Guides

AMPLIFYBACKEND

Suggest Edits
docs.aws.amazon.com
AWS documentation

CloneBackend

valid {
    input.Body.targetEnvironmentName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateBackend

valid {
    input.Body.appId == STRING
    input.Body.appName == STRING
    input.Body.backendEnvironmentName == STRING
    input.Body.resourceConfig == {}
    input.Body.resourceName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateBackendAPI

enum_Mode := [ "API_KEY", "AWS_IAM", "AMAZON_COGNITO_USER_POOLS", "OPENID_CONNECT" ]
enum_ResolutionStrategy := [ "OPTIMISTIC_CONCURRENCY", "LAMBDA", "AUTOMERGE", "NONE" ]

valid {
    input.Body.backendEnvironmentName == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].mode == enum_Mode[_]
    input.Body.resourceConfig.additionalAuthTypes[_].settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.description == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.expirationTime == DOUBLE
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDClientId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIatTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIssueURL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDProviderName == STRING
    input.Body.resourceConfig.apiName == STRING
    input.Body.resourceConfig.conflictResolution.resolutionStrategy == enum_ResolutionStrategy[_]
    input.Body.resourceConfig.defaultAuthType.mode == enum_Mode[_]
    input.Body.resourceConfig.defaultAuthType.settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.description == STRING
    input.Body.resourceConfig.defaultAuthType.settings.expirationTime == DOUBLE
    input.Body.resourceConfig.defaultAuthType.settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDClientId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIatTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIssueURL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDProviderName == STRING
    input.Body.resourceConfig.service == STRING
    input.Body.resourceConfig.transformSchema == STRING
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateBackendAuth

enum_AdditionalConstraintsElement := [ "REQUIRE_DIGIT", "REQUIRE_LOWERCASE", "REQUIRE_SYMBOL", "REQUIRE_UPPERCASE" ]
enum_AuthResources := [ "USER_POOL_ONLY", "IDENTITY_POOL_AND_USER_POOL" ]
enum_DeliveryMethod := [ "EMAIL", "SMS" ]
enum_MFAMode := [ "ON", "OFF", "OPTIONAL" ]
enum_MfaTypesElement := [ "SMS", "TOTP" ]
enum_OAuthGrantType := [ "CODE", "IMPLICIT" ]
enum_OAuthScopesElement := [ "PHONE", "EMAIL", "OPENID", "PROFILE", "AWS_COGNITO_SIGNIN_USER_ADMIN" ]
enum_RequiredSignUpAttributesElement := [ "ADDRESS", "BIRTHDATE", "EMAIL", "FAMILY_NAME", "GENDER", "GIVEN_NAME", "LOCALE", "MIDDLE_NAME", "NAME", "NICKNAME", "PHONE_NUMBER", "PICTURE", "PREFERRED_USERNAME", "PROFILE", "UPDATED_AT", "WEBSITE", "ZONE_INFO" ]
enum_Service := [ "COGNITO" ]
enum_SignInMethod := [ "EMAIL", "EMAIL_AND_PHONE_NUMBER", "PHONE_NUMBER", "USERNAME" ]

valid {
    input.Body.backendEnvironmentName == STRING
    input.Body.resourceConfig.authResources == enum_AuthResources[_]
    input.Body.resourceConfig.identityPoolConfigs.identityPoolName == STRING
    input.Body.resourceConfig.identityPoolConfigs.unauthenticatedLogin == BOOLEAN
    input.Body.resourceConfig.service == enum_Service[_]
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.deliveryMethod == enum_DeliveryMethod[_]
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.emailSettings.emailMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.emailSettings.emailSubject == STRING
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.smsSettings.smsMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.mfa.MFAMode == enum_MFAMode[_]
    input.Body.resourceConfig.userPoolConfigs.mfa.settings.mfaTypes[_] == enum_MfaTypesElement[_]
    input.Body.resourceConfig.userPoolConfigs.mfa.settings.smsMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.domainPrefix == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.oAuthGrantType == enum_OAuthGrantType[_]
    input.Body.resourceConfig.userPoolConfigs.oAuth.oAuthScopes[_] == enum_OAuthScopesElement[_]
    input.Body.resourceConfig.userPoolConfigs.oAuth.redirectSignInURIs[_] == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.redirectSignOutURIs[_] == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Facebook.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Facebook.client_secret == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Google.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Google.client_secret == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.LoginWithAmazon.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.LoginWithAmazon.client_secret == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.key_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.private_key == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.team_id == STRING
    input.Body.resourceConfig.userPoolConfigs.passwordPolicy.additionalConstraints[_] == enum_AdditionalConstraintsElement[_]
    input.Body.resourceConfig.userPoolConfigs.passwordPolicy.minimumLength == DOUBLE
    input.Body.resourceConfig.userPoolConfigs.requiredSignUpAttributes[_] == enum_RequiredSignUpAttributesElement[_]
    input.Body.resourceConfig.userPoolConfigs.signInMethod == enum_SignInMethod[_]
    input.Body.resourceConfig.userPoolConfigs.userPoolName == STRING
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.deliveryMethod == enum_DeliveryMethod[_]
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.emailSettings.emailMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.emailSettings.emailSubject == STRING
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.smsSettings.smsMessage == STRING
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateBackendConfig

valid {
    input.Body.backendManagerAppId == STRING
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateBackendStorage

enum_AuthenticatedElement := [ "READ", "CREATE_AND_UPDATE", "DELETE" ]
enum_ServiceName := [ "S3" ]
enum_UnAuthenticatedElement := [ "READ", "CREATE_AND_UPDATE", "DELETE" ]

valid {
    input.Body.backendEnvironmentName == STRING
    input.Body.resourceConfig.bucketName == STRING
    input.Body.resourceConfig.permissions.authenticated[_] == enum_AuthenticatedElement[_]
    input.Body.resourceConfig.permissions.unAuthenticated[_] == enum_UnAuthenticatedElement[_]
    input.Body.resourceConfig.serviceName == enum_ServiceName[_]
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateToken

valid {
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteBackend

valid {
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteBackendAPI

enum_Mode := [ "API_KEY", "AWS_IAM", "AMAZON_COGNITO_USER_POOLS", "OPENID_CONNECT" ]
enum_ResolutionStrategy := [ "OPTIMISTIC_CONCURRENCY", "LAMBDA", "AUTOMERGE", "NONE" ]

valid {
    input.Body.resourceConfig.additionalAuthTypes[_].mode == enum_Mode[_]
    input.Body.resourceConfig.additionalAuthTypes[_].settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.description == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.expirationTime == DOUBLE
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDClientId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIatTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIssueURL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDProviderName == STRING
    input.Body.resourceConfig.apiName == STRING
    input.Body.resourceConfig.conflictResolution.resolutionStrategy == enum_ResolutionStrategy[_]
    input.Body.resourceConfig.defaultAuthType.mode == enum_Mode[_]
    input.Body.resourceConfig.defaultAuthType.settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.description == STRING
    input.Body.resourceConfig.defaultAuthType.settings.expirationTime == DOUBLE
    input.Body.resourceConfig.defaultAuthType.settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDClientId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIatTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIssueURL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDProviderName == STRING
    input.Body.resourceConfig.service == STRING
    input.Body.resourceConfig.transformSchema == STRING
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteBackendAuth

valid {
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteBackendStorage

enum_ServiceName := [ "S3" ]

valid {
    input.Body.resourceName == STRING
    input.Body.serviceName == enum_ServiceName[_]
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteToken

valid {
    input.ReqMap.appId == STRING
    input.ReqMap.sessionId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GenerateBackendAPIModels

valid {
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetBackend

valid {
    input.Body.backendEnvironmentName == STRING
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetBackendAPI

enum_Mode := [ "API_KEY", "AWS_IAM", "AMAZON_COGNITO_USER_POOLS", "OPENID_CONNECT" ]
enum_ResolutionStrategy := [ "OPTIMISTIC_CONCURRENCY", "LAMBDA", "AUTOMERGE", "NONE" ]

valid {
    input.Body.resourceConfig.additionalAuthTypes[_].mode == enum_Mode[_]
    input.Body.resourceConfig.additionalAuthTypes[_].settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.description == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.expirationTime == DOUBLE
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDClientId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIatTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIssueURL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDProviderName == STRING
    input.Body.resourceConfig.apiName == STRING
    input.Body.resourceConfig.conflictResolution.resolutionStrategy == enum_ResolutionStrategy[_]
    input.Body.resourceConfig.defaultAuthType.mode == enum_Mode[_]
    input.Body.resourceConfig.defaultAuthType.settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.description == STRING
    input.Body.resourceConfig.defaultAuthType.settings.expirationTime == DOUBLE
    input.Body.resourceConfig.defaultAuthType.settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDClientId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIatTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIssueURL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDProviderName == STRING
    input.Body.resourceConfig.service == STRING
    input.Body.resourceConfig.transformSchema == STRING
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetBackendAPIModels

valid {
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetBackendAuth

valid {
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetBackendJob

valid {
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ReqMap.jobId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetBackendStorage

valid {
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetToken

valid {
    input.ReqMap.appId == STRING
    input.ReqMap.sessionId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ImportBackendAuth

valid {
    input.Body.identityPoolId == STRING
    input.Body.nativeClientId == STRING
    input.Body.userPoolId == STRING
    input.Body.webClientId == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ImportBackendStorage

enum_ServiceName := [ "S3" ]

valid {
    input.Body.bucketName == STRING
    input.Body.serviceName == enum_ServiceName[_]
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListBackendJobs

valid {
    input.Body.jobId == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.operation == STRING
    input.Body.status == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListS3Buckets

valid {
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

RemoveAllBackends

valid {
    input.Body.cleanAmplifyApp == BOOLEAN
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

RemoveBackendConfig

valid {
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateBackendAPI

enum_Mode := [ "API_KEY", "AWS_IAM", "AMAZON_COGNITO_USER_POOLS", "OPENID_CONNECT" ]
enum_ResolutionStrategy := [ "OPTIMISTIC_CONCURRENCY", "LAMBDA", "AUTOMERGE", "NONE" ]

valid {
    input.Body.resourceConfig.additionalAuthTypes[_].mode == enum_Mode[_]
    input.Body.resourceConfig.additionalAuthTypes[_].settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.description == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.expirationTime == DOUBLE
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDClientId == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIatTTL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDIssueURL == STRING
    input.Body.resourceConfig.additionalAuthTypes[_].settings.openIDProviderName == STRING
    input.Body.resourceConfig.apiName == STRING
    input.Body.resourceConfig.conflictResolution.resolutionStrategy == enum_ResolutionStrategy[_]
    input.Body.resourceConfig.defaultAuthType.mode == enum_Mode[_]
    input.Body.resourceConfig.defaultAuthType.settings.cognitoUserPoolId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.description == STRING
    input.Body.resourceConfig.defaultAuthType.settings.expirationTime == DOUBLE
    input.Body.resourceConfig.defaultAuthType.settings.openIDAuthTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDClientId == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIatTTL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDIssueURL == STRING
    input.Body.resourceConfig.defaultAuthType.settings.openIDProviderName == STRING
    input.Body.resourceConfig.service == STRING
    input.Body.resourceConfig.transformSchema == STRING
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateBackendAuth

enum_AdditionalConstraintsElement := [ "REQUIRE_DIGIT", "REQUIRE_LOWERCASE", "REQUIRE_SYMBOL", "REQUIRE_UPPERCASE" ]
enum_AuthResources := [ "USER_POOL_ONLY", "IDENTITY_POOL_AND_USER_POOL" ]
enum_DeliveryMethod := [ "EMAIL", "SMS" ]
enum_MFAMode := [ "ON", "OFF", "OPTIONAL" ]
enum_MfaTypesElement := [ "SMS", "TOTP" ]
enum_OAuthGrantType := [ "CODE", "IMPLICIT" ]
enum_OAuthScopesElement := [ "PHONE", "EMAIL", "OPENID", "PROFILE", "AWS_COGNITO_SIGNIN_USER_ADMIN" ]
enum_Service := [ "COGNITO" ]

valid {
    input.Body.resourceConfig.authResources == enum_AuthResources[_]
    input.Body.resourceConfig.identityPoolConfigs.unauthenticatedLogin == BOOLEAN
    input.Body.resourceConfig.service == enum_Service[_]
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.deliveryMethod == enum_DeliveryMethod[_]
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.emailSettings.emailMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.emailSettings.emailSubject == STRING
    input.Body.resourceConfig.userPoolConfigs.forgotPassword.smsSettings.smsMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.mfa.MFAMode == enum_MFAMode[_]
    input.Body.resourceConfig.userPoolConfigs.mfa.settings.mfaTypes[_] == enum_MfaTypesElement[_]
    input.Body.resourceConfig.userPoolConfigs.mfa.settings.smsMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.domainPrefix == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.oAuthGrantType == enum_OAuthGrantType[_]
    input.Body.resourceConfig.userPoolConfigs.oAuth.oAuthScopes[_] == enum_OAuthScopesElement[_]
    input.Body.resourceConfig.userPoolConfigs.oAuth.redirectSignInURIs[_] == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.redirectSignOutURIs[_] == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Facebook.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Facebook.client_secret == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Google.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.Google.client_secret == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.LoginWithAmazon.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.LoginWithAmazon.client_secret == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.client_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.key_id == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.private_key == STRING
    input.Body.resourceConfig.userPoolConfigs.oAuth.socialProviderSettings.SignInWithApple.team_id == STRING
    input.Body.resourceConfig.userPoolConfigs.passwordPolicy.additionalConstraints[_] == enum_AdditionalConstraintsElement[_]
    input.Body.resourceConfig.userPoolConfigs.passwordPolicy.minimumLength == DOUBLE
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.deliveryMethod == enum_DeliveryMethod[_]
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.emailSettings.emailMessage == STRING
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.emailSettings.emailSubject == STRING
    input.Body.resourceConfig.userPoolConfigs.verificationMessage.smsSettings.smsMessage == STRING
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateBackendConfig

valid {
    input.Body.loginAuthConfig.aws_cognito_identity_pool_id == STRING
    input.Body.loginAuthConfig.aws_cognito_region == STRING
    input.Body.loginAuthConfig.aws_user_pools_id == STRING
    input.Body.loginAuthConfig.aws_user_pools_web_client_id == STRING
    input.ReqMap.appId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateBackendJob

valid {
    input.Body.operation == STRING
    input.Body.status == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ReqMap.jobId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateBackendStorage

enum_AuthenticatedElement := [ "READ", "CREATE_AND_UPDATE", "DELETE" ]
enum_ServiceName := [ "S3" ]
enum_UnAuthenticatedElement := [ "READ", "CREATE_AND_UPDATE", "DELETE" ]

valid {
    input.Body.resourceConfig.permissions.authenticated[_] == enum_AuthenticatedElement[_]
    input.Body.resourceConfig.permissions.unAuthenticated[_] == enum_UnAuthenticatedElement[_]
    input.Body.resourceConfig.serviceName == enum_ServiceName[_]
    input.Body.resourceName == STRING
    input.ReqMap.appId == STRING
    input.ReqMap.backendEnvironmentName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

Updated 4 days ago