enum_CloudSqlPropertiesType := [ "DATABASE_TYPE_UNSPECIFIED", "POSTGRES", "MYSQL" ]

valid {
    input.Body.aws.accessRole.iamRoleId == STRING
    input.Body.aws.accessRole.identity == STRING
    input.Body.azure.customerTenantId == STRING
    input.Body.azure.federatedApplicationClientId == STRING
    input.Body.azure.redirectUri == STRING
    input.Body.cloudResource == {}
    input.Body.cloudSpanner.database == STRING
    input.Body.cloudSpanner.databaseRole == STRING
    input.Body.cloudSpanner.maxParallelism == INTEGER
    input.Body.cloudSpanner.useDataBoost == BOOLEAN
    input.Body.cloudSpanner.useParallelism == BOOLEAN
    input.Body.cloudSpanner.useServerlessAnalytics == BOOLEAN
    input.Body.cloudSql.credential.password == STRING
    input.Body.cloudSql.credential.username == STRING
    input.Body.cloudSql.database == STRING
    input.Body.cloudSql.instanceId == STRING
    input.Body.cloudSql.type == enum_CloudSqlPropertiesType[_]
    input.Body.configuration.authentication.usernamePassword.password.plaintext == STRING
    input.Body.configuration.authentication.usernamePassword.username == STRING
    input.Body.configuration.connectorId == STRING
    input.Body.configuration.endpoint.hostPort == STRING
    input.Body.configuration.network.privateServiceConnect.networkAttachment == STRING
    input.Body.description == STRING
    input.Body.friendlyName == STRING
    input.Body.kmsKeyName == STRING
    input.Body.salesforceDataCloud.instanceUri == STRING
    input.Body.salesforceDataCloud.tenantId == STRING
    input.Body.spark.metastoreServiceConfig.metastoreService == STRING
    input.Body.spark.sparkHistoryServerConfig.dataprocCluster == STRING
    input.ReqMap.parent == STRING
    input.Qs.connectionId == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.options.requestedPolicyVersion == INTEGER
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_CloudSqlPropertiesType := [ "DATABASE_TYPE_UNSPECIFIED", "POSTGRES", "MYSQL" ]

valid {
    input.Body.aws.accessRole.iamRoleId == STRING
    input.Body.aws.accessRole.identity == STRING
    input.Body.azure.customerTenantId == STRING
    input.Body.azure.federatedApplicationClientId == STRING
    input.Body.azure.redirectUri == STRING
    input.Body.cloudResource == {}
    input.Body.cloudSpanner.database == STRING
    input.Body.cloudSpanner.databaseRole == STRING
    input.Body.cloudSpanner.maxParallelism == INTEGER
    input.Body.cloudSpanner.useDataBoost == BOOLEAN
    input.Body.cloudSpanner.useParallelism == BOOLEAN
    input.Body.cloudSpanner.useServerlessAnalytics == BOOLEAN
    input.Body.cloudSql.credential.password == STRING
    input.Body.cloudSql.credential.username == STRING
    input.Body.cloudSql.database == STRING
    input.Body.cloudSql.instanceId == STRING
    input.Body.cloudSql.type == enum_CloudSqlPropertiesType[_]
    input.Body.configuration.authentication.usernamePassword.password.plaintext == STRING
    input.Body.configuration.authentication.usernamePassword.username == STRING
    input.Body.configuration.connectorId == STRING
    input.Body.configuration.endpoint.hostPort == STRING
    input.Body.configuration.network.privateServiceConnect.networkAttachment == STRING
    input.Body.description == STRING
    input.Body.friendlyName == STRING
    input.Body.kmsKeyName == STRING
    input.Body.salesforceDataCloud.instanceUri == STRING
    input.Body.salesforceDataCloud.tenantId == STRING
    input.Body.spark.metastoreServiceConfig.metastoreService == STRING
    input.Body.spark.sparkHistoryServerConfig.dataprocCluster == STRING
    input.ReqMap.name == STRING
    input.Qs.updateMask == STRING
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.cloudSql.password == STRING
    input.Body.cloudSql.username == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}