{
 "additionalProperties": false,
 "createOnlyProperties": [
  "/properties/NetworkConfiguration",
  "/properties/Type"
 ],
 "definitions": {
  "IngressPointConfiguration": {
   "oneOf": [
    {
     "additionalProperties": false,
     "properties": {
      "SmtpPassword": {
       "maxLength": 64,
       "minLength": 8,
       "pattern": "^[A-Za-z0-9!@#$%^&*()_+\\-=\\[\\]{}|.,?]+$",
       "type": "string"
      }
     },
     "required": [
      "SmtpPassword"
     ],
     "title": "SmtpPassword",
     "type": "object"
    },
    {
     "additionalProperties": false,
     "properties": {
      "SecretArn": {
       "pattern": "^arn:(aws|aws-cn|aws-us-gov|aws-eusc):secretsmanager:[a-z0-9-]+:\\d{12}:secret:[a-zA-Z0-9/_+=,.@-]+$",
       "type": "string"
      }
     },
     "required": [
      "SecretArn"
     ],
     "title": "SecretArn",
     "type": "object"
    },
    {
     "additionalProperties": false,
     "properties": {
      "TlsAuthConfiguration": {
       "$ref": "#/definitions/TlsAuthConfiguration"
      }
     },
     "required": [
      "TlsAuthConfiguration"
     ],
     "title": "TlsAuthConfiguration",
     "type": "object"
    }
   ]
  },
  "IngressPointStatus": {
   "enum": [
    "PROVISIONING",
    "DEPROVISIONING",
    "UPDATING",
    "ACTIVE",
    "CLOSED",
    "FAILED"
   ],
   "type": "string"
  },
  "IngressPointStatusToUpdate": {
   "enum": [
    "ACTIVE",
    "CLOSED"
   ],
   "type": "string"
  },
  "IngressPointType": {
   "enum": [
    "OPEN",
    "AUTH",
    "MTLS"
   ],
   "type": "string"
  },
  "IpType": {
   "enum": [
    "IPV4",
    "DUAL_STACK"
   ],
   "type": "string"
  },
  "NetworkConfiguration": {
   "oneOf": [
    {
     "additionalProperties": false,
     "properties": {
      "PublicNetworkConfiguration": {
       "$ref": "#/definitions/PublicNetworkConfiguration"
      }
     },
     "required": [
      "PublicNetworkConfiguration"
     ],
     "title": "PublicNetworkConfiguration",
     "type": "object"
    },
    {
     "additionalProperties": false,
     "properties": {
      "PrivateNetworkConfiguration": {
       "$ref": "#/definitions/PrivateNetworkConfiguration"
      }
     },
     "required": [
      "PrivateNetworkConfiguration"
     ],
     "title": "PrivateNetworkConfiguration",
     "type": "object"
    }
   ]
  },
  "PrivateNetworkConfiguration": {
   "additionalProperties": false,
   "properties": {
    "VpcEndpointId": {
     "pattern": "^vpce-[a-zA-Z0-9]{17}$",
     "type": "string"
    }
   },
   "required": [
    "VpcEndpointId"
   ],
   "type": "object"
  },
  "PublicNetworkConfiguration": {
   "additionalProperties": false,
   "properties": {
    "IpType": {
     "allOf": [
      {
       "$ref": "#/definitions/IpType"
      },
      {
       "default": "IPV4"
      }
     ]
    }
   },
   "required": [
    "IpType"
   ],
   "type": "object"
  },
  "Tag": {
   "additionalProperties": false,
   "properties": {
    "Key": {
     "maxLength": 128,
     "minLength": 1,
     "pattern": "^[a-zA-Z0-9/_\\+=\\.:@\\-]+$",
     "type": "string"
    },
    "Value": {
     "maxLength": 256,
     "minLength": 0,
     "pattern": "^[a-zA-Z0-9/_\\+=\\.:@\\-]*$",
     "type": "string"
    }
   },
   "required": [
    "Key",
    "Value"
   ],
   "type": "object"
  },
  "TlsAuthConfiguration": {
   "additionalProperties": false,
   "properties": {
    "TrustStore": {
     "$ref": "#/definitions/TrustStore"
    }
   },
   "required": [
    "TrustStore"
   ],
   "type": "object"
  },
  "TlsPolicy": {
   "enum": [
    "REQUIRED",
    "OPTIONAL",
    "FIPS"
   ],
   "type": "string"
  },
  "TrustStore": {
   "additionalProperties": false,
   "properties": {
    "CAContent": {
     "maxLength": 500000,
     "minLength": 1,
     "pattern": "^[\\P{C}\\s]*$",
     "type": "string"
    },
    "CrlContent": {
     "maxLength": 500000,
     "minLength": 1,
     "pattern": "^[\\P{C}\\s]*$",
     "type": "string"
    },
    "KmsKeyArn": {
     "format": "AWS::KMS::Key.Arn",
     "pattern": "^arn:(aws|aws-cn|aws-us-gov|aws-eusc):kms:[a-z0-9-]+:\\d{12}:(key|alias)/[a-zA-Z0-9/_-]+$",
     "type": "string"
    }
   },
   "required": [
    "CAContent"
   ],
   "type": "object"
  }
 },
 "primaryIdentifier": [
  "/properties/IngressPointId"
 ],
 "properties": {
  "ARecord": {
   "type": "string"
  },
  "IngressPointArn": {
   "type": "string"
  },
  "IngressPointConfiguration": {
   "$ref": "#/definitions/IngressPointConfiguration"
  },
  "IngressPointId": {
   "maxLength": 100,
   "minLength": 1,
   "type": "string"
  },
  "IngressPointName": {
   "maxLength": 63,
   "minLength": 3,
   "pattern": "^[A-Za-z0-9_\\-]+$",
   "type": "string"
  },
  "NetworkConfiguration": {
   "$ref": "#/definitions/NetworkConfiguration"
  },
  "RuleSetId": {
   "maxLength": 100,
   "minLength": 1,
   "type": "string"
  },
  "Status": {
   "$ref": "#/definitions/IngressPointStatus"
  },
  "StatusToUpdate": {
   "$ref": "#/definitions/IngressPointStatusToUpdate"
  },
  "Tags": {
   "items": {
    "$ref": "#/definitions/Tag"
   },
   "maxItems": 200,
   "minItems": 0,
   "type": "array"
  },
  "TlsPolicy": {
   "$ref": "#/definitions/TlsPolicy"
  },
  "TrafficPolicyId": {
   "maxLength": 100,
   "minLength": 1,
   "type": "string"
  },
  "Type": {
   "$ref": "#/definitions/IngressPointType"
  }
 },
 "readOnlyProperties": [
  "/properties/IngressPointId",
  "/properties/IngressPointArn",
  "/properties/Status",
  "/properties/ARecord"
 ],
 "required": [
  "Type",
  "TrafficPolicyId",
  "RuleSetId"
 ],
 "sourceUrl": "https://github.com/aws-cloudformation/aws-cloudformation-resource-providers-ses-mailmanager",
 "tagging": {
  "cloudFormationSystemTags": true,
  "tagOnCreate": true,
  "tagProperty": "/properties/Tags",
  "tagUpdatable": true,
  "taggable": true
 },
 "typeName": "AWS::SES::MailManagerIngressPoint",
 "writeOnlyProperties": [
  "/properties/IngressPointConfiguration"
 ]
}
