---
updatedAt: 2025-11-12T00:57:03.000Z
agentTools:
  projectIndex: https://public.docs.kivera.io/llms.txt
---

# AUDITMANAGER

<Embed url="https://docs.aws.amazon.com/" title="AWS documentation" provider="docs.aws.amazon.com" href="https://docs.aws.amazon.com/" />

# AssociateAssessmentReportEvidenceFolder

```erlang
valid {
    input.Body.evidenceFolderId == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# BatchAssociateAssessmentReportEvidence

```erlang
valid {
    input.Body.evidenceFolderId == STRING
    input.Body.evidenceIds[_] == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# BatchCreateDelegationByAssessment

```erlang
enum_RoleType := [ "PROCESS_OWNER", "RESOURCE_OWNER" ]

valid {
    input.Body.createDelegationRequests[_].comment == STRING
    input.Body.createDelegationRequests[_].controlSetId == STRING
    input.Body.createDelegationRequests[_].roleArn == STRING
    input.Body.createDelegationRequests[_].roleType == enum_RoleType[_]
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# BatchDeleteDelegationByAssessment

```erlang
valid {
    input.Body.delegationIds[_] == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# BatchDisassociateAssessmentReportEvidence

```erlang
valid {
    input.Body.evidenceFolderId == STRING
    input.Body.evidenceIds[_] == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# BatchImportEvidenceToAssessmentControl

```erlang
valid {
    input.Body.manualEvidence[_].s3ResourcePath == STRING
    input.Body.manualEvidence[_].textResponse == STRING
    input.Body.manualEvidence[_].evidenceFileName == STRING
    input.ReqMap.assessmentId == STRING
    input.ReqMap.controlSetId == STRING
    input.ReqMap.controlId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateAssessment

```erlang
enum_AssessmentReportDestinationType := [ "S3" ]
enum_RoleType := [ "PROCESS_OWNER", "RESOURCE_OWNER" ]

valid {
    input.Body.name == STRING
    input.Body.description == STRING
    input.Body.assessmentReportsDestination.destinationType == enum_AssessmentReportDestinationType[_]
    input.Body.assessmentReportsDestination.destination == STRING
    input.Body.scope.awsAccounts[_].id == STRING
    input.Body.scope.awsAccounts[_].emailAddress == STRING
    input.Body.scope.awsAccounts[_].name == STRING
    input.Body.scope.awsServices[_].serviceName == STRING
    input.Body.roles[_].roleType == enum_RoleType[_]
    input.Body.roles[_].roleArn == STRING
    input.Body.frameworkId == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateAssessmentFramework

```erlang
valid {
    input.Body.name == STRING
    input.Body.description == STRING
    input.Body.complianceType == STRING
    input.Body.controlSets[_].name == STRING
    input.Body.controlSets[_].controls[_].id == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateAssessmentReport

```erlang
valid {
    input.Body.name == STRING
    input.Body.description == STRING
    input.Body.queryStatement == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateControl

```erlang
enum_KeywordInputType := [ "SELECT_FROM_LIST", "UPLOAD_FILE", "INPUT_TEXT" ]
enum_SourceFrequency := [ "DAILY", "WEEKLY", "MONTHLY" ]
enum_SourceSetUpOption := [ "System_Controls_Mapping", "Procedural_Controls_Mapping" ]
enum_SourceType := [ "AWS_Cloudtrail", "AWS_Config", "AWS_Security_Hub", "AWS_API_Call", "MANUAL", "Common_Control", "Core_Control" ]

valid {
    input.Body.name == STRING
    input.Body.description == STRING
    input.Body.testingInformation == STRING
    input.Body.actionPlanTitle == STRING
    input.Body.actionPlanInstructions == STRING
    input.Body.controlMappingSources[_].sourceName == STRING
    input.Body.controlMappingSources[_].sourceDescription == STRING
    input.Body.controlMappingSources[_].sourceSetUpOption == enum_SourceSetUpOption[_]
    input.Body.controlMappingSources[_].sourceType == enum_SourceType[_]
    input.Body.controlMappingSources[_].sourceKeyword.keywordInputType == enum_KeywordInputType[_]
    input.Body.controlMappingSources[_].sourceKeyword.keywordValue == STRING
    input.Body.controlMappingSources[_].sourceFrequency == enum_SourceFrequency[_]
    input.Body.controlMappingSources[_].troubleshootingText == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteAssessment

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteAssessmentFramework

```erlang
valid {
    input.ReqMap.frameworkId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteAssessmentFrameworkShare

```erlang
enum_ShareRequestType := [ "SENT", "RECEIVED" ]

valid {
    input.ReqMap.requestId == STRING
    input.Qs.requestType == enum_ShareRequestType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteAssessmentReport

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ReqMap.assessmentReportId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteControl

```erlang
valid {
    input.ReqMap.controlId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeregisterAccount

```erlang
valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeregisterOrganizationAdminAccount

```erlang
valid {
    input.Body.adminAccountId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DisassociateAssessmentReportEvidenceFolder

```erlang
valid {
    input.Body.evidenceFolderId == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetAccountStatus

```erlang
valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetAssessment

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetAssessmentFramework

```erlang
valid {
    input.ReqMap.frameworkId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetAssessmentReportUrl

```erlang
valid {
    input.ReqMap.assessmentReportId == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetChangeLogs

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.Qs.controlSetId == STRING
    input.Qs.controlId == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetControl

```erlang
valid {
    input.ReqMap.controlId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetDelegations

```erlang
valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEvidence

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ReqMap.controlSetId == STRING
    input.ReqMap.evidenceFolderId == STRING
    input.ReqMap.evidenceId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEvidenceByEvidenceFolder

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ReqMap.controlSetId == STRING
    input.ReqMap.evidenceFolderId == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEvidenceFileUploadUrl

```erlang
valid {
    input.Qs.fileName == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEvidenceFolder

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ReqMap.controlSetId == STRING
    input.ReqMap.evidenceFolderId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEvidenceFoldersByAssessment

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEvidenceFoldersByAssessmentControl

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ReqMap.controlSetId == STRING
    input.ReqMap.controlId == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetInsights

```erlang
valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetInsightsByAssessment

```erlang
valid {
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetOrganizationAdminAccount

```erlang
valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetServicesInScope

```erlang
valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetSettings

```erlang
enum_SettingAttribute := [ "ALL", "IS_AWS_ORG_ENABLED", "SNS_TOPIC", "DEFAULT_ASSESSMENT_REPORTS_DESTINATION", "DEFAULT_PROCESS_OWNERS", "EVIDENCE_FINDER_ENABLEMENT", "DEREGISTRATION_POLICY", "DEFAULT_EXPORT_DESTINATION" ]

valid {
    input.ReqMap.attribute == enum_SettingAttribute[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListAssessmentControlInsightsByControlDomain

```erlang
valid {
    input.Qs.controlDomainId == STRING
    input.Qs.assessmentId == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListAssessmentFrameworkShareRequests

```erlang
enum_ShareRequestType := [ "SENT", "RECEIVED" ]

valid {
    input.Qs.requestType == enum_ShareRequestType[_]
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListAssessmentFrameworks

```erlang
enum_FrameworkType := [ "Standard", "Custom" ]

valid {
    input.Qs.frameworkType == enum_FrameworkType[_]
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListAssessmentReports

```erlang
valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListAssessments

```erlang
enum_AssessmentStatus := [ "ACTIVE", "INACTIVE" ]

valid {
    input.Qs.status == enum_AssessmentStatus[_]
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListControlDomainInsights

```erlang
valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListControlDomainInsightsByAssessment

```erlang
valid {
    input.Qs.assessmentId == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListControlInsightsByControlDomain

```erlang
valid {
    input.Qs.controlDomainId == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListControls

```erlang
enum_ControlType := [ "Standard", "Custom", "Core" ]

valid {
    input.Qs.controlType == enum_ControlType[_]
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.controlCatalogId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListKeywordsForDataSource

```erlang
enum_DataSourceType := [ "AWS_Cloudtrail", "AWS_Config", "AWS_Security_Hub", "AWS_API_Call", "MANUAL" ]

valid {
    input.Qs.source == enum_DataSourceType[_]
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListNotifications

```erlang
valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListTagsForResource

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RegisterAccount

```erlang
valid {
    input.Body.kmsKey == STRING
    input.Body.delegatedAdminAccount == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RegisterOrganizationAdminAccount

```erlang
valid {
    input.Body.adminAccountId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# StartAssessmentFrameworkShare

```erlang
valid {
    input.Body.destinationAccount == STRING
    input.Body.destinationRegion == STRING
    input.Body.comment == STRING
    input.ReqMap.frameworkId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# TagResource

```erlang
valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UntagResource

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.Qs.tagKeys[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateAssessment

```erlang
enum_AssessmentReportDestinationType := [ "S3" ]
enum_RoleType := [ "PROCESS_OWNER", "RESOURCE_OWNER" ]

valid {
    input.Body.assessmentName == STRING
    input.Body.assessmentDescription == STRING
    input.Body.scope.awsAccounts[_].id == STRING
    input.Body.scope.awsAccounts[_].emailAddress == STRING
    input.Body.scope.awsAccounts[_].name == STRING
    input.Body.scope.awsServices[_].serviceName == STRING
    input.Body.assessmentReportsDestination.destinationType == enum_AssessmentReportDestinationType[_]
    input.Body.assessmentReportsDestination.destination == STRING
    input.Body.roles[_].roleType == enum_RoleType[_]
    input.Body.roles[_].roleArn == STRING
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateAssessmentControl

```erlang
enum_ControlStatus := [ "UNDER_REVIEW", "REVIEWED", "INACTIVE" ]

valid {
    input.Body.controlStatus == enum_ControlStatus[_]
    input.Body.commentBody == STRING
    input.ReqMap.assessmentId == STRING
    input.ReqMap.controlSetId == STRING
    input.ReqMap.controlId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateAssessmentControlSetStatus

```erlang
enum_ControlSetStatus := [ "ACTIVE", "UNDER_REVIEW", "REVIEWED" ]

valid {
    input.Body.status == enum_ControlSetStatus[_]
    input.Body.comment == STRING
    input.ReqMap.assessmentId == STRING
    input.ReqMap.controlSetId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateAssessmentFramework

```erlang
valid {
    input.Body.name == STRING
    input.Body.description == STRING
    input.Body.complianceType == STRING
    input.Body.controlSets[_].id == STRING
    input.Body.controlSets[_].name == STRING
    input.Body.controlSets[_].controls[_].id == STRING
    input.ReqMap.frameworkId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateAssessmentFrameworkShare

```erlang
enum_ShareRequestAction := [ "ACCEPT", "DECLINE", "REVOKE" ]
enum_ShareRequestType := [ "SENT", "RECEIVED" ]

valid {
    input.Body.requestType == enum_ShareRequestType[_]
    input.Body.action == enum_ShareRequestAction[_]
    input.ReqMap.requestId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateAssessmentStatus

```erlang
enum_AssessmentStatus := [ "ACTIVE", "INACTIVE" ]

valid {
    input.Body.status == enum_AssessmentStatus[_]
    input.ReqMap.assessmentId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateControl

```erlang
enum_KeywordInputType := [ "SELECT_FROM_LIST", "UPLOAD_FILE", "INPUT_TEXT" ]
enum_SourceFrequency := [ "DAILY", "WEEKLY", "MONTHLY" ]
enum_SourceSetUpOption := [ "System_Controls_Mapping", "Procedural_Controls_Mapping" ]
enum_SourceType := [ "AWS_Cloudtrail", "AWS_Config", "AWS_Security_Hub", "AWS_API_Call", "MANUAL", "Common_Control", "Core_Control" ]

valid {
    input.Body.name == STRING
    input.Body.description == STRING
    input.Body.testingInformation == STRING
    input.Body.actionPlanTitle == STRING
    input.Body.actionPlanInstructions == STRING
    input.Body.controlMappingSources[_].sourceId == STRING
    input.Body.controlMappingSources[_].sourceName == STRING
    input.Body.controlMappingSources[_].sourceDescription == STRING
    input.Body.controlMappingSources[_].sourceSetUpOption == enum_SourceSetUpOption[_]
    input.Body.controlMappingSources[_].sourceType == enum_SourceType[_]
    input.Body.controlMappingSources[_].sourceKeyword.keywordInputType == enum_KeywordInputType[_]
    input.Body.controlMappingSources[_].sourceKeyword.keywordValue == STRING
    input.Body.controlMappingSources[_].sourceFrequency == enum_SourceFrequency[_]
    input.Body.controlMappingSources[_].troubleshootingText == STRING
    input.ReqMap.controlId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateSettings

```erlang
enum_AssessmentReportDestinationType := [ "S3" ]
enum_DeleteResources := [ "ALL", "DEFAULT" ]
enum_ExportDestinationType := [ "S3" ]
enum_RoleType := [ "PROCESS_OWNER", "RESOURCE_OWNER" ]

valid {
    input.Body.snsTopic == STRING
    input.Body.defaultAssessmentReportsDestination.destinationType == enum_AssessmentReportDestinationType[_]
    input.Body.defaultAssessmentReportsDestination.destination == STRING
    input.Body.defaultProcessOwners[_].roleType == enum_RoleType[_]
    input.Body.defaultProcessOwners[_].roleArn == STRING
    input.Body.kmsKey == STRING
    input.Body.evidenceFinderEnabled == BOOLEAN
    input.Body.deregistrationPolicy.deleteResources == enum_DeleteResources[_]
    input.Body.defaultExportDestination.destinationType == enum_ExportDestinationType[_]
    input.Body.defaultExportDestination.destination == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ValidateAssessmentReportIntegrity

```erlang
valid {
    input.Body.s3RelativePath == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```