import { AccessRightsProps } from './templategroupaccesscontrolentry/AccessRightsProps';
import { Value } from '../../cloudformation/Value';
import { AwsResource } from '../../cloudformation/resources/AwsResource';
/**
  Create a group access control entry. Allow or deny Active Directory groups from enrolling and/or autoenrolling with the template based on the group security identifiers (SIDs).
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-templategroupaccesscontrolentry.html">the AWS Docs</a>
*/
export type TemplateGroupAccessControlEntry = AwsResource<'AWS::PCAConnectorAD::TemplateGroupAccessControlEntry', TemplateGroupAccessControlEntryProperties>;
export declare function templateGroupAccessControlEntry(templateGroupAccessControlEntryProps: TemplateGroupAccessControlEntryProperties): TemplateGroupAccessControlEntry;
/**
  Create a group access control entry. Allow or deny Active Directory groups from enrolling and/or autoenrolling with the template based on the group security identifiers (SIDs).
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-pcaconnectorad-templategroupaccesscontrolentry.html">the AWS Docs</a>
*/
export interface TemplateGroupAccessControlEntryProperties {
    /** <code>AccessRights</code>  <a name="cfn-pcaconnectorad-templategroupaccesscontrolentry-accessrights"></a>
  Permissions to allow or deny an Active Directory group to enroll or autoenroll certificates issued against a template.<br />
  
  Required: Yes<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    accessRights: AccessRightsProps;
    /** <code>TemplateArn</code>  <a name="cfn-pcaconnectorad-templategroupaccesscontrolentry-templatearn"></a>
  The Amazon Resource Name (ARN) that was returned when you called <a href="https://docs.aws.amazon.com/pca-connector-ad/latest/APIReference/API_CreateTemplate.html">CreateTemplate</a>.<br />
  
  Required: No<br />
  
  Minimum: <code>5</code><br />
  
  Maximum: <code>200</code><br />
  
  Pattern: <code>arn:[\w-]+:pca-connector-ad:[\w-]+:[0-9]+:connector\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}\/template\/[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement">Replacement</a> */
    templateArn?: Value<string>;
    /** <code>GroupDisplayName</code>  <a name="cfn-pcaconnectorad-templategroupaccesscontrolentry-groupdisplayname"></a>
  Name of the Active Directory group. This name does not need to match the group name in Active Directory.<br />
  
  Required: Yes<br />
  
  Minimum: <code>0</code><br />
  
  Maximum: <code>256</code><br />
  
  Pattern: <code>[\x20-\x7E]+</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    groupDisplayName: Value<string>;
    /** <code>GroupSecurityIdentifier</code>  <a name="cfn-pcaconnectorad-templategroupaccesscontrolentry-groupsecurityidentifier"></a>
  Security identifier (SID) of the group object from Active Directory. The SID starts with “S-”.<br />
  
  Required: No<br />
  
  Minimum: <code>7</code><br />
  
  Maximum: <code>256</code><br />
  
  Pattern: <code>S-[0-9]-([0-9]+-){1,14}[0-9]+</code><br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement">Replacement</a> */
    groupSecurityIdentifier?: Value<string>;
}
