import { Value } from '../../../cloudformation/Value';
/**
  The security context for a job. For more information, see <a href="https://kubernetes.io/docs/tasks/configure-pod-container/security-context/">Configure a security context for a pod or container</a> in the <em>Kubernetes documentation</em>.
  For full documentation go to <a href="http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-batch-jobdefinition-ekscontainersecuritycontext.html">the AWS Docs</a>
*/
export interface EksContainerSecurityContextProps {
    /** <code>RunAsUser</code>  <a name="cfn-batch-jobdefinition-ekscontainersecuritycontext-runasuser"></a>
  When this parameter is specified, the container is run as the specified user ID (<code>uid</code>). If this parameter isn’t specified, the default is the user that’s specified in the image metadata. This parameter maps to <code>RunAsUser</code> and <code>MustRanAs</code> policy in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups">Users and groups pod security policies</a> in the
  Kubernetes documentation: br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    runAsUser?: Value<number>;
    /** <code>RunAsNonRoot</code>  <a name="cfn-batch-jobdefinition-ekscontainersecuritycontext-runasnonroot"></a>
  When this parameter is specified, the container is run as a user with a <code>uid</code> other than 0. If this parameter isn’t specified, so such rule is enforced. This parameter maps to <code>RunAsUser</code> and <code>MustRunAsNonRoot</code> policy in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups">Users and groups pod security policies</a> in the
  Kubernetes documentation: br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    runAsNonRoot?: Value<boolean>;
    /** <code>Privileged</code>  <a name="cfn-batch-jobdefinition-ekscontainersecuritycontext-privileged"></a>
  When this parameter is <code>true</code>, the container is given elevated permissions on the host container instance. The level of permissions are similar to the <code>root</code> user permissions. The default value is <code>false</code>. This parameter maps to <code>privileged</code> policy in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-policy/#privileged">Privileged pod security policies</a> in the
  Kubernetes documentation: br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    privileged?: Value<boolean>;
    /** <code>ReadOnlyRootFilesystem</code>  <a name="cfn-batch-jobdefinition-ekscontainersecuritycontext-readonlyrootfilesystem"></a>
  When this parameter is <code>true</code>, the container is given read-only access to its root file system. The default value is <code>false</code>. This parameter maps to <code>ReadOnlyRootFilesystem</code> policy in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-policy/#volumes-and-file-systems">Volumes and file systems pod security policies</a> in the
  Kubernetes documentation: br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    readOnlyRootFilesystem?: Value<boolean>;
    /** <code>RunAsGroup</code>  <a name="cfn-batch-jobdefinition-ekscontainersecuritycontext-runasgroup"></a>
  When this parameter is specified, the container is run as the specified group ID (<code>gid</code>). If this parameter isn’t specified, the default is the group that’s specified in the image metadata. This parameter maps to <code>RunAsGroup</code> and <code>MustRunAs</code> policy in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups">Users and groups pod security policies</a> in the
  Kubernetes documentation: br />
  
  Required: No<br />
  
  Update requires: <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt">No interruption</a> */
    runAsGroup?: Value<number>;
}
