import { Value } from '../../../cloudformation/Value';
/**
  An AWS Key Management Service (KMS) key and an AWS Identity and Access Management (IAM) role that Amazon Forecast can assume to access the key. You can specify this optional object in the CreateDataset and CreatePredictor requests.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-forecast-dataset-encryptionconfig.html">the AWS Docs</a>
*/
export interface EncryptionConfigProps {
    /** <code>KmsKeyArn</code>  <a name="cfn-forecast-dataset-encryptionconfig-kmskeyarn"></a>
  The Amazon Resource Name (ARN) of the KMS key.<br />
  
  Required: No<br />
  
  Maximum: <code>256</code><br />
  
  Pattern: <code>arn:aws:kms:.*:key/.*</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    kmsKeyArn?: Value<string>;
    /** <code>RoleArn</code>  <a name="cfn-forecast-dataset-encryptionconfig-rolearn"></a>
  The ARN of the IAM role that Amazon Forecast can assume to access the AWS KMS key.<br />
  Passing a role across AWS accounts is not allowed. If you pass a role that isn’t in your account, you get an <code>InvalidInputException</code> error.<br />
  
  Required: No<br />
  
  Maximum: <code>256</code><br />
  
  Pattern: <code>arn:([a-z\d-]+):forecast:.*:.*:.+</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    roleArn?: Value<string>;
}
