v1beta2

type BrokerLogsInitParameters struct {
	CloudwatchLogs []CloudwatchLogsInitParameters `json:"cloudwatchLogs,omitempty" tf:"cloudwatch_logs,omitempty"`

	Firehose []FirehoseInitParameters `json:"firehose,omitempty" tf:"firehose,omitempty"`

	S3 []S3InitParameters `json:"s3,omitempty" tf:"s3,omitempty"`
}

type BrokerLogsObservation struct {
	CloudwatchLogs []CloudwatchLogsObservation `json:"cloudwatchLogs,omitempty" tf:"cloudwatch_logs,omitempty"`

	Firehose []FirehoseObservation `json:"firehose,omitempty" tf:"firehose,omitempty"`

	S3 []S3Observation `json:"s3,omitempty" tf:"s3,omitempty"`
}

type BrokerLogsParameters struct {

	// +kubebuilder:validation:Optional
	CloudwatchLogs []CloudwatchLogsParameters `json:"cloudwatchLogs,omitempty" tf:"cloudwatch_logs,omitempty"`

	// +kubebuilder:validation:Optional
	Firehose []FirehoseParameters `json:"firehose,omitempty" tf:"firehose,omitempty"`

	// +kubebuilder:validation:Optional
	S3 []S3Parameters `json:"s3,omitempty" tf:"s3,omitempty"`
}

type BrokerNodeGroupInfoInitParameters struct {

	// The distribution of broker nodes across availability zones (documentation). Currently the only valid value is DEFAULT.
	AzDistribution *string `json:"azDistribution,omitempty" tf:"az_distribution,omitempty"`

	// A list of subnets to connect to in client VPC (documentation).
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.Subnet
	// +listType=set
	ClientSubnets []*string `json:"clientSubnets,omitempty" tf:"client_subnets,omitempty"`

	// References to Subnet in ec2 to populate clientSubnets.
	// +kubebuilder:validation:Optional
	ClientSubnetsRefs []v1.Reference `json:"clientSubnetsRefs,omitempty" tf:"-"`

	// Selector for a list of Subnet in ec2 to populate clientSubnets.
	// +kubebuilder:validation:Optional
	ClientSubnetsSelector *v1.Selector `json:"clientSubnetsSelector,omitempty" tf:"-"`

	// Information about the cluster access configuration. See below. For security reasons, you can't turn on public access while creating an MSK cluster. However, you can update an existing cluster to make it publicly accessible. You can also create a new cluster and then update it to make it publicly accessible (documentation).
	ConnectivityInfo []ConnectivityInfoInitParameters `json:"connectivityInfo,omitempty" tf:"connectivity_info,omitempty"`

	// Specify the instance type to use for the kafka brokersE.g., kafka.m5.large. (Pricing info)
	InstanceType *string `json:"instanceType,omitempty" tf:"instance_type,omitempty"`

	// A list of the security groups to associate with the elastic network interfaces to control who can communicate with the cluster.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.SecurityGroup
	// +listType=set
	SecurityGroups []*string `json:"securityGroups,omitempty" tf:"security_groups,omitempty"`

	// References to SecurityGroup in ec2 to populate securityGroups.
	// +kubebuilder:validation:Optional
	SecurityGroupsRefs []v1.Reference `json:"securityGroupsRefs,omitempty" tf:"-"`

	// Selector for a list of SecurityGroup in ec2 to populate securityGroups.
	// +kubebuilder:validation:Optional
	SecurityGroupsSelector *v1.Selector `json:"securityGroupsSelector,omitempty" tf:"-"`

	// A block that contains information about storage volumes attached to MSK broker nodes. See below.
	StorageInfo []StorageInfoInitParameters `json:"storageInfo,omitempty" tf:"storage_info,omitempty"`
}

type BrokerNodeGroupInfoObservation struct {

	// The distribution of broker nodes across availability zones (documentation). Currently the only valid value is DEFAULT.
	AzDistribution *string `json:"azDistribution,omitempty" tf:"az_distribution,omitempty"`

	// A list of subnets to connect to in client VPC (documentation).
	// +listType=set
	ClientSubnets []*string `json:"clientSubnets,omitempty" tf:"client_subnets,omitempty"`

	// Information about the cluster access configuration. See below. For security reasons, you can't turn on public access while creating an MSK cluster. However, you can update an existing cluster to make it publicly accessible. You can also create a new cluster and then update it to make it publicly accessible (documentation).
	ConnectivityInfo []ConnectivityInfoObservation `json:"connectivityInfo,omitempty" tf:"connectivity_info,omitempty"`

	// Specify the instance type to use for the kafka brokersE.g., kafka.m5.large. (Pricing info)
	InstanceType *string `json:"instanceType,omitempty" tf:"instance_type,omitempty"`

	// A list of the security groups to associate with the elastic network interfaces to control who can communicate with the cluster.
	// +listType=set
	SecurityGroups []*string `json:"securityGroups,omitempty" tf:"security_groups,omitempty"`

	// A block that contains information about storage volumes attached to MSK broker nodes. See below.
	StorageInfo []StorageInfoObservation `json:"storageInfo,omitempty" tf:"storage_info,omitempty"`
}

type BrokerNodeGroupInfoParameters struct {

	// The distribution of broker nodes across availability zones (documentation). Currently the only valid value is DEFAULT.
	// +kubebuilder:validation:Optional
	AzDistribution *string `json:"azDistribution,omitempty" tf:"az_distribution,omitempty"`

	// A list of subnets to connect to in client VPC (documentation).
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.Subnet
	// +kubebuilder:validation:Optional
	// +listType=set
	ClientSubnets []*string `json:"clientSubnets,omitempty" tf:"client_subnets,omitempty"`

	// References to Subnet in ec2 to populate clientSubnets.
	// +kubebuilder:validation:Optional
	ClientSubnetsRefs []v1.Reference `json:"clientSubnetsRefs,omitempty" tf:"-"`

	// Selector for a list of Subnet in ec2 to populate clientSubnets.
	// +kubebuilder:validation:Optional
	ClientSubnetsSelector *v1.Selector `json:"clientSubnetsSelector,omitempty" tf:"-"`

	// Information about the cluster access configuration. See below. For security reasons, you can't turn on public access while creating an MSK cluster. However, you can update an existing cluster to make it publicly accessible. You can also create a new cluster and then update it to make it publicly accessible (documentation).
	// +kubebuilder:validation:Optional
	ConnectivityInfo []ConnectivityInfoParameters `json:"connectivityInfo,omitempty" tf:"connectivity_info,omitempty"`

	// Specify the instance type to use for the kafka brokersE.g., kafka.m5.large. (Pricing info)
	// +kubebuilder:validation:Optional
	InstanceType *string `json:"instanceType" tf:"instance_type,omitempty"`

	// A list of the security groups to associate with the elastic network interfaces to control who can communicate with the cluster.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.SecurityGroup
	// +kubebuilder:validation:Optional
	// +listType=set
	SecurityGroups []*string `json:"securityGroups,omitempty" tf:"security_groups,omitempty"`

	// References to SecurityGroup in ec2 to populate securityGroups.
	// +kubebuilder:validation:Optional
	SecurityGroupsRefs []v1.Reference `json:"securityGroupsRefs,omitempty" tf:"-"`

	// Selector for a list of SecurityGroup in ec2 to populate securityGroups.
	// +kubebuilder:validation:Optional
	SecurityGroupsSelector *v1.Selector `json:"securityGroupsSelector,omitempty" tf:"-"`

	// A block that contains information about storage volumes attached to MSK broker nodes. See below.
	// +kubebuilder:validation:Optional
	StorageInfo []StorageInfoParameters `json:"storageInfo,omitempty" tf:"storage_info,omitempty"`
}

type ClientAuthenticationInitParameters struct {

	// SASL authentication type details for VPC connectivity. See below.
	Sasl []SaslInitParameters `json:"sasl,omitempty" tf:"sasl,omitempty"`

	// Enables TLS authentication for VPC connectivity.
	TLS *bool `json:"tls,omitempty" tf:"tls,omitempty"`
}

type ClientAuthenticationObservation struct {

	// SASL authentication type details for VPC connectivity. See below.
	Sasl []SaslObservation `json:"sasl,omitempty" tf:"sasl,omitempty"`

	// Enables TLS authentication for VPC connectivity.
	TLS *bool `json:"tls,omitempty" tf:"tls,omitempty"`
}

type ClientAuthenticationParameters struct {

	// SASL authentication type details for VPC connectivity. See below.
	// +kubebuilder:validation:Optional
	Sasl []SaslParameters `json:"sasl,omitempty" tf:"sasl,omitempty"`

	// Enables TLS authentication for VPC connectivity.
	// +kubebuilder:validation:Optional
	TLS *bool `json:"tls,omitempty" tf:"tls,omitempty"`
}

type ClientAuthenticationSaslInitParameters struct {

	// Enables SASL/IAM authentication for VPC connectivity.
	IAM *bool `json:"iam,omitempty" tf:"iam,omitempty"`

	// Enables SASL/SCRAM authentication for VPC connectivity.
	Scram *bool `json:"scram,omitempty" tf:"scram,omitempty"`
}

type ClientAuthenticationSaslObservation struct {

	// Enables SASL/IAM authentication for VPC connectivity.
	IAM *bool `json:"iam,omitempty" tf:"iam,omitempty"`

	// Enables SASL/SCRAM authentication for VPC connectivity.
	Scram *bool `json:"scram,omitempty" tf:"scram,omitempty"`
}

type ClientAuthenticationSaslParameters struct {

	// Enables SASL/IAM authentication for VPC connectivity.
	// +kubebuilder:validation:Optional
	IAM *bool `json:"iam,omitempty" tf:"iam,omitempty"`

	// Enables SASL/SCRAM authentication for VPC connectivity.
	// +kubebuilder:validation:Optional
	Scram *bool `json:"scram,omitempty" tf:"scram,omitempty"`
}

type CloudwatchLogsInitParameters struct {

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Name of the Cloudwatch Log Group to deliver logs to.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/cloudwatchlogs/v1beta1.Group
	LogGroup *string `json:"logGroup,omitempty" tf:"log_group,omitempty"`

	// Reference to a Group in cloudwatchlogs to populate logGroup.
	// +kubebuilder:validation:Optional
	LogGroupRef *v1.Reference `json:"logGroupRef,omitempty" tf:"-"`

	// Selector for a Group in cloudwatchlogs to populate logGroup.
	// +kubebuilder:validation:Optional
	LogGroupSelector *v1.Selector `json:"logGroupSelector,omitempty" tf:"-"`
}

type CloudwatchLogsObservation struct {

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Name of the Cloudwatch Log Group to deliver logs to.
	LogGroup *string `json:"logGroup,omitempty" tf:"log_group,omitempty"`
}

type CloudwatchLogsParameters struct {

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled" tf:"enabled,omitempty"`

	// Name of the Cloudwatch Log Group to deliver logs to.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/cloudwatchlogs/v1beta1.Group
	// +kubebuilder:validation:Optional
	LogGroup *string `json:"logGroup,omitempty" tf:"log_group,omitempty"`

	// Reference to a Group in cloudwatchlogs to populate logGroup.
	// +kubebuilder:validation:Optional
	LogGroupRef *v1.Reference `json:"logGroupRef,omitempty" tf:"-"`

	// Selector for a Group in cloudwatchlogs to populate logGroup.
	// +kubebuilder:validation:Optional
	LogGroupSelector *v1.Selector `json:"logGroupSelector,omitempty" tf:"-"`
}

type Cluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.brokerNodeGroupInfo) || (has(self.initProvider) && has(self.initProvider.brokerNodeGroupInfo))",message="spec.forProvider.brokerNodeGroupInfo is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.clusterName) || (has(self.initProvider) && has(self.initProvider.clusterName))",message="spec.forProvider.clusterName is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.kafkaVersion) || (has(self.initProvider) && has(self.initProvider.kafkaVersion))",message="spec.forProvider.kafkaVersion is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.numberOfBrokerNodes) || (has(self.initProvider) && has(self.initProvider.numberOfBrokerNodes))",message="spec.forProvider.numberOfBrokerNodes is a required parameter"
	Spec   ClusterSpec   `json:"spec"`
	Status ClusterStatus `json:"status,omitempty"`
}

type ClusterClientAuthenticationInitParameters struct {

	// SASL authentication type details for VPC connectivity. See below.
	Sasl []ClientAuthenticationSaslInitParameters `json:"sasl,omitempty" tf:"sasl,omitempty"`

	// Enables TLS authentication for VPC connectivity.
	TLS []TLSInitParameters `json:"tls,omitempty" tf:"tls,omitempty"`

	// Enables unauthenticated access.
	Unauthenticated *bool `json:"unauthenticated,omitempty" tf:"unauthenticated,omitempty"`
}

type ClusterClientAuthenticationObservation struct {

	// SASL authentication type details for VPC connectivity. See below.
	Sasl []ClientAuthenticationSaslObservation `json:"sasl,omitempty" tf:"sasl,omitempty"`

	// Enables TLS authentication for VPC connectivity.
	TLS []TLSObservation `json:"tls,omitempty" tf:"tls,omitempty"`

	// Enables unauthenticated access.
	Unauthenticated *bool `json:"unauthenticated,omitempty" tf:"unauthenticated,omitempty"`
}

type ClusterClientAuthenticationParameters struct {

	// SASL authentication type details for VPC connectivity. See below.
	// +kubebuilder:validation:Optional
	Sasl []ClientAuthenticationSaslParameters `json:"sasl,omitempty" tf:"sasl,omitempty"`

	// Enables TLS authentication for VPC connectivity.
	// +kubebuilder:validation:Optional
	TLS []TLSParameters `json:"tls,omitempty" tf:"tls,omitempty"`

	// Enables unauthenticated access.
	// +kubebuilder:validation:Optional
	Unauthenticated *bool `json:"unauthenticated,omitempty" tf:"unauthenticated,omitempty"`
}

type ClusterInitParameters struct {

	// Configuration block for the broker nodes of the Kafka cluster.
	BrokerNodeGroupInfo []BrokerNodeGroupInfoInitParameters `json:"brokerNodeGroupInfo,omitempty" tf:"broker_node_group_info,omitempty"`

	// Configuration block for specifying a client authentication. See below.
	ClientAuthentication []ClusterClientAuthenticationInitParameters `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`

	// Name of the MSK cluster.
	ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`

	// Configuration block for specifying a MSK Configuration to attach to Kafka brokers. See below.
	ConfigurationInfo []ConfigurationInfoInitParameters `json:"configurationInfo,omitempty" tf:"configuration_info,omitempty"`

	// Configuration block for specifying encryption. See below.
	EncryptionInfo []EncryptionInfoInitParameters `json:"encryptionInfo,omitempty" tf:"encryption_info,omitempty"`

	// Specify the desired enhanced MSK CloudWatch monitoring level. See Monitoring Amazon MSK with Amazon CloudWatch
	EnhancedMonitoring *string `json:"enhancedMonitoring,omitempty" tf:"enhanced_monitoring,omitempty"`

	// Specify the desired Kafka software version.
	KafkaVersion *string `json:"kafkaVersion,omitempty" tf:"kafka_version,omitempty"`

	// Configuration block for streaming broker logs to Cloudwatch/S3/Kinesis Firehose. See below.
	LoggingInfo []LoggingInfoInitParameters `json:"loggingInfo,omitempty" tf:"logging_info,omitempty"`

	// The desired total number of broker nodes in the kafka cluster.  It must be a multiple of the number of specified client subnets.
	NumberOfBrokerNodes *float64 `json:"numberOfBrokerNodes,omitempty" tf:"number_of_broker_nodes,omitempty"`

	// Configuration block for JMX and Node monitoring for the MSK cluster. See below.
	OpenMonitoring []OpenMonitoringInitParameters `json:"openMonitoring,omitempty" tf:"open_monitoring,omitempty"`

	// Controls storage mode for supported storage tiers. Valid values are: LOCAL or TIERED.
	StorageMode *string `json:"storageMode,omitempty" tf:"storage_mode,omitempty"`

	// Key-value map of resource tags.
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
}

type ClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Cluster `json:"items"`
}

type ClusterObservation struct {

	// Amazon Resource Name (ARN) of the MSK Configuration to use in the cluster.
	Arn *string `json:"arn,omitempty" tf:"arn,omitempty"`

	// Comma separated list of one or more hostname:port pairs of kafka brokers suitable to bootstrap connectivity to the kafka cluster. Contains a value if encryption_info.0.encryption_in_transit.0.client_broker is set to PLAINTEXT or TLS_PLAINTEXT. The resource sorts values alphabetically. AWS may not always return all endpoints so this value is not guaranteed to be stable across applies.
	BootstrapBrokers *string `json:"bootstrapBrokers,omitempty" tf:"bootstrap_brokers,omitempty"`

	// One or more DNS names (or IP addresses) and SASL IAM port pairs. For example, b-1-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9198,b-2-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9198,b-3-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9198. This attribute will have a value if encryption_info.0.encryption_in_transit.0.client_broker is set to TLS_PLAINTEXT or TLS and client_authentication.0.sasl.0.iam is set to true and broker_node_group_info.0.connectivity_info.0.public_access.0.type is set to SERVICE_PROVIDED_EIPS and the cluster fulfill all other requirements for public access. The resource sorts the list alphabetically. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersPublicSaslIAM *string `json:"bootstrapBrokersPublicSaslIam,omitempty" tf:"bootstrap_brokers_public_sasl_iam,omitempty"`

	// One or more DNS names (or IP addresses) and SASL SCRAM port pairs. For example, b-1-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9196,b-2-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9196,b-3-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9196. This attribute will have a value if encryption_info.0.encryption_in_transit.0.client_broker is set to TLS_PLAINTEXT or TLS and client_authentication.0.sasl.0.scram is set to true and broker_node_group_info.0.connectivity_info.0.public_access.0.type is set to SERVICE_PROVIDED_EIPS and the cluster fulfill all other requirements for public access. The resource sorts the list alphabetically. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersPublicSaslScram *string `json:"bootstrapBrokersPublicSaslScram,omitempty" tf:"bootstrap_brokers_public_sasl_scram,omitempty"`

	// One or more DNS names (or IP addresses) and TLS port pairs. For example, b-1-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9194,b-2-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9194,b-3-public.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9194. This attribute will have a value if encryption_info.0.encryption_in_transit.0.client_broker is set to TLS_PLAINTEXT or TLS and broker_node_group_info.0.connectivity_info.0.public_access.0.type is set to SERVICE_PROVIDED_EIPS and the cluster fulfill all other requirements for public access. The resource sorts the list alphabetically. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersPublicTLS *string `json:"bootstrapBrokersPublicTls,omitempty" tf:"bootstrap_brokers_public_tls,omitempty"`

	// One or more DNS names (or IP addresses) and SASL IAM port pairs. For example, b-1.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9098,b-2.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9098,b-3.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9098. This attribute will have a value if encryption_info.0.encryption_in_transit.0.client_broker is set to TLS_PLAINTEXT or TLS and client_authentication.0.sasl.0.iam is set to true. The resource sorts the list alphabetically. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersSaslIAM *string `json:"bootstrapBrokersSaslIam,omitempty" tf:"bootstrap_brokers_sasl_iam,omitempty"`

	// One or more DNS names (or IP addresses) and SASL SCRAM port pairs. For example, b-1.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9096,b-2.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9096,b-3.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9096. This attribute will have a value if encryption_info.0.encryption_in_transit.0.client_broker is set to TLS_PLAINTEXT or TLS and client_authentication.0.sasl.0.scram is set to true. The resource sorts the list alphabetically. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersSaslScram *string `json:"bootstrapBrokersSaslScram,omitempty" tf:"bootstrap_brokers_sasl_scram,omitempty"`

	// One or more DNS names (or IP addresses) and TLS port pairs. For example, b-1.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9094,b-2.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9094,b-3.exampleClusterName.abcde.c2.kafka.us-east-1.amazonaws.com:9094. This attribute will have a value if encryption_info.0.encryption_in_transit.0.client_broker is set to TLS_PLAINTEXT or TLS. The resource sorts the list alphabetically. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersTLS *string `json:"bootstrapBrokersTls,omitempty" tf:"bootstrap_brokers_tls,omitempty"`

	// A string containing one or more DNS names (or IP addresses) and SASL IAM port pairs for VPC connectivity. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersVPCConnectivitySaslIAM *string `json:"bootstrapBrokersVpcConnectivitySaslIam,omitempty" tf:"bootstrap_brokers_vpc_connectivity_sasl_iam,omitempty"`

	// A string containing one or more DNS names (or IP addresses) and SASL SCRAM port pairs for VPC connectivity. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersVPCConnectivitySaslScram *string `json:"bootstrapBrokersVpcConnectivitySaslScram,omitempty" tf:"bootstrap_brokers_vpc_connectivity_sasl_scram,omitempty"`

	// A string containing one or more DNS names (or IP addresses) and TLS port pairs for VPC connectivity. AWS may not always return all endpoints so the values may not be stable across applies.
	BootstrapBrokersVPCConnectivityTLS *string `json:"bootstrapBrokersVpcConnectivityTls,omitempty" tf:"bootstrap_brokers_vpc_connectivity_tls,omitempty"`

	// Configuration block for the broker nodes of the Kafka cluster.
	BrokerNodeGroupInfo []BrokerNodeGroupInfoObservation `json:"brokerNodeGroupInfo,omitempty" tf:"broker_node_group_info,omitempty"`

	// Configuration block for specifying a client authentication. See below.
	ClientAuthentication []ClusterClientAuthenticationObservation `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`

	// Name of the MSK cluster.
	ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`

	// UUID of the MSK cluster, for use in IAM policies.
	ClusterUUID *string `json:"clusterUuid,omitempty" tf:"cluster_uuid,omitempty"`

	// Configuration block for specifying a MSK Configuration to attach to Kafka brokers. See below.
	ConfigurationInfo []ConfigurationInfoObservation `json:"configurationInfo,omitempty" tf:"configuration_info,omitempty"`

	// Current version of the MSK Cluster used for updates, e.g., K13V1IB3VIYZZH
	CurrentVersion *string `json:"currentVersion,omitempty" tf:"current_version,omitempty"`

	// Configuration block for specifying encryption. See below.
	EncryptionInfo []EncryptionInfoObservation `json:"encryptionInfo,omitempty" tf:"encryption_info,omitempty"`

	// Specify the desired enhanced MSK CloudWatch monitoring level. See Monitoring Amazon MSK with Amazon CloudWatch
	EnhancedMonitoring *string `json:"enhancedMonitoring,omitempty" tf:"enhanced_monitoring,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Specify the desired Kafka software version.
	KafkaVersion *string `json:"kafkaVersion,omitempty" tf:"kafka_version,omitempty"`

	// Configuration block for streaming broker logs to Cloudwatch/S3/Kinesis Firehose. See below.
	LoggingInfo []LoggingInfoObservation `json:"loggingInfo,omitempty" tf:"logging_info,omitempty"`

	// The desired total number of broker nodes in the kafka cluster.  It must be a multiple of the number of specified client subnets.
	NumberOfBrokerNodes *float64 `json:"numberOfBrokerNodes,omitempty" tf:"number_of_broker_nodes,omitempty"`

	// Configuration block for JMX and Node monitoring for the MSK cluster. See below.
	OpenMonitoring []OpenMonitoringObservation `json:"openMonitoring,omitempty" tf:"open_monitoring,omitempty"`

	// Controls storage mode for supported storage tiers. Valid values are: LOCAL or TIERED.
	StorageMode *string `json:"storageMode,omitempty" tf:"storage_mode,omitempty"`

	// Key-value map of resource tags.
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
	// +mapType=granular
	TagsAll map[string]*string `json:"tagsAll,omitempty" tf:"tags_all,omitempty"`

	// A comma separated list of one or more hostname:port pairs to use to connect to the Apache Zookeeper cluster. The returned values are sorted alphabetically. The AWS API may not return all endpoints, so this value is not guaranteed to be stable across applies.
	ZookeeperConnectString *string `json:"zookeeperConnectString,omitempty" tf:"zookeeper_connect_string,omitempty"`

	// A comma separated list of one or more hostname:port pairs to use to connect to the Apache Zookeeper cluster via TLS. The returned values are sorted alphabetically. The AWS API may not return all endpoints, so this value is not guaranteed to be stable across applies.
	ZookeeperConnectStringTLS *string `json:"zookeeperConnectStringTls,omitempty" tf:"zookeeper_connect_string_tls,omitempty"`
}

type ClusterParameters struct {

	// Configuration block for the broker nodes of the Kafka cluster.
	// +kubebuilder:validation:Optional
	BrokerNodeGroupInfo []BrokerNodeGroupInfoParameters `json:"brokerNodeGroupInfo,omitempty" tf:"broker_node_group_info,omitempty"`

	// Configuration block for specifying a client authentication. See below.
	// +kubebuilder:validation:Optional
	ClientAuthentication []ClusterClientAuthenticationParameters `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`

	// Name of the MSK cluster.
	// +kubebuilder:validation:Optional
	ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`

	// Configuration block for specifying a MSK Configuration to attach to Kafka brokers. See below.
	// +kubebuilder:validation:Optional
	ConfigurationInfo []ConfigurationInfoParameters `json:"configurationInfo,omitempty" tf:"configuration_info,omitempty"`

	// Configuration block for specifying encryption. See below.
	// +kubebuilder:validation:Optional
	EncryptionInfo []EncryptionInfoParameters `json:"encryptionInfo,omitempty" tf:"encryption_info,omitempty"`

	// Specify the desired enhanced MSK CloudWatch monitoring level. See Monitoring Amazon MSK with Amazon CloudWatch
	// +kubebuilder:validation:Optional
	EnhancedMonitoring *string `json:"enhancedMonitoring,omitempty" tf:"enhanced_monitoring,omitempty"`

	// Specify the desired Kafka software version.
	// +kubebuilder:validation:Optional
	KafkaVersion *string `json:"kafkaVersion,omitempty" tf:"kafka_version,omitempty"`

	// Configuration block for streaming broker logs to Cloudwatch/S3/Kinesis Firehose. See below.
	// +kubebuilder:validation:Optional
	LoggingInfo []LoggingInfoParameters `json:"loggingInfo,omitempty" tf:"logging_info,omitempty"`

	// The desired total number of broker nodes in the kafka cluster.  It must be a multiple of the number of specified client subnets.
	// +kubebuilder:validation:Optional
	NumberOfBrokerNodes *float64 `json:"numberOfBrokerNodes,omitempty" tf:"number_of_broker_nodes,omitempty"`

	// Configuration block for JMX and Node monitoring for the MSK cluster. See below.
	// +kubebuilder:validation:Optional
	OpenMonitoring []OpenMonitoringParameters `json:"openMonitoring,omitempty" tf:"open_monitoring,omitempty"`

	// Region is the region you'd like your resource to be created in.
	// +upjet:crd:field:TFTag=-
	// +kubebuilder:validation:Required
	Region *string `json:"region" tf:"-"`

	// Controls storage mode for supported storage tiers. Valid values are: LOCAL or TIERED.
	// +kubebuilder:validation:Optional
	StorageMode *string `json:"storageMode,omitempty" tf:"storage_mode,omitempty"`

	// Key-value map of resource tags.
	// +kubebuilder:validation:Optional
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`
}

type ClusterSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     ClusterParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider ClusterInitParameters `json:"initProvider,omitempty"`
}

type ClusterStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        ClusterObservation `json:"atProvider,omitempty"`
}

type ConfigurationInfoInitParameters struct {

	// Amazon Resource Name (ARN) of the MSK Configuration to use in the cluster.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/kafka/v1beta1.Configuration
	// +crossplane:generate:reference:extractor=github.com/upbound/provider-aws/config/common.ARNExtractor()
	Arn *string `json:"arn,omitempty" tf:"arn,omitempty"`

	// Reference to a Configuration in kafka to populate arn.
	// +kubebuilder:validation:Optional
	ArnRef *v1.Reference `json:"arnRef,omitempty" tf:"-"`

	// Selector for a Configuration in kafka to populate arn.
	// +kubebuilder:validation:Optional
	ArnSelector *v1.Selector `json:"arnSelector,omitempty" tf:"-"`

	// Revision of the MSK Configuration to use in the cluster.
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`
}

type ConfigurationInfoObservation struct {

	// Amazon Resource Name (ARN) of the MSK Configuration to use in the cluster.
	Arn *string `json:"arn,omitempty" tf:"arn,omitempty"`

	// Revision of the MSK Configuration to use in the cluster.
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`
}

type ConfigurationInfoParameters struct {

	// Amazon Resource Name (ARN) of the MSK Configuration to use in the cluster.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/kafka/v1beta1.Configuration
	// +crossplane:generate:reference:extractor=github.com/upbound/provider-aws/config/common.ARNExtractor()
	// +kubebuilder:validation:Optional
	Arn *string `json:"arn,omitempty" tf:"arn,omitempty"`

	// Reference to a Configuration in kafka to populate arn.
	// +kubebuilder:validation:Optional
	ArnRef *v1.Reference `json:"arnRef,omitempty" tf:"-"`

	// Selector for a Configuration in kafka to populate arn.
	// +kubebuilder:validation:Optional
	ArnSelector *v1.Selector `json:"arnSelector,omitempty" tf:"-"`

	// Revision of the MSK Configuration to use in the cluster.
	// +kubebuilder:validation:Optional
	Revision *float64 `json:"revision" tf:"revision,omitempty"`
}

type ConnectivityInfoInitParameters struct {

	// Access control settings for brokers. See below.
	PublicAccess []PublicAccessInitParameters `json:"publicAccess,omitempty" tf:"public_access,omitempty"`

	// VPC connectivity access control for brokers. See below.
	VPCConnectivity []VPCConnectivityInitParameters `json:"vpcConnectivity,omitempty" tf:"vpc_connectivity,omitempty"`
}

type ConnectivityInfoObservation struct {

	// Access control settings for brokers. See below.
	PublicAccess []PublicAccessObservation `json:"publicAccess,omitempty" tf:"public_access,omitempty"`

	// VPC connectivity access control for brokers. See below.
	VPCConnectivity []VPCConnectivityObservation `json:"vpcConnectivity,omitempty" tf:"vpc_connectivity,omitempty"`
}

type ConnectivityInfoParameters struct {

	// Access control settings for brokers. See below.
	// +kubebuilder:validation:Optional
	PublicAccess []PublicAccessParameters `json:"publicAccess,omitempty" tf:"public_access,omitempty"`

	// VPC connectivity access control for brokers. See below.
	// +kubebuilder:validation:Optional
	VPCConnectivity []VPCConnectivityParameters `json:"vpcConnectivity,omitempty" tf:"vpc_connectivity,omitempty"`
}

type EBSStorageInfoInitParameters struct {

	// A block that contains EBS volume provisioned throughput information. To provision storage throughput, you must choose broker type kafka.m5.4xlarge or larger. See below.
	ProvisionedThroughput []ProvisionedThroughputInitParameters `json:"provisionedThroughput,omitempty" tf:"provisioned_throughput,omitempty"`

	// The size in GiB of the EBS volume for the data drive on each broker node. Minimum value of 1 and maximum value of 16384.
	VolumeSize *float64 `json:"volumeSize,omitempty" tf:"volume_size,omitempty"`
}

type EBSStorageInfoObservation struct {

	// A block that contains EBS volume provisioned throughput information. To provision storage throughput, you must choose broker type kafka.m5.4xlarge or larger. See below.
	ProvisionedThroughput []ProvisionedThroughputObservation `json:"provisionedThroughput,omitempty" tf:"provisioned_throughput,omitempty"`

	// The size in GiB of the EBS volume for the data drive on each broker node. Minimum value of 1 and maximum value of 16384.
	VolumeSize *float64 `json:"volumeSize,omitempty" tf:"volume_size,omitempty"`
}

type EBSStorageInfoParameters struct {

	// A block that contains EBS volume provisioned throughput information. To provision storage throughput, you must choose broker type kafka.m5.4xlarge or larger. See below.
	// +kubebuilder:validation:Optional
	ProvisionedThroughput []ProvisionedThroughputParameters `json:"provisionedThroughput,omitempty" tf:"provisioned_throughput,omitempty"`

	// The size in GiB of the EBS volume for the data drive on each broker node. Minimum value of 1 and maximum value of 16384.
	// +kubebuilder:validation:Optional
	VolumeSize *float64 `json:"volumeSize,omitempty" tf:"volume_size,omitempty"`
}

type EncryptionInTransitInitParameters struct {

	// Encryption setting for data in transit between clients and brokers. Valid values: TLS, TLS_PLAINTEXT, and PLAINTEXT. Default value is TLS.
	ClientBroker *string `json:"clientBroker,omitempty" tf:"client_broker,omitempty"`

	// Whether data communication among broker nodes is encrypted. Default value: true.
	InCluster *bool `json:"inCluster,omitempty" tf:"in_cluster,omitempty"`
}

type EncryptionInTransitObservation struct {

	// Encryption setting for data in transit between clients and brokers. Valid values: TLS, TLS_PLAINTEXT, and PLAINTEXT. Default value is TLS.
	ClientBroker *string `json:"clientBroker,omitempty" tf:"client_broker,omitempty"`

	// Whether data communication among broker nodes is encrypted. Default value: true.
	InCluster *bool `json:"inCluster,omitempty" tf:"in_cluster,omitempty"`
}

type EncryptionInTransitParameters struct {

	// Encryption setting for data in transit between clients and brokers. Valid values: TLS, TLS_PLAINTEXT, and PLAINTEXT. Default value is TLS.
	// +kubebuilder:validation:Optional
	ClientBroker *string `json:"clientBroker,omitempty" tf:"client_broker,omitempty"`

	// Whether data communication among broker nodes is encrypted. Default value: true.
	// +kubebuilder:validation:Optional
	InCluster *bool `json:"inCluster,omitempty" tf:"in_cluster,omitempty"`
}

type EncryptionInfoInitParameters struct {

	// The ARN of the KMS key used for encryption at rest of the broker data volumes.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/kms/v1beta1.Key
	// +crossplane:generate:reference:extractor=github.com/upbound/provider-aws/config/common.ARNExtractor()
	EncryptionAtRestKMSKeyArn *string `json:"encryptionAtRestKmsKeyArn,omitempty" tf:"encryption_at_rest_kms_key_arn,omitempty"`

	// Reference to a Key in kms to populate encryptionAtRestKmsKeyArn.
	// +kubebuilder:validation:Optional
	EncryptionAtRestKMSKeyArnRef *v1.Reference `json:"encryptionAtRestKmsKeyArnRef,omitempty" tf:"-"`

	// Selector for a Key in kms to populate encryptionAtRestKmsKeyArn.
	// +kubebuilder:validation:Optional
	EncryptionAtRestKMSKeyArnSelector *v1.Selector `json:"encryptionAtRestKmsKeyArnSelector,omitempty" tf:"-"`

	// Configuration block to specify encryption in transit. See below.
	EncryptionInTransit []EncryptionInTransitInitParameters `json:"encryptionInTransit,omitempty" tf:"encryption_in_transit,omitempty"`
}

type EncryptionInfoObservation struct {

	// The ARN of the KMS key used for encryption at rest of the broker data volumes.
	EncryptionAtRestKMSKeyArn *string `json:"encryptionAtRestKmsKeyArn,omitempty" tf:"encryption_at_rest_kms_key_arn,omitempty"`

	// Configuration block to specify encryption in transit. See below.
	EncryptionInTransit []EncryptionInTransitObservation `json:"encryptionInTransit,omitempty" tf:"encryption_in_transit,omitempty"`
}

type EncryptionInfoParameters struct {

	// The ARN of the KMS key used for encryption at rest of the broker data volumes.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/kms/v1beta1.Key
	// +crossplane:generate:reference:extractor=github.com/upbound/provider-aws/config/common.ARNExtractor()
	// +kubebuilder:validation:Optional
	EncryptionAtRestKMSKeyArn *string `json:"encryptionAtRestKmsKeyArn,omitempty" tf:"encryption_at_rest_kms_key_arn,omitempty"`

	// Reference to a Key in kms to populate encryptionAtRestKmsKeyArn.
	// +kubebuilder:validation:Optional
	EncryptionAtRestKMSKeyArnRef *v1.Reference `json:"encryptionAtRestKmsKeyArnRef,omitempty" tf:"-"`

	// Selector for a Key in kms to populate encryptionAtRestKmsKeyArn.
	// +kubebuilder:validation:Optional
	EncryptionAtRestKMSKeyArnSelector *v1.Selector `json:"encryptionAtRestKmsKeyArnSelector,omitempty" tf:"-"`

	// Configuration block to specify encryption in transit. See below.
	// +kubebuilder:validation:Optional
	EncryptionInTransit []EncryptionInTransitParameters `json:"encryptionInTransit,omitempty" tf:"encryption_in_transit,omitempty"`
}

type FirehoseInitParameters struct {

	// Name of the Kinesis Data Firehose delivery stream to deliver logs to.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/firehose/v1beta1.DeliveryStream
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("name",false)
	DeliveryStream *string `json:"deliveryStream,omitempty" tf:"delivery_stream,omitempty"`

	// Reference to a DeliveryStream in firehose to populate deliveryStream.
	// +kubebuilder:validation:Optional
	DeliveryStreamRef *v1.Reference `json:"deliveryStreamRef,omitempty" tf:"-"`

	// Selector for a DeliveryStream in firehose to populate deliveryStream.
	// +kubebuilder:validation:Optional
	DeliveryStreamSelector *v1.Selector `json:"deliveryStreamSelector,omitempty" tf:"-"`

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`
}

type FirehoseObservation struct {

	// Name of the Kinesis Data Firehose delivery stream to deliver logs to.
	DeliveryStream *string `json:"deliveryStream,omitempty" tf:"delivery_stream,omitempty"`

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`
}

type FirehoseParameters struct {

	// Name of the Kinesis Data Firehose delivery stream to deliver logs to.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/firehose/v1beta1.DeliveryStream
	// +crossplane:generate:reference:extractor=github.com/crossplane/upjet/pkg/resource.ExtractParamPath("name",false)
	// +kubebuilder:validation:Optional
	DeliveryStream *string `json:"deliveryStream,omitempty" tf:"delivery_stream,omitempty"`

	// Reference to a DeliveryStream in firehose to populate deliveryStream.
	// +kubebuilder:validation:Optional
	DeliveryStreamRef *v1.Reference `json:"deliveryStreamRef,omitempty" tf:"-"`

	// Selector for a DeliveryStream in firehose to populate deliveryStream.
	// +kubebuilder:validation:Optional
	DeliveryStreamSelector *v1.Selector `json:"deliveryStreamSelector,omitempty" tf:"-"`

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled" tf:"enabled,omitempty"`
}

type IAMInitParameters struct {

	// Whether SASL/IAM authentication is enabled or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`
}

type IAMObservation struct {

	// Whether SASL/IAM authentication is enabled or not.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`
}

type IAMParameters struct {

	// Whether SASL/IAM authentication is enabled or not.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled" tf:"enabled,omitempty"`
}

type JmxExporterInitParameters struct {

	// Indicates whether you want to enable or disable the JMX Exporter.
	EnabledInBroker *bool `json:"enabledInBroker,omitempty" tf:"enabled_in_broker,omitempty"`
}

type JmxExporterObservation struct {

	// Indicates whether you want to enable or disable the JMX Exporter.
	EnabledInBroker *bool `json:"enabledInBroker,omitempty" tf:"enabled_in_broker,omitempty"`
}

type JmxExporterParameters struct {

	// Indicates whether you want to enable or disable the JMX Exporter.
	// +kubebuilder:validation:Optional
	EnabledInBroker *bool `json:"enabledInBroker" tf:"enabled_in_broker,omitempty"`
}

type LoggingInfoInitParameters struct {

	// Configuration block for Broker Logs settings for logging info. See below.
	BrokerLogs []BrokerLogsInitParameters `json:"brokerLogs,omitempty" tf:"broker_logs,omitempty"`
}

type LoggingInfoObservation struct {

	// Configuration block for Broker Logs settings for logging info. See below.
	BrokerLogs []BrokerLogsObservation `json:"brokerLogs,omitempty" tf:"broker_logs,omitempty"`
}

type LoggingInfoParameters struct {

	// Configuration block for Broker Logs settings for logging info. See below.
	// +kubebuilder:validation:Optional
	BrokerLogs []BrokerLogsParameters `json:"brokerLogs" tf:"broker_logs,omitempty"`
}

type NodeExporterInitParameters struct {

	// Indicates whether you want to enable or disable the JMX Exporter.
	EnabledInBroker *bool `json:"enabledInBroker,omitempty" tf:"enabled_in_broker,omitempty"`
}

type NodeExporterObservation struct {

	// Indicates whether you want to enable or disable the JMX Exporter.
	EnabledInBroker *bool `json:"enabledInBroker,omitempty" tf:"enabled_in_broker,omitempty"`
}

type NodeExporterParameters struct {

	// Indicates whether you want to enable or disable the JMX Exporter.
	// +kubebuilder:validation:Optional
	EnabledInBroker *bool `json:"enabledInBroker" tf:"enabled_in_broker,omitempty"`
}

type OpenMonitoringInitParameters struct {

	// Configuration block for Prometheus settings for open monitoring. See below.
	Prometheus []PrometheusInitParameters `json:"prometheus,omitempty" tf:"prometheus,omitempty"`
}

type OpenMonitoringObservation struct {

	// Configuration block for Prometheus settings for open monitoring. See below.
	Prometheus []PrometheusObservation `json:"prometheus,omitempty" tf:"prometheus,omitempty"`
}

type OpenMonitoringParameters struct {

	// Configuration block for Prometheus settings for open monitoring. See below.
	// +kubebuilder:validation:Optional
	Prometheus []PrometheusParameters `json:"prometheus" tf:"prometheus,omitempty"`
}

type PrometheusInitParameters struct {

	// Configuration block for JMX Exporter. See below.
	JmxExporter []JmxExporterInitParameters `json:"jmxExporter,omitempty" tf:"jmx_exporter,omitempty"`

	// Configuration block for Node Exporter. See below.
	NodeExporter []NodeExporterInitParameters `json:"nodeExporter,omitempty" tf:"node_exporter,omitempty"`
}

type PrometheusObservation struct {

	// Configuration block for JMX Exporter. See below.
	JmxExporter []JmxExporterObservation `json:"jmxExporter,omitempty" tf:"jmx_exporter,omitempty"`

	// Configuration block for Node Exporter. See below.
	NodeExporter []NodeExporterObservation `json:"nodeExporter,omitempty" tf:"node_exporter,omitempty"`
}

type PrometheusParameters struct {

	// Configuration block for JMX Exporter. See below.
	// +kubebuilder:validation:Optional
	JmxExporter []JmxExporterParameters `json:"jmxExporter,omitempty" tf:"jmx_exporter,omitempty"`

	// Configuration block for Node Exporter. See below.
	// +kubebuilder:validation:Optional
	NodeExporter []NodeExporterParameters `json:"nodeExporter,omitempty" tf:"node_exporter,omitempty"`
}

type ProvisionedThroughputInitParameters struct {

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Throughput value of the EBS volumes for the data drive on each kafka broker node in MiB per second. The minimum value is 250. The maximum value varies between broker type. You can refer to the valid values for the maximum volume throughput at the following documentation on throughput bottlenecks
	VolumeThroughput *float64 `json:"volumeThroughput,omitempty" tf:"volume_throughput,omitempty"`
}

type ProvisionedThroughputObservation struct {

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Throughput value of the EBS volumes for the data drive on each kafka broker node in MiB per second. The minimum value is 250. The maximum value varies between broker type. You can refer to the valid values for the maximum volume throughput at the following documentation on throughput bottlenecks
	VolumeThroughput *float64 `json:"volumeThroughput,omitempty" tf:"volume_throughput,omitempty"`
}

type ProvisionedThroughputParameters struct {

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Throughput value of the EBS volumes for the data drive on each kafka broker node in MiB per second. The minimum value is 250. The maximum value varies between broker type. You can refer to the valid values for the maximum volume throughput at the following documentation on throughput bottlenecks
	// +kubebuilder:validation:Optional
	VolumeThroughput *float64 `json:"volumeThroughput,omitempty" tf:"volume_throughput,omitempty"`
}

type PublicAccessInitParameters struct {

	// Public access type. Valid values: DISABLED, SERVICE_PROVIDED_EIPS.
	Type *string `json:"type,omitempty" tf:"type,omitempty"`
}

type PublicAccessObservation struct {

	// Public access type. Valid values: DISABLED, SERVICE_PROVIDED_EIPS.
	Type *string `json:"type,omitempty" tf:"type,omitempty"`
}

type PublicAccessParameters struct {

	// Public access type. Valid values: DISABLED, SERVICE_PROVIDED_EIPS.
	// +kubebuilder:validation:Optional
	Type *string `json:"type,omitempty" tf:"type,omitempty"`
}

type S3InitParameters struct {

	// Name of the S3 bucket to deliver logs to.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/s3/v1beta1.Bucket
	Bucket *string `json:"bucket,omitempty" tf:"bucket,omitempty"`

	// Reference to a Bucket in s3 to populate bucket.
	// +kubebuilder:validation:Optional
	BucketRef *v1.Reference `json:"bucketRef,omitempty" tf:"-"`

	// Selector for a Bucket in s3 to populate bucket.
	// +kubebuilder:validation:Optional
	BucketSelector *v1.Selector `json:"bucketSelector,omitempty" tf:"-"`

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Prefix to append to the folder name.
	Prefix *string `json:"prefix,omitempty" tf:"prefix,omitempty"`
}

type S3Observation struct {

	// Name of the S3 bucket to deliver logs to.
	Bucket *string `json:"bucket,omitempty" tf:"bucket,omitempty"`

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Prefix to append to the folder name.
	Prefix *string `json:"prefix,omitempty" tf:"prefix,omitempty"`
}

type S3Parameters struct {

	// Name of the S3 bucket to deliver logs to.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/s3/v1beta1.Bucket
	// +kubebuilder:validation:Optional
	Bucket *string `json:"bucket,omitempty" tf:"bucket,omitempty"`

	// Reference to a Bucket in s3 to populate bucket.
	// +kubebuilder:validation:Optional
	BucketRef *v1.Reference `json:"bucketRef,omitempty" tf:"-"`

	// Selector for a Bucket in s3 to populate bucket.
	// +kubebuilder:validation:Optional
	BucketSelector *v1.Selector `json:"bucketSelector,omitempty" tf:"-"`

	// Controls whether provisioned throughput is enabled or not. Default value: false.
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled" tf:"enabled,omitempty"`

	// Prefix to append to the folder name.
	// +kubebuilder:validation:Optional
	Prefix *string `json:"prefix,omitempty" tf:"prefix,omitempty"`
}

type SaslInitParameters struct {

	// Enables SASL/IAM authentication for VPC connectivity.
	IAM *bool `json:"iam,omitempty" tf:"iam,omitempty"`

	// Enables SASL/SCRAM authentication for VPC connectivity.
	Scram *bool `json:"scram,omitempty" tf:"scram,omitempty"`
}

type SaslObservation struct {

	// Enables SASL/IAM authentication for VPC connectivity.
	IAM *bool `json:"iam,omitempty" tf:"iam,omitempty"`

	// Enables SASL/SCRAM authentication for VPC connectivity.
	Scram *bool `json:"scram,omitempty" tf:"scram,omitempty"`
}

type SaslParameters struct {

	// Enables SASL/IAM authentication for VPC connectivity.
	// +kubebuilder:validation:Optional
	IAM *bool `json:"iam,omitempty" tf:"iam,omitempty"`

	// Enables SASL/SCRAM authentication for VPC connectivity.
	// +kubebuilder:validation:Optional
	Scram *bool `json:"scram,omitempty" tf:"scram,omitempty"`
}

type ServerlessCluster struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.clientAuthentication) || (has(self.initProvider) && has(self.initProvider.clientAuthentication))",message="spec.forProvider.clientAuthentication is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.clusterName) || (has(self.initProvider) && has(self.initProvider.clusterName))",message="spec.forProvider.clusterName is a required parameter"
	// +kubebuilder:validation:XValidation:rule="!('*' in self.managementPolicies || 'Create' in self.managementPolicies || 'Update' in self.managementPolicies) || has(self.forProvider.vpcConfig) || (has(self.initProvider) && has(self.initProvider.vpcConfig))",message="spec.forProvider.vpcConfig is a required parameter"
	Spec   ServerlessClusterSpec   `json:"spec"`
	Status ServerlessClusterStatus `json:"status,omitempty"`
}

type ServerlessClusterClientAuthenticationInitParameters struct {

	// Details for client authentication using SASL. See below.
	Sasl *ServerlessClusterClientAuthenticationSaslInitParameters `json:"sasl,omitempty" tf:"sasl,omitempty"`
}

type ServerlessClusterClientAuthenticationObservation struct {

	// Details for client authentication using SASL. See below.
	Sasl *ServerlessClusterClientAuthenticationSaslObservation `json:"sasl,omitempty" tf:"sasl,omitempty"`
}

type ServerlessClusterClientAuthenticationParameters struct {

	// Details for client authentication using SASL. See below.
	// +kubebuilder:validation:Optional
	Sasl *ServerlessClusterClientAuthenticationSaslParameters `json:"sasl" tf:"sasl,omitempty"`
}

type ServerlessClusterClientAuthenticationSaslInitParameters struct {

	// Details for client authentication using IAM. See below.
	IAM *IAMInitParameters `json:"iam,omitempty" tf:"iam,omitempty"`
}

type ServerlessClusterClientAuthenticationSaslObservation struct {

	// Details for client authentication using IAM. See below.
	IAM *IAMObservation `json:"iam,omitempty" tf:"iam,omitempty"`
}

type ServerlessClusterClientAuthenticationSaslParameters struct {

	// Details for client authentication using IAM. See below.
	// +kubebuilder:validation:Optional
	IAM *IAMParameters `json:"iam" tf:"iam,omitempty"`
}

type ServerlessClusterInitParameters struct {

	// Specifies client authentication information for the serverless cluster. See below.
	ClientAuthentication *ServerlessClusterClientAuthenticationInitParameters `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`

	// The name of the serverless cluster.
	ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`

	// Key-value map of resource tags.
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// VPC configuration information. See below.
	VPCConfig []VPCConfigInitParameters `json:"vpcConfig,omitempty" tf:"vpc_config,omitempty"`
}

type ServerlessClusterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []ServerlessCluster `json:"items"`
}

type ServerlessClusterObservation struct {

	// The ARN of the serverless cluster.
	Arn *string `json:"arn,omitempty" tf:"arn,omitempty"`

	// Specifies client authentication information for the serverless cluster. See below.
	ClientAuthentication *ServerlessClusterClientAuthenticationObservation `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`

	// The name of the serverless cluster.
	ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`

	// UUID of the serverless cluster, for use in IAM policies.
	ClusterUUID *string `json:"clusterUuid,omitempty" tf:"cluster_uuid,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Key-value map of resource tags.
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.
	// +mapType=granular
	TagsAll map[string]*string `json:"tagsAll,omitempty" tf:"tags_all,omitempty"`

	// VPC configuration information. See below.
	VPCConfig []VPCConfigObservation `json:"vpcConfig,omitempty" tf:"vpc_config,omitempty"`
}

type ServerlessClusterParameters struct {

	// Specifies client authentication information for the serverless cluster. See below.
	// +kubebuilder:validation:Optional
	ClientAuthentication *ServerlessClusterClientAuthenticationParameters `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`

	// The name of the serverless cluster.
	// +kubebuilder:validation:Optional
	ClusterName *string `json:"clusterName,omitempty" tf:"cluster_name,omitempty"`

	// Region is the region you'd like your resource to be created in.
	// +upjet:crd:field:TFTag=-
	// +kubebuilder:validation:Required
	Region *string `json:"region" tf:"-"`

	// Key-value map of resource tags.
	// +kubebuilder:validation:Optional
	// +mapType=granular
	Tags map[string]*string `json:"tags,omitempty" tf:"tags,omitempty"`

	// VPC configuration information. See below.
	// +kubebuilder:validation:Optional
	VPCConfig []VPCConfigParameters `json:"vpcConfig,omitempty" tf:"vpc_config,omitempty"`
}

type ServerlessClusterSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     ServerlessClusterParameters `json:"forProvider"`
	// THIS IS A BETA FIELD. It will be honored
	// unless the Management Policies feature flag is disabled.
	// InitProvider holds the same fields as ForProvider, with the exception
	// of Identifier and other resource reference fields. The fields that are
	// in InitProvider are merged into ForProvider when the resource is created.
	// The same fields are also added to the terraform ignore_changes hook, to
	// avoid updating them after creation. This is useful for fields that are
	// required on creation, but we do not desire to update them after creation,
	// for example because of an external controller is managing them, like an
	// autoscaler.
	InitProvider ServerlessClusterInitParameters `json:"initProvider,omitempty"`
}

type ServerlessClusterStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        ServerlessClusterObservation `json:"atProvider,omitempty"`
}

type StorageInfoInitParameters struct {

	// A block that contains EBS volume information. See below.
	EBSStorageInfo []EBSStorageInfoInitParameters `json:"ebsStorageInfo,omitempty" tf:"ebs_storage_info,omitempty"`
}

type StorageInfoObservation struct {

	// A block that contains EBS volume information. See below.
	EBSStorageInfo []EBSStorageInfoObservation `json:"ebsStorageInfo,omitempty" tf:"ebs_storage_info,omitempty"`
}

type StorageInfoParameters struct {

	// A block that contains EBS volume information. See below.
	// +kubebuilder:validation:Optional
	EBSStorageInfo []EBSStorageInfoParameters `json:"ebsStorageInfo,omitempty" tf:"ebs_storage_info,omitempty"`
}

type TLSInitParameters struct {

	// List of ACM Certificate Authority Amazon Resource Names (ARNs).
	// +listType=set
	CertificateAuthorityArns []*string `json:"certificateAuthorityArns,omitempty" tf:"certificate_authority_arns,omitempty"`
}

type TLSObservation struct {

	// List of ACM Certificate Authority Amazon Resource Names (ARNs).
	// +listType=set
	CertificateAuthorityArns []*string `json:"certificateAuthorityArns,omitempty" tf:"certificate_authority_arns,omitempty"`
}

type TLSParameters struct {

	// List of ACM Certificate Authority Amazon Resource Names (ARNs).
	// +kubebuilder:validation:Optional
	// +listType=set
	CertificateAuthorityArns []*string `json:"certificateAuthorityArns,omitempty" tf:"certificate_authority_arns,omitempty"`
}

type VPCConfigInitParameters struct {

	// References to SecurityGroup in ec2 to populate securityGroupIds.
	// +kubebuilder:validation:Optional
	SecurityGroupIDRefs []v1.Reference `json:"securityGroupIdRefs,omitempty" tf:"-"`

	// Selector for a list of SecurityGroup in ec2 to populate securityGroupIds.
	// +kubebuilder:validation:Optional
	SecurityGroupIDSelector *v1.Selector `json:"securityGroupIdSelector,omitempty" tf:"-"`

	// Specifies up to five security groups that control inbound and outbound traffic for the serverless cluster.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.SecurityGroup
	// +crossplane:generate:reference:refFieldName=SecurityGroupIDRefs
	// +crossplane:generate:reference:selectorFieldName=SecurityGroupIDSelector
	// +listType=set
	SecurityGroupIds []*string `json:"securityGroupIds,omitempty" tf:"security_group_ids,omitempty"`

	// References to Subnet in ec2 to populate subnetIds.
	// +kubebuilder:validation:Optional
	SubnetIDRefs []v1.Reference `json:"subnetIdRefs,omitempty" tf:"-"`

	// Selector for a list of Subnet in ec2 to populate subnetIds.
	// +kubebuilder:validation:Optional
	SubnetIDSelector *v1.Selector `json:"subnetIdSelector,omitempty" tf:"-"`

	// A list of subnets in at least two different Availability Zones that host your client applications.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.Subnet
	// +crossplane:generate:reference:refFieldName=SubnetIDRefs
	// +crossplane:generate:reference:selectorFieldName=SubnetIDSelector
	// +listType=set
	SubnetIds []*string `json:"subnetIds,omitempty" tf:"subnet_ids,omitempty"`
}

type VPCConfigObservation struct {

	// Specifies up to five security groups that control inbound and outbound traffic for the serverless cluster.
	// +listType=set
	SecurityGroupIds []*string `json:"securityGroupIds,omitempty" tf:"security_group_ids,omitempty"`

	// A list of subnets in at least two different Availability Zones that host your client applications.
	// +listType=set
	SubnetIds []*string `json:"subnetIds,omitempty" tf:"subnet_ids,omitempty"`
}

type VPCConfigParameters struct {

	// References to SecurityGroup in ec2 to populate securityGroupIds.
	// +kubebuilder:validation:Optional
	SecurityGroupIDRefs []v1.Reference `json:"securityGroupIdRefs,omitempty" tf:"-"`

	// Selector for a list of SecurityGroup in ec2 to populate securityGroupIds.
	// +kubebuilder:validation:Optional
	SecurityGroupIDSelector *v1.Selector `json:"securityGroupIdSelector,omitempty" tf:"-"`

	// Specifies up to five security groups that control inbound and outbound traffic for the serverless cluster.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.SecurityGroup
	// +crossplane:generate:reference:refFieldName=SecurityGroupIDRefs
	// +crossplane:generate:reference:selectorFieldName=SecurityGroupIDSelector
	// +kubebuilder:validation:Optional
	// +listType=set
	SecurityGroupIds []*string `json:"securityGroupIds,omitempty" tf:"security_group_ids,omitempty"`

	// References to Subnet in ec2 to populate subnetIds.
	// +kubebuilder:validation:Optional
	SubnetIDRefs []v1.Reference `json:"subnetIdRefs,omitempty" tf:"-"`

	// Selector for a list of Subnet in ec2 to populate subnetIds.
	// +kubebuilder:validation:Optional
	SubnetIDSelector *v1.Selector `json:"subnetIdSelector,omitempty" tf:"-"`

	// A list of subnets in at least two different Availability Zones that host your client applications.
	// +crossplane:generate:reference:type=github.com/upbound/provider-aws/apis/ec2/v1beta1.Subnet
	// +crossplane:generate:reference:refFieldName=SubnetIDRefs
	// +crossplane:generate:reference:selectorFieldName=SubnetIDSelector
	// +kubebuilder:validation:Optional
	// +listType=set
	SubnetIds []*string `json:"subnetIds,omitempty" tf:"subnet_ids,omitempty"`
}

type VPCConnectivityInitParameters struct {

	// Configuration block for specifying a client authentication. See below.
	ClientAuthentication []ClientAuthenticationInitParameters `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`
}

type VPCConnectivityObservation struct {

	// Configuration block for specifying a client authentication. See below.
	ClientAuthentication []ClientAuthenticationObservation `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`
}

type VPCConnectivityParameters struct {

	// Configuration block for specifying a client authentication. See below.
	// +kubebuilder:validation:Optional
	ClientAuthentication []ClientAuthenticationParameters `json:"clientAuthentication,omitempty" tf:"client_authentication,omitempty"`
}