aws.dms.ReplicationInstance

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

// Database Migration Service requires the below IAM Roles to be created before
// replication instances can be created. See the DMS Documentation for
// additional information: https://docs.aws.amazon.com/dms/latest/userguide/security-iam.html#CHAP_Security.APIRole
//  * dms-vpc-role
//  * dms-cloudwatch-logs-role
//  * dms-access-for-endpoint
const dmsAssumeRole = aws.iam.getPolicyDocument({
    statements: [{
        actions: ["sts:AssumeRole"],
        principals: [{
            identifiers: ["dms.amazonaws.com"],
            type: "Service",
        }],
    }],
});
const dms_access_for_endpoint = new aws.iam.Role("dms-access-for-endpoint", {
    assumeRolePolicy: dmsAssumeRole.then(dmsAssumeRole => dmsAssumeRole.json),
    name: "dms-access-for-endpoint",
});
const dms_access_for_endpoint_AmazonDMSRedshiftS3Role = new aws.iam.RolePolicyAttachment("dms-access-for-endpoint-AmazonDMSRedshiftS3Role", {
    policyArn: "arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role",
    role: dms_access_for_endpoint.name,
});
const dms_cloudwatch_logs_role = new aws.iam.Role("dms-cloudwatch-logs-role", {
    assumeRolePolicy: dmsAssumeRole.then(dmsAssumeRole => dmsAssumeRole.json),
    name: "dms-cloudwatch-logs-role",
});
const dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole = new aws.iam.RolePolicyAttachment("dms-cloudwatch-logs-role-AmazonDMSCloudWatchLogsRole", {
    policyArn: "arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole",
    role: dms_cloudwatch_logs_role.name,
});
const dms_vpc_role = new aws.iam.Role("dms-vpc-role", {
    assumeRolePolicy: dmsAssumeRole.then(dmsAssumeRole => dmsAssumeRole.json),
    name: "dms-vpc-role",
});
const dms_vpc_role_AmazonDMSVPCManagementRole = new aws.iam.RolePolicyAttachment("dms-vpc-role-AmazonDMSVPCManagementRole", {
    policyArn: "arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole",
    role: dms_vpc_role.name,
});
// Create a new replication instance
const test = new aws.dms.ReplicationInstance("test", {
    allocatedStorage: 20,
    applyImmediately: true,
    autoMinorVersionUpgrade: true,
    availabilityZone: "us-west-2c",
    engineVersion: "3.1.4",
    kmsKeyArn: "arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012",
    multiAz: false,
    preferredMaintenanceWindow: "sun:10:30-sun:14:30",
    publiclyAccessible: true,
    replicationInstanceClass: "dms.t3.micro",
    replicationInstanceId: "test-dms-replication-instance-tf",
    replicationSubnetGroupId: test_dms_replication_subnet_group_tf.id,
    tags: {
        Name: "test",
    },
    vpcSecurityGroupIds: ["sg-12345678"],
}, {
    dependsOn: [
        dms_access_for_endpoint_AmazonDMSRedshiftS3Role,
        dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole,
        dms_vpc_role_AmazonDMSVPCManagementRole,
    ],
});

import pulumi
import pulumi_aws as aws

# Database Migration Service requires the below IAM Roles to be created before
# replication instances can be created. See the DMS Documentation for
# additional information: https://docs.aws.amazon.com/dms/latest/userguide/security-iam.html#CHAP_Security.APIRole
#  * dms-vpc-role
#  * dms-cloudwatch-logs-role
#  * dms-access-for-endpoint
dms_assume_role = aws.iam.get_policy_document(statements=[{
    "actions": ["sts:AssumeRole"],
    "principals": [{
        "identifiers": ["dms.amazonaws.com"],
        "type": "Service",
    }],
}])
dms_access_for_endpoint = aws.iam.Role("dms-access-for-endpoint",
    assume_role_policy=dms_assume_role.json,
    name="dms-access-for-endpoint")
dms_access_for_endpoint__amazon_dms_redshift_s3_role = aws.iam.RolePolicyAttachment("dms-access-for-endpoint-AmazonDMSRedshiftS3Role",
    policy_arn="arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role",
    role=dms_access_for_endpoint.name)
dms_cloudwatch_logs_role = aws.iam.Role("dms-cloudwatch-logs-role",
    assume_role_policy=dms_assume_role.json,
    name="dms-cloudwatch-logs-role")
dms_cloudwatch_logs_role__amazon_dms_cloud_watch_logs_role = aws.iam.RolePolicyAttachment("dms-cloudwatch-logs-role-AmazonDMSCloudWatchLogsRole",
    policy_arn="arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole",
    role=dms_cloudwatch_logs_role.name)
dms_vpc_role = aws.iam.Role("dms-vpc-role",
    assume_role_policy=dms_assume_role.json,
    name="dms-vpc-role")
dms_vpc_role__amazon_dmsvpc_management_role = aws.iam.RolePolicyAttachment("dms-vpc-role-AmazonDMSVPCManagementRole",
    policy_arn="arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole",
    role=dms_vpc_role.name)
# Create a new replication instance
test = aws.dms.ReplicationInstance("test",
    allocated_storage=20,
    apply_immediately=True,
    auto_minor_version_upgrade=True,
    availability_zone="us-west-2c",
    engine_version="3.1.4",
    kms_key_arn="arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012",
    multi_az=False,
    preferred_maintenance_window="sun:10:30-sun:14:30",
    publicly_accessible=True,
    replication_instance_class="dms.t3.micro",
    replication_instance_id="test-dms-replication-instance-tf",
    replication_subnet_group_id=test_dms_replication_subnet_group_tf["id"],
    tags={
        "Name": "test",
    },
    vpc_security_group_ids=["sg-12345678"],
    opts = pulumi.ResourceOptions(depends_on=[
            dms_access_for_endpoint__amazon_dms_redshift_s3_role,
            dms_cloudwatch_logs_role__amazon_dms_cloud_watch_logs_role,
            dms_vpc_role__amazon_dmsvpc_management_role,
        ]))

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/dms"
	"github.com/pulumi/pulumi-aws/sdk/v7/go/aws/iam"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		// Database Migration Service requires the below IAM Roles to be created before
		// replication instances can be created. See the DMS Documentation for
		// additional information: https://docs.aws.amazon.com/dms/latest/userguide/security-iam.html#CHAP_Security.APIRole
		//   - dms-vpc-role
		//   - dms-cloudwatch-logs-role
		//   - dms-access-for-endpoint
		dmsAssumeRole, err := iam.GetPolicyDocument(ctx, &iam.GetPolicyDocumentArgs{
			Statements: []iam.GetPolicyDocumentStatement{
				{
					Actions: []string{
						"sts:AssumeRole",
					},
					Principals: []iam.GetPolicyDocumentStatementPrincipal{
						{
							Identifiers: []string{
								"dms.amazonaws.com",
							},
							Type: "Service",
						},
					},
				},
			},
		}, nil)
		if err != nil {
			return err
		}
		dms_access_for_endpoint, err := iam.NewRole(ctx, "dms-access-for-endpoint", &iam.RoleArgs{
			AssumeRolePolicy: pulumi.String(dmsAssumeRole.Json),
			Name:             pulumi.String("dms-access-for-endpoint"),
		})
		if err != nil {
			return err
		}
		dms_access_for_endpoint_AmazonDMSRedshiftS3Role, err := iam.NewRolePolicyAttachment(ctx, "dms-access-for-endpoint-AmazonDMSRedshiftS3Role", &iam.RolePolicyAttachmentArgs{
			PolicyArn: pulumi.String("arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role"),
			Role:      dms_access_for_endpoint.Name,
		})
		if err != nil {
			return err
		}
		dms_cloudwatch_logs_role, err := iam.NewRole(ctx, "dms-cloudwatch-logs-role", &iam.RoleArgs{
			AssumeRolePolicy: pulumi.String(dmsAssumeRole.Json),
			Name:             pulumi.String("dms-cloudwatch-logs-role"),
		})
		if err != nil {
			return err
		}
		dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole, err := iam.NewRolePolicyAttachment(ctx, "dms-cloudwatch-logs-role-AmazonDMSCloudWatchLogsRole", &iam.RolePolicyAttachmentArgs{
			PolicyArn: pulumi.String("arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole"),
			Role:      dms_cloudwatch_logs_role.Name,
		})
		if err != nil {
			return err
		}
		dms_vpc_role, err := iam.NewRole(ctx, "dms-vpc-role", &iam.RoleArgs{
			AssumeRolePolicy: pulumi.String(dmsAssumeRole.Json),
			Name:             pulumi.String("dms-vpc-role"),
		})
		if err != nil {
			return err
		}
		dms_vpc_role_AmazonDMSVPCManagementRole, err := iam.NewRolePolicyAttachment(ctx, "dms-vpc-role-AmazonDMSVPCManagementRole", &iam.RolePolicyAttachmentArgs{
			PolicyArn: pulumi.String("arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole"),
			Role:      dms_vpc_role.Name,
		})
		if err != nil {
			return err
		}
		// Create a new replication instance
		_, err = dms.NewReplicationInstance(ctx, "test", &dms.ReplicationInstanceArgs{
			AllocatedStorage:           pulumi.Int(20),
			ApplyImmediately:           pulumi.Bool(true),
			AutoMinorVersionUpgrade:    pulumi.Bool(true),
			AvailabilityZone:           pulumi.String("us-west-2c"),
			EngineVersion:              pulumi.String("3.1.4"),
			KmsKeyArn:                  pulumi.String("arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012"),
			MultiAz:                    pulumi.Bool(false),
			PreferredMaintenanceWindow: pulumi.String("sun:10:30-sun:14:30"),
			PubliclyAccessible:         pulumi.Bool(true),
			ReplicationInstanceClass:   pulumi.String("dms.t3.micro"),
			ReplicationInstanceId:      pulumi.String("test-dms-replication-instance-tf"),
			ReplicationSubnetGroupId:   pulumi.Any(test_dms_replication_subnet_group_tf.Id),
			Tags: pulumi.StringMap{
				"Name": pulumi.String("test"),
			},
			VpcSecurityGroupIds: pulumi.StringArray{
				pulumi.String("sg-12345678"),
			},
		}, pulumi.DependsOn([]pulumi.Resource{
			dms_access_for_endpoint_AmazonDMSRedshiftS3Role,
			dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole,
			dms_vpc_role_AmazonDMSVPCManagementRole,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    // Database Migration Service requires the below IAM Roles to be created before
    // replication instances can be created. See the DMS Documentation for
    // additional information: https://docs.aws.amazon.com/dms/latest/userguide/security-iam.html#CHAP_Security.APIRole
    //  * dms-vpc-role
    //  * dms-cloudwatch-logs-role
    //  * dms-access-for-endpoint
    var dmsAssumeRole = Aws.Iam.GetPolicyDocument.Invoke(new()
    {
        Statements = new[]
        {
            new Aws.Iam.Inputs.GetPolicyDocumentStatementInputArgs
            {
                Actions = new[]
                {
                    "sts:AssumeRole",
                },
                Principals = new[]
                {
                    new Aws.Iam.Inputs.GetPolicyDocumentStatementPrincipalInputArgs
                    {
                        Identifiers = new[]
                        {
                            "dms.amazonaws.com",
                        },
                        Type = "Service",
                    },
                },
            },
        },
    });

    var dms_access_for_endpoint = new Aws.Iam.Role("dms-access-for-endpoint", new()
    {
        AssumeRolePolicy = dmsAssumeRole.Apply(getPolicyDocumentResult => getPolicyDocumentResult.Json),
        Name = "dms-access-for-endpoint",
    });

    var dms_access_for_endpoint_AmazonDMSRedshiftS3Role = new Aws.Iam.RolePolicyAttachment("dms-access-for-endpoint-AmazonDMSRedshiftS3Role", new()
    {
        PolicyArn = "arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role",
        Role = dms_access_for_endpoint.Name,
    });

    var dms_cloudwatch_logs_role = new Aws.Iam.Role("dms-cloudwatch-logs-role", new()
    {
        AssumeRolePolicy = dmsAssumeRole.Apply(getPolicyDocumentResult => getPolicyDocumentResult.Json),
        Name = "dms-cloudwatch-logs-role",
    });

    var dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole = new Aws.Iam.RolePolicyAttachment("dms-cloudwatch-logs-role-AmazonDMSCloudWatchLogsRole", new()
    {
        PolicyArn = "arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole",
        Role = dms_cloudwatch_logs_role.Name,
    });

    var dms_vpc_role = new Aws.Iam.Role("dms-vpc-role", new()
    {
        AssumeRolePolicy = dmsAssumeRole.Apply(getPolicyDocumentResult => getPolicyDocumentResult.Json),
        Name = "dms-vpc-role",
    });

    var dms_vpc_role_AmazonDMSVPCManagementRole = new Aws.Iam.RolePolicyAttachment("dms-vpc-role-AmazonDMSVPCManagementRole", new()
    {
        PolicyArn = "arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole",
        Role = dms_vpc_role.Name,
    });

    // Create a new replication instance
    var test = new Aws.Dms.ReplicationInstance("test", new()
    {
        AllocatedStorage = 20,
        ApplyImmediately = true,
        AutoMinorVersionUpgrade = true,
        AvailabilityZone = "us-west-2c",
        EngineVersion = "3.1.4",
        KmsKeyArn = "arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012",
        MultiAz = false,
        PreferredMaintenanceWindow = "sun:10:30-sun:14:30",
        PubliclyAccessible = true,
        ReplicationInstanceClass = "dms.t3.micro",
        ReplicationInstanceId = "test-dms-replication-instance-tf",
        ReplicationSubnetGroupId = test_dms_replication_subnet_group_tf.Id,
        Tags = 
        {
            { "Name", "test" },
        },
        VpcSecurityGroupIds = new[]
        {
            "sg-12345678",
        },
    }, new CustomResourceOptions
    {
        DependsOn =
        {
            dms_access_for_endpoint_AmazonDMSRedshiftS3Role,
            dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole,
            dms_vpc_role_AmazonDMSVPCManagementRole,
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.IamFunctions;
import com.pulumi.aws.iam.inputs.GetPolicyDocumentArgs;
import com.pulumi.aws.iam.Role;
import com.pulumi.aws.iam.RoleArgs;
import com.pulumi.aws.iam.RolePolicyAttachment;
import com.pulumi.aws.iam.RolePolicyAttachmentArgs;
import com.pulumi.aws.dms.ReplicationInstance;
import com.pulumi.aws.dms.ReplicationInstanceArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        // Database Migration Service requires the below IAM Roles to be created before
        // replication instances can be created. See the DMS Documentation for
        // additional information: https://docs.aws.amazon.com/dms/latest/userguide/security-iam.html#CHAP_Security.APIRole
        //  * dms-vpc-role
        //  * dms-cloudwatch-logs-role
        //  * dms-access-for-endpoint
        final var dmsAssumeRole = IamFunctions.getPolicyDocument(GetPolicyDocumentArgs.builder()
            .statements(GetPolicyDocumentStatementArgs.builder()
                .actions("sts:AssumeRole")
                .principals(GetPolicyDocumentStatementPrincipalArgs.builder()
                    .identifiers("dms.amazonaws.com")
                    .type("Service")
                    .build())
                .build())
            .build());

        var dms_access_for_endpoint = new Role("dms-access-for-endpoint", RoleArgs.builder()
            .assumeRolePolicy(dmsAssumeRole.json())
            .name("dms-access-for-endpoint")
            .build());

        var dms_access_for_endpoint_AmazonDMSRedshiftS3Role = new RolePolicyAttachment("dms-access-for-endpoint-AmazonDMSRedshiftS3Role", RolePolicyAttachmentArgs.builder()
            .policyArn("arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role")
            .role(dms_access_for_endpoint.name())
            .build());

        var dms_cloudwatch_logs_role = new Role("dms-cloudwatch-logs-role", RoleArgs.builder()
            .assumeRolePolicy(dmsAssumeRole.json())
            .name("dms-cloudwatch-logs-role")
            .build());

        var dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole = new RolePolicyAttachment("dms-cloudwatch-logs-role-AmazonDMSCloudWatchLogsRole", RolePolicyAttachmentArgs.builder()
            .policyArn("arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole")
            .role(dms_cloudwatch_logs_role.name())
            .build());

        var dms_vpc_role = new Role("dms-vpc-role", RoleArgs.builder()
            .assumeRolePolicy(dmsAssumeRole.json())
            .name("dms-vpc-role")
            .build());

        var dms_vpc_role_AmazonDMSVPCManagementRole = new RolePolicyAttachment("dms-vpc-role-AmazonDMSVPCManagementRole", RolePolicyAttachmentArgs.builder()
            .policyArn("arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole")
            .role(dms_vpc_role.name())
            .build());

        // Create a new replication instance
        var test = new ReplicationInstance("test", ReplicationInstanceArgs.builder()
            .allocatedStorage(20)
            .applyImmediately(true)
            .autoMinorVersionUpgrade(true)
            .availabilityZone("us-west-2c")
            .engineVersion("3.1.4")
            .kmsKeyArn("arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012")
            .multiAz(false)
            .preferredMaintenanceWindow("sun:10:30-sun:14:30")
            .publiclyAccessible(true)
            .replicationInstanceClass("dms.t3.micro")
            .replicationInstanceId("test-dms-replication-instance-tf")
            .replicationSubnetGroupId(test_dms_replication_subnet_group_tf.id())
            .tags(Map.of("Name", "test"))
            .vpcSecurityGroupIds("sg-12345678")
            .build(), CustomResourceOptions.builder()
                .dependsOn(                
                    dms_access_for_endpoint_AmazonDMSRedshiftS3Role,
                    dms_cloudwatch_logs_role_AmazonDMSCloudWatchLogsRole,
                    dms_vpc_role_AmazonDMSVPCManagementRole)
                .build());

    }
}

resources:
  dms-access-for-endpoint:
    type: aws:iam:Role
    properties:
      assumeRolePolicy: ${dmsAssumeRole.json}
      name: dms-access-for-endpoint
  dms-access-for-endpoint-AmazonDMSRedshiftS3Role:
    type: aws:iam:RolePolicyAttachment
    properties:
      policyArn: arn:aws:iam::aws:policy/service-role/AmazonDMSRedshiftS3Role
      role: ${["dms-access-for-endpoint"].name}
  dms-cloudwatch-logs-role:
    type: aws:iam:Role
    properties:
      assumeRolePolicy: ${dmsAssumeRole.json}
      name: dms-cloudwatch-logs-role
  dms-cloudwatch-logs-role-AmazonDMSCloudWatchLogsRole:
    type: aws:iam:RolePolicyAttachment
    properties:
      policyArn: arn:aws:iam::aws:policy/service-role/AmazonDMSCloudWatchLogsRole
      role: ${["dms-cloudwatch-logs-role"].name}
  dms-vpc-role:
    type: aws:iam:Role
    properties:
      assumeRolePolicy: ${dmsAssumeRole.json}
      name: dms-vpc-role
  dms-vpc-role-AmazonDMSVPCManagementRole:
    type: aws:iam:RolePolicyAttachment
    properties:
      policyArn: arn:aws:iam::aws:policy/service-role/AmazonDMSVPCManagementRole
      role: ${["dms-vpc-role"].name}
  # Create a new replication instance
  test:
    type: aws:dms:ReplicationInstance
    properties:
      allocatedStorage: 20
      applyImmediately: true
      autoMinorVersionUpgrade: true
      availabilityZone: us-west-2c
      engineVersion: 3.1.4
      kmsKeyArn: arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
      multiAz: false
      preferredMaintenanceWindow: sun:10:30-sun:14:30
      publiclyAccessible: true
      replicationInstanceClass: dms.t3.micro
      replicationInstanceId: test-dms-replication-instance-tf
      replicationSubnetGroupId: ${["test-dms-replication-subnet-group-tf"].id}
      tags:
        Name: test
      vpcSecurityGroupIds:
        - sg-12345678
    options:
      dependsOn:
        - ${["dms-access-for-endpoint-AmazonDMSRedshiftS3Role"]}
        - ${["dms-cloudwatch-logs-role-AmazonDMSCloudWatchLogsRole"]}
        - ${["dms-vpc-role-AmazonDMSVPCManagementRole"]}
variables:
  # Database Migration Service requires the below IAM Roles to be created before
  # replication instances can be created. See the DMS Documentation for
  # additional information: https://docs.aws.amazon.com/dms/latest/userguide/security-iam.html#CHAP_Security.APIRole
  #  * dms-vpc-role
  #  * dms-cloudwatch-logs-role
  #  * dms-access-for-endpoint
  dmsAssumeRole:
    fn::invoke:
      function: aws:iam:getPolicyDocument
      arguments:
        statements:
          - actions:
              - sts:AssumeRole
            principals:
              - identifiers:
                  - dms.amazonaws.com
                type: Service

var replicationInstanceResource = new Aws.Dms.ReplicationInstance("replicationInstanceResource", new()
{
    ReplicationInstanceClass = "string",
    ReplicationInstanceId = "string",
    KmsKeyArn = "string",
    PreferredMaintenanceWindow = "string",
    AvailabilityZone = "string",
    DnsNameServers = "string",
    EngineVersion = "string",
    KerberosAuthenticationSettings = new Aws.Dms.Inputs.ReplicationInstanceKerberosAuthenticationSettingsArgs
    {
        KeyCacheSecretIamArn = "string",
        KeyCacheSecretId = "string",
        Krb5FileContents = "string",
    },
    AllocatedStorage = 0,
    MultiAz = false,
    NetworkType = "string",
    AutoMinorVersionUpgrade = false,
    PubliclyAccessible = false,
    Region = "string",
    ApplyImmediately = false,
    AllowMajorVersionUpgrade = false,
    ReplicationSubnetGroupId = "string",
    Tags = 
    {
        { "string", "string" },
    },
    VpcSecurityGroupIds = new[]
    {
        "string",
    },
});

example, err := dms.NewReplicationInstance(ctx, "replicationInstanceResource", &dms.ReplicationInstanceArgs{
	ReplicationInstanceClass:   pulumi.String("string"),
	ReplicationInstanceId:      pulumi.String("string"),
	KmsKeyArn:                  pulumi.String("string"),
	PreferredMaintenanceWindow: pulumi.String("string"),
	AvailabilityZone:           pulumi.String("string"),
	DnsNameServers:             pulumi.String("string"),
	EngineVersion:              pulumi.String("string"),
	KerberosAuthenticationSettings: &dms.ReplicationInstanceKerberosAuthenticationSettingsArgs{
		KeyCacheSecretIamArn: pulumi.String("string"),
		KeyCacheSecretId:     pulumi.String("string"),
		Krb5FileContents:     pulumi.String("string"),
	},
	AllocatedStorage:         pulumi.Int(0),
	MultiAz:                  pulumi.Bool(false),
	NetworkType:              pulumi.String("string"),
	AutoMinorVersionUpgrade:  pulumi.Bool(false),
	PubliclyAccessible:       pulumi.Bool(false),
	Region:                   pulumi.String("string"),
	ApplyImmediately:         pulumi.Bool(false),
	AllowMajorVersionUpgrade: pulumi.Bool(false),
	ReplicationSubnetGroupId: pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	VpcSecurityGroupIds: pulumi.StringArray{
		pulumi.String("string"),
	},
})

var replicationInstanceResource = new ReplicationInstance("replicationInstanceResource", ReplicationInstanceArgs.builder()
    .replicationInstanceClass("string")
    .replicationInstanceId("string")
    .kmsKeyArn("string")
    .preferredMaintenanceWindow("string")
    .availabilityZone("string")
    .dnsNameServers("string")
    .engineVersion("string")
    .kerberosAuthenticationSettings(ReplicationInstanceKerberosAuthenticationSettingsArgs.builder()
        .keyCacheSecretIamArn("string")
        .keyCacheSecretId("string")
        .krb5FileContents("string")
        .build())
    .allocatedStorage(0)
    .multiAz(false)
    .networkType("string")
    .autoMinorVersionUpgrade(false)
    .publiclyAccessible(false)
    .region("string")
    .applyImmediately(false)
    .allowMajorVersionUpgrade(false)
    .replicationSubnetGroupId("string")
    .tags(Map.of("string", "string"))
    .vpcSecurityGroupIds("string")
    .build());

replication_instance_resource = aws.dms.ReplicationInstance("replicationInstanceResource",
    replication_instance_class="string",
    replication_instance_id="string",
    kms_key_arn="string",
    preferred_maintenance_window="string",
    availability_zone="string",
    dns_name_servers="string",
    engine_version="string",
    kerberos_authentication_settings={
        "key_cache_secret_iam_arn": "string",
        "key_cache_secret_id": "string",
        "krb5_file_contents": "string",
    },
    allocated_storage=0,
    multi_az=False,
    network_type="string",
    auto_minor_version_upgrade=False,
    publicly_accessible=False,
    region="string",
    apply_immediately=False,
    allow_major_version_upgrade=False,
    replication_subnet_group_id="string",
    tags={
        "string": "string",
    },
    vpc_security_group_ids=["string"])

const replicationInstanceResource = new aws.dms.ReplicationInstance("replicationInstanceResource", {
    replicationInstanceClass: "string",
    replicationInstanceId: "string",
    kmsKeyArn: "string",
    preferredMaintenanceWindow: "string",
    availabilityZone: "string",
    dnsNameServers: "string",
    engineVersion: "string",
    kerberosAuthenticationSettings: {
        keyCacheSecretIamArn: "string",
        keyCacheSecretId: "string",
        krb5FileContents: "string",
    },
    allocatedStorage: 0,
    multiAz: false,
    networkType: "string",
    autoMinorVersionUpgrade: false,
    publiclyAccessible: false,
    region: "string",
    applyImmediately: false,
    allowMajorVersionUpgrade: false,
    replicationSubnetGroupId: "string",
    tags: {
        string: "string",
    },
    vpcSecurityGroupIds: ["string"],
});

type: aws:dms:ReplicationInstance
properties:
    allocatedStorage: 0
    allowMajorVersionUpgrade: false
    applyImmediately: false
    autoMinorVersionUpgrade: false
    availabilityZone: string
    dnsNameServers: string
    engineVersion: string
    kerberosAuthenticationSettings:
        keyCacheSecretIamArn: string
        keyCacheSecretId: string
        krb5FileContents: string
    kmsKeyArn: string
    multiAz: false
    networkType: string
    preferredMaintenanceWindow: string
    publiclyAccessible: false
    region: string
    replicationInstanceClass: string
    replicationInstanceId: string
    replicationSubnetGroupId: string
    tags:
        string: string
    vpcSecurityGroupIds:
        - string