use instead of creating a new role. Cannot be used in combination with `args` or `opts`.
	RoleArn pulumi.StringPtrInput `pulumi:"roleArn"`
	// Skips creation of the role if set to `true`.
	Skip *bool `pulumi:"skip"`
}

type DefaultRoleWithPolicyInput interface {
	pulumi.Input

	ToDefaultRoleWithPolicyOutput() DefaultRoleWithPolicyOutput
	ToDefaultRoleWithPolicyOutputWithContext(context.Context) DefaultRoleWithPolicyOutput
}

type DefaultRoleWithPolicyOutput struct{ *pulumi.OutputState }

type DefaultRoleWithPolicyPtrInput interface {
	pulumi.Input

	ToDefaultRoleWithPolicyPtrOutput() DefaultRoleWithPolicyPtrOutput
	ToDefaultRoleWithPolicyPtrOutputWithContext(context.Context) DefaultRoleWithPolicyPtrOutput
}

type DefaultRoleWithPolicyPtrOutput struct{ *pulumi.OutputState }

type DefaultSecurityGroup struct {
	// Args to use when creating the security group. Can't be specified if `securityGroupId` is used.
	Args *SecurityGroup `pulumi:"args"`
	// Id of existing security group to use instead of creating a new security group. Cannot be used in combination with `args` or `opts`.
	SecurityGroupId *string `pulumi:"securityGroupId"`
	// Skips creation of the security group if set to `true`.
	Skip *bool `pulumi:"skip"`
}

type DefaultSecurityGroupArgs struct {
	// Args to use when creating the security group. Can't be specified if `securityGroupId` is used.
	Args *SecurityGroupArgs `pulumi:"args"`
	// Id of existing security group to use instead of creating a new security group. Cannot be used in combination with `args` or `opts`.
	SecurityGroupId pulumi.StringPtrInput `pulumi:"securityGroupId"`
	// Skips creation of the security group if set to `true`.
	Skip *bool `pulumi:"skip"`
}

type DefaultSecurityGroupInput interface {
	pulumi.Input

	ToDefaultSecurityGroupOutput() DefaultSecurityGroupOutput
	ToDefaultSecurityGroupOutputWithContext(context.Context) DefaultSecurityGroupOutput
}

type DefaultSecurityGroupOutput struct{ *pulumi.OutputState }

type DefaultSecurityGroupPtrInput interface {
	pulumi.Input

	ToDefaultSecurityGroupPtrOutput() DefaultSecurityGroupPtrOutput
	ToDefaultSecurityGroupPtrOutputWithContext(context.Context) DefaultSecurityGroupPtrOutput
}

type DefaultSecurityGroupPtrOutput struct{ *pulumi.OutputState }

type ExistingBucket struct {
	// Arn of the bucket. Only one of [arn] or [name] can be specified.
	Arn *string `pulumi:"arn"`
	// Name of the bucket. Only one of [arn] or [name] can be specified.
	Name *string `pulumi:"name"`
}

type ExistingBucketArgs struct {
	// Arn of the bucket. Only one of [arn] or [name] can be specified.
	Arn pulumi.StringPtrInput `pulumi:"arn"`
	// Name of the bucket. Only one of [arn] or [name] can be specified.
	Name pulumi.StringPtrInput `pulumi:"name"`
}

type ExistingBucketInput interface {
	pulumi.Input

	ToExistingBucketOutput() ExistingBucketOutput
	ToExistingBucketOutputWithContext(context.Context) ExistingBucketOutput
}

type ExistingBucketOutput struct{ *pulumi.OutputState }

type ExistingBucketPtrInput interface {
	pulumi.Input

	ToExistingBucketPtrOutput() ExistingBucketPtrOutput
	ToExistingBucketPtrOutputWithContext(context.Context) ExistingBucketPtrOutput
}

type ExistingBucketPtrOutput struct{ *pulumi.OutputState }

type ExistingLogGroup struct {
	// Arn of the log group. Only one of [arn] or [name] can be specified.
	Arn *string `pulumi:"arn"`
	// Name of the log group. Only one of [arn] or [name] can be specified.
	Name *string `pulumi:"name"`
	// Region of the log group. If not specified, the provider region will be used.
	Region *string `pulumi:"region"`
}

type ExistingLogGroupArgs struct {
	// Arn of the log group. Only one of [arn] or [name] can be specified.
	Arn pulumi.StringPtrInput `pulumi:"arn"`
	// Name of the log group. Only one of [arn] or [name] can be specified.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Region of the log group. If not specified, the provider region will be used.
	Region pulumi.StringPtrInput `pulumi:"region"`
}

type ExistingLogGroupInput interface {
	pulumi.Input

	ToExistingLogGroupOutput() ExistingLogGroupOutput
	ToExistingLogGroupOutputWithContext(context.Context) ExistingLogGroupOutput
}

type ExistingLogGroupOutput struct{ *pulumi.OutputState }

type ExistingLogGroupPtrInput interface {
	pulumi.Input

	ToExistingLogGroupPtrOutput() ExistingLogGroupPtrOutput
	ToExistingLogGroupPtrOutputWithContext(context.Context) ExistingLogGroupPtrOutput
}

type ExistingLogGroupPtrOutput struct{ *pulumi.OutputState }

type LogGroup struct {
	// The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group,
	// AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires
	// permissions for the CMK whenever the encrypted data is requested.
	KmsKeyId *string `pulumi:"kmsKeyId"`
	// Specified the log class of the log group. Possible values are: `STANDARD`, `INFREQUENT_ACCESS`, or `DELIVERY`.
	LogGroupClass *string `pulumi:"logGroupClass"`
	// The name of the log group. If omitted, this provider will assign a random, unique name.
	Name *string `pulumi:"name"`
	// Creates a unique name beginning with the specified prefix. Conflicts with `name`.
	NamePrefix *string `pulumi:"namePrefix"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
	// Specifies the number of days
	// you want to retain log events in the specified log group.  Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, 3653, and 0.
	// If you select 0, the events in the log group are always retained and never expire. If `log_group_class` is set to `DELIVERY`, this argument is ignored and `retention_in_days` is forcibly set to 2.
	RetentionInDays *int `pulumi:"retentionInDays"`
	// Set to true if you do not wish the log group (and any logs it may contain) to be deleted at destroy time, and instead just remove the log group from the state.
	SkipDestroy *bool `pulumi:"skipDestroy"`
	// A map of tags to assign to the resource. .If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags map[string]string `pulumi:"tags"`
}

type LogGroupArgs struct {
	// The ARN of the KMS Key to use when encrypting log data. Please note, after the AWS KMS CMK is disassociated from the log group,
	// AWS CloudWatch Logs stops encrypting newly ingested data for the log group. All previously ingested data remains encrypted, and AWS CloudWatch Logs requires
	// permissions for the CMK whenever the encrypted data is requested.
	KmsKeyId pulumi.StringPtrInput `pulumi:"kmsKeyId"`
	// Specified the log class of the log group. Possible values are: `STANDARD`, `INFREQUENT_ACCESS`, or `DELIVERY`.
	LogGroupClass pulumi.StringPtrInput `pulumi:"logGroupClass"`
	// The name of the log group. If omitted, this provider will assign a random, unique name.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Creates a unique name beginning with the specified prefix. Conflicts with `name`.
	NamePrefix pulumi.StringPtrInput `pulumi:"namePrefix"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
	// Specifies the number of days
	// you want to retain log events in the specified log group.  Possible values are: 1, 3, 5, 7, 14, 30, 60, 90, 120, 150, 180, 365, 400, 545, 731, 1096, 1827, 2192, 2557, 2922, 3288, 3653, and 0.
	// If you select 0, the events in the log group are always retained and never expire. If `log_group_class` is set to `DELIVERY`, this argument is ignored and `retention_in_days` is forcibly set to 2.
	RetentionInDays pulumi.IntPtrInput `pulumi:"retentionInDays"`
	// Set to true if you do not wish the log group (and any logs it may contain) to be deleted at destroy time, and instead just remove the log group from the state.
	SkipDestroy pulumi.BoolPtrInput `pulumi:"skipDestroy"`
	// A map of tags to assign to the resource. .If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

type LogGroupInput interface {
	pulumi.Input

	ToLogGroupOutput() LogGroupOutput
	ToLogGroupOutputWithContext(context.Context) LogGroupOutput
}

type LogGroupOutput struct{ *pulumi.OutputState }

type LogGroupPtrInput interface {
	pulumi.Input

	ToLogGroupPtrOutput() LogGroupPtrOutput
	ToLogGroupPtrOutputWithContext(context.Context) LogGroupPtrOutput
}

type LogGroupPtrOutput struct{ *pulumi.OutputState }

type OptionalLogGroup struct {
	// Arguments to use instead of the default values during creation.
	Args *LogGroup `pulumi:"args"`
	// Enable creation of the log group.
	Enable *bool `pulumi:"enable"`
	// Identity of an existing log group to use. Cannot be used in combination with `args` or `opts`.
	Existing *ExistingLogGroup `pulumi:"existing"`
}

type OptionalLogGroupArgs struct {
	// Arguments to use instead of the default values during creation.
	Args *LogGroupArgs `pulumi:"args"`
	// Enable creation of the log group.
	Enable *bool `pulumi:"enable"`
	// Identity of an existing log group to use. Cannot be used in combination with `args` or `opts`.
	Existing *ExistingLogGroupArgs `pulumi:"existing"`
}

type OptionalLogGroupInput interface {
	pulumi.Input

	ToOptionalLogGroupOutput() OptionalLogGroupOutput
	ToOptionalLogGroupOutputWithContext(context.Context) OptionalLogGroupOutput
}

type OptionalLogGroupOutput struct{ *pulumi.OutputState }

type OptionalLogGroupPtrInput interface {
	pulumi.Input

	ToOptionalLogGroupPtrOutput() OptionalLogGroupPtrOutput
	ToOptionalLogGroupPtrOutputWithContext(context.Context) OptionalLogGroupPtrOutput
}

type OptionalLogGroupPtrOutput struct{ *pulumi.OutputState }

type RequiredBucket struct {
	// Arguments to use instead of the default values during creation.
	Args *Bucket `pulumi:"args"`
	// Identity of an existing bucket to use. Cannot be used in combination with `args`.
	Existing *ExistingBucket `pulumi:"existing"`
}

type RequiredBucketArgs struct {
	// Arguments to use instead of the default values during creation.
	Args *BucketArgs `pulumi:"args"`
	// Identity of an existing bucket to use. Cannot be used in combination with `args`.
	Existing *ExistingBucketArgs `pulumi:"existing"`
}

type RequiredBucketInput interface {
	pulumi.Input

	ToRequiredBucketOutput() RequiredBucketOutput
	ToRequiredBucketOutputWithContext(context.Context) RequiredBucketOutput
}

type RequiredBucketOutput struct{ *pulumi.OutputState }

type RequiredBucketPtrInput interface {
	pulumi.Input

	ToRequiredBucketPtrOutput() RequiredBucketPtrOutput
	ToRequiredBucketPtrOutputWithContext(context.Context) RequiredBucketPtrOutput
}

type RequiredBucketPtrOutput struct{ *pulumi.OutputState }

type RequiredLogGroup struct {
	// Arguments to use instead of the default values during creation.
	Args *LogGroup `pulumi:"args"`
	// Identity of an existing log group to use. Cannot be used in combination with `args` or `opts`.
	Existing *ExistingLogGroup `pulumi:"existing"`
}

type RoleWithPolicy struct {
	// Description of the role.
	Description *string `pulumi:"description"`
	// Whether to force detaching any policies the role has before destroying it. Defaults to `false`.
	ForceDetachPolicies *bool `pulumi:"forceDetachPolicies"`
	// Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, Pulumi will not manage any inline policies in this resource. Configuring one empty block (i.e., `inline_policy {}`) will cause Pulumi to remove _all_ inline policies added out of band on `apply`.
	InlinePolicies []iam.RoleInlinePolicy `pulumi:"inlinePolicies"`
	// Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, Pulumi will ignore policy attachments to this resource. When configured, Pulumi will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., `managed_policy_arns = []`) will cause Pulumi to remove _all_ managed policy attachments.
	ManagedPolicyArns []string `pulumi:"managedPolicyArns"`
	// Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
	MaxSessionDuration *int `pulumi:"maxSessionDuration"`
	// Friendly name of the role. If omitted, the provider will assign a random, unique name. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) for more information.
	Name *string `pulumi:"name"`
	// Creates a unique friendly name beginning with the specified prefix. Conflicts with `name`.
	NamePrefix *string `pulumi:"namePrefix"`
	// Path to the role. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) for more information.
	Path *string `pulumi:"path"`
	// ARN of the policy that is used to set the permissions boundary for the role.
	PermissionsBoundary *string `pulumi:"permissionsBoundary"`
	// ARNs of the policies to attach to the created role.
	PolicyArns []string `pulumi:"policyArns"`
	// Key-value mapping of tags for the IAM role. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags map[string]string `pulumi:"tags"`
}

type RoleWithPolicyArgs struct {
	// Description of the role.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Whether to force detaching any policies the role has before destroying it. Defaults to `false`.
	ForceDetachPolicies pulumi.BoolPtrInput `pulumi:"forceDetachPolicies"`
	// Configuration block defining an exclusive set of IAM inline policies associated with the IAM role. See below. If no blocks are configured, Pulumi will not manage any inline policies in this resource. Configuring one empty block (i.e., `inline_policy {}`) will cause Pulumi to remove _all_ inline policies added out of band on `apply`.
	InlinePolicies iam.RoleInlinePolicyArrayInput `pulumi:"inlinePolicies"`
	// Set of exclusive IAM managed policy ARNs to attach to the IAM role. If this attribute is not configured, Pulumi will ignore policy attachments to this resource. When configured, Pulumi will align the role's managed policy attachments with this set by attaching or detaching managed policies. Configuring an empty set (i.e., `managed_policy_arns = []`) will cause Pulumi to remove _all_ managed policy attachments.
	ManagedPolicyArns pulumi.StringArrayInput `pulumi:"managedPolicyArns"`
	// Maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
	MaxSessionDuration pulumi.IntPtrInput `pulumi:"maxSessionDuration"`
	// Friendly name of the role. If omitted, the provider will assign a random, unique name. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) for more information.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Creates a unique friendly name beginning with the specified prefix. Conflicts with `name`.
	NamePrefix pulumi.StringPtrInput `pulumi:"namePrefix"`
	// Path to the role. See [IAM Identifiers](https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html) for more information.
	Path pulumi.StringPtrInput `pulumi:"path"`
	// ARN of the policy that is used to set the permissions boundary for the role.
	PermissionsBoundary pulumi.StringPtrInput `pulumi:"permissionsBoundary"`
	// ARNs of the policies to attach to the created role.
	PolicyArns []string `pulumi:"policyArns"`
	// Key-value mapping of tags for the IAM role. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

type RoleWithPolicyInput interface {
	pulumi.Input

	ToRoleWithPolicyOutput() RoleWithPolicyOutput
	ToRoleWithPolicyOutputWithContext(context.Context) RoleWithPolicyOutput
}

type RoleWithPolicyOutput struct{ *pulumi.OutputState }

type RoleWithPolicyPtrInput interface {
	pulumi.Input

	ToRoleWithPolicyPtrOutput() RoleWithPolicyPtrOutput
	ToRoleWithPolicyPtrOutputWithContext(context.Context) RoleWithPolicyPtrOutput
}

type RoleWithPolicyPtrOutput struct{ *pulumi.OutputState }

type SecurityGroup struct {
	// Security group description. Defaults to `Managed by Pulumi`. Cannot be `""`. **NOTE**: This field maps to the AWS `GroupDescription` attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use `tags`.
	Description *string `pulumi:"description"`
	// Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.
	Egress []ec2.SecurityGroupEgress `pulumi:"egress"`
	// Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.
	Ingress []ec2.SecurityGroupIngress `pulumi:"ingress"`
	// Name of the security group. If omitted, the provider will assign a random, unique name.
	Name *string `pulumi:"name"`
	// Creates a unique name beginning with the specified prefix. Conflicts with `name`.
	NamePrefix *string `pulumi:"namePrefix"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region *string `pulumi:"region"`
	// Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default `false`.
	RevokeRulesOnDelete *bool `pulumi:"revokeRulesOnDelete"`
	// Map of tags to assign to the resource. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags map[string]string `pulumi:"tags"`
	// VPC ID. Defaults to the region's default VPC.
	VpcId *string `pulumi:"vpcId"`
}

type SecurityGroupArgs struct {
	// Security group description. Defaults to `Managed by Pulumi`. Cannot be `""`. **NOTE**: This field maps to the AWS `GroupDescription` attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use `tags`.
	Description pulumi.StringPtrInput `pulumi:"description"`
	// Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.
	Egress ec2.SecurityGroupEgressArrayInput `pulumi:"egress"`
	// Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.
	Ingress ec2.SecurityGroupIngressArrayInput `pulumi:"ingress"`
	// Name of the security group. If omitted, the provider will assign a random, unique name.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Creates a unique name beginning with the specified prefix. Conflicts with `name`.
	NamePrefix pulumi.StringPtrInput `pulumi:"namePrefix"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput `pulumi:"region"`
	// Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default `false`.
	RevokeRulesOnDelete pulumi.BoolPtrInput `pulumi:"revokeRulesOnDelete"`
	// Map of tags to assign to the resource. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput `pulumi:"tags"`
	// VPC ID. Defaults to the region's default VPC.
	VpcId pulumi.StringPtrInput `pulumi:"vpcId"`
}

type SecurityGroupInput interface {
	pulumi.Input

	ToSecurityGroupOutput() SecurityGroupOutput
	ToSecurityGroupOutputWithContext(context.Context) SecurityGroupOutput
}

type SecurityGroupOutput struct{ *pulumi.OutputState }

type SecurityGroupPtrInput interface {
	pulumi.Input

	ToSecurityGroupPtrOutput() SecurityGroupPtrOutput
	ToSecurityGroupPtrOutputWithContext(context.Context) SecurityGroupPtrOutput
}

type SecurityGroupPtrOutput struct{ *pulumi.OutputState }