{
 "additionalProperties": false,
 "createOnlyProperties": [
  "/properties/AdditionalEncryptionContext",
  "/properties/CustomerManagedKey"
 ],
 "definitions": {
  "EncryptionContextMap": {
   "additionalProperties": false,
   "patternProperties": {
    "^[\\s\\S]*$": {
     "maxLength": 131072,
     "minLength": 0,
     "pattern": "^[\\s\\S]*$",
     "type": "string"
    }
   },
   "type": "object"
  },
  "IpRule": {
   "additionalProperties": false,
   "properties": {
    "Description": {
     "maxLength": 256,
     "minLength": 1,
     "pattern": "^.+$",
     "type": "string"
    },
    "IpRange": {
     "pattern": "^\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}(?:/([0-9]|[12][0-9]|3[0-2])|)$",
     "type": "string"
    }
   },
   "required": [
    "IpRange"
   ],
   "type": "object"
  },
  "Tag": {
   "additionalProperties": false,
   "properties": {
    "Key": {
     "maxLength": 128,
     "minLength": 1,
     "pattern": "^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$",
     "type": "string"
    },
    "Value": {
     "maxLength": 256,
     "minLength": 0,
     "pattern": "^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$",
     "type": "string"
    }
   },
   "required": [
    "Key",
    "Value"
   ],
   "type": "object"
  }
 },
 "primaryIdentifier": [
  "/properties/IpAccessSettingsArn"
 ],
 "properties": {
  "AdditionalEncryptionContext": {
   "$ref": "#/definitions/EncryptionContextMap"
  },
  "AssociatedPortalArns": {
   "insertionOrder": false,
   "items": {
    "maxLength": 2048,
    "minLength": 20,
    "pattern": "^arn:[\\w+=\\/,.@-]+:[a-zA-Z0-9\\-]+:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:[a-zA-Z]+(\\/[a-fA-F0-9\\-]{36})+$",
    "type": "string"
   },
   "type": "array"
  },
  "CreationDate": {
   "format": "date-time",
   "type": "string"
  },
  "CustomerManagedKey": {
   "maxLength": 2048,
   "minLength": 20,
   "pattern": "^arn:[\\w+=\\/,.@-]+:kms:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:key\\/[a-zA-Z0-9-]+$",
   "type": "string"
  },
  "Description": {
   "maxLength": 256,
   "minLength": 1,
   "pattern": "^.+$",
   "type": "string"
  },
  "DisplayName": {
   "maxLength": 64,
   "minLength": 1,
   "pattern": "^.+$",
   "type": "string"
  },
  "IpAccessSettingsArn": {
   "maxLength": 2048,
   "minLength": 20,
   "pattern": "^arn:[\\w+=\\/,.@-]+:[a-zA-Z0-9\\-]+:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:[a-zA-Z]+(\\/[a-fA-F0-9\\-]{36})+$",
   "type": "string"
  },
  "IpRules": {
   "insertionOrder": false,
   "items": {
    "$ref": "#/definitions/IpRule"
   },
   "maxItems": 100,
   "minItems": 1,
   "type": "array"
  },
  "Tags": {
   "insertionOrder": false,
   "items": {
    "$ref": "#/definitions/Tag"
   },
   "maxItems": 200,
   "minItems": 0,
   "type": "array"
  }
 },
 "readOnlyProperties": [
  "/properties/AssociatedPortalArns",
  "/properties/CreationDate",
  "/properties/IpAccessSettingsArn"
 ],
 "required": [
  "IpRules"
 ],
 "tagging": {
  "cloudFormationSystemTags": false,
  "tagOnCreate": true,
  "tagProperty": "/properties/Tags",
  "tagUpdatable": true,
  "taggable": true
 },
 "typeName": "AWS::WorkSpacesWeb::IpAccessSettings"
}
