---
updatedAt: 2025-11-12T00:58:59.000Z
agentTools:
  projectIndex: https://public.docs.kivera.io/llms.txt
---

# CONTROLTOWER

<Embed url="https://docs.aws.amazon.com/" title="AWS documentation" provider="docs.aws.amazon.com" href="https://docs.aws.amazon.com/" />

# CreateLandingZone

```erlang
enum_RemediationType := [ "INHERITANCE_DRIFT" ]

valid {
    input.Body.version == STRING
    input.Body.manifest == {}
    input.Body.remediationTypes[_] == enum_RemediationType[_]
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteLandingZone

```erlang
valid {
    input.Body.landingZoneIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DisableBaseline

```erlang
valid {
    input.Body.enabledBaselineIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DisableControl

```erlang
valid {
    input.Body.controlIdentifier == STRING
    input.Body.targetIdentifier == STRING
    input.Body.enabledControlIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# EnableBaseline

```erlang
valid {
    input.Body.baselineVersion == STRING
    input.Body.parameters[_].key == STRING
    input.Body.parameters[_].value == {}
    input.Body.baselineIdentifier == STRING
    input.Body.targetIdentifier == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# EnableControl

```erlang
valid {
    input.Body.controlIdentifier == STRING
    input.Body.targetIdentifier == STRING
    input.Body.tags.STRING == STRING
    input.Body.parameters[_].key == STRING
    input.Body.parameters[_].value == {}
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetBaseline

```erlang
valid {
    input.Body.baselineIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetBaselineOperation

```erlang
valid {
    input.Body.operationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetControlOperation

```erlang
valid {
    input.Body.operationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEnabledBaseline

```erlang
valid {
    input.Body.enabledBaselineIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetEnabledControl

```erlang
valid {
    input.Body.enabledControlIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetLandingZone

```erlang
valid {
    input.Body.landingZoneIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetLandingZoneOperation

```erlang
valid {
    input.Body.operationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListBaselines

```erlang
valid {
    input.Body.nextToken == STRING
    input.Body.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListControlOperations

```erlang
enum_ControlOperationStatus := [ "SUCCEEDED", "FAILED", "IN_PROGRESS" ]
enum_ControlOperationType := [ "ENABLE_CONTROL", "DISABLE_CONTROL", "UPDATE_ENABLED_CONTROL", "RESET_ENABLED_CONTROL" ]

valid {
    input.Body.filter.controlIdentifiers[_] == STRING
    input.Body.filter.targetIdentifiers[_] == STRING
    input.Body.filter.enabledControlIdentifiers[_] == STRING
    input.Body.filter.statuses[_] == enum_ControlOperationStatus[_]
    input.Body.filter.controlOperationTypes[_] == enum_ControlOperationType[_]
    input.Body.nextToken == STRING
    input.Body.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListEnabledBaselines

```erlang
enum_EnabledBaselineDriftStatus := [ "IN_SYNC", "DRIFTED" ]
enum_EnablementStatus := [ "SUCCEEDED", "FAILED", "UNDER_CHANGE" ]

valid {
    input.Body.filter.targetIdentifiers[_] == STRING
    input.Body.filter.baselineIdentifiers[_] == STRING
    input.Body.filter.parentIdentifiers[_] == STRING
    input.Body.filter.statuses[_] == enum_EnablementStatus[_]
    input.Body.filter.inheritanceDriftStatuses[_] == enum_EnabledBaselineDriftStatus[_]
    input.Body.nextToken == STRING
    input.Body.maxResults == INTEGER
    input.Body.includeChildren == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListEnabledControls

```erlang
enum_DriftStatus := [ "DRIFTED", "IN_SYNC", "NOT_CHECKING", "UNKNOWN" ]
enum_EnablementStatus := [ "SUCCEEDED", "FAILED", "UNDER_CHANGE" ]

valid {
    input.Body.targetIdentifier == STRING
    input.Body.nextToken == STRING
    input.Body.maxResults == INTEGER
    input.Body.filter.controlIdentifiers[_] == STRING
    input.Body.filter.statuses[_] == enum_EnablementStatus[_]
    input.Body.filter.driftStatuses[_] == enum_DriftStatus[_]
    input.Body.filter.parentIdentifiers[_] == STRING
    input.Body.filter.inheritanceDriftStatuses[_] == enum_DriftStatus[_]
    input.Body.filter.resourceDriftStatuses[_] == enum_DriftStatus[_]
    input.Body.includeChildren == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListLandingZoneOperations

```erlang
enum_LandingZoneOperationStatus := [ "SUCCEEDED", "FAILED", "IN_PROGRESS" ]
enum_LandingZoneOperationType := [ "DELETE", "CREATE", "UPDATE", "RESET" ]

valid {
    input.Body.filter.types[_] == enum_LandingZoneOperationType[_]
    input.Body.filter.statuses[_] == enum_LandingZoneOperationStatus[_]
    input.Body.nextToken == STRING
    input.Body.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListLandingZones

```erlang
valid {
    input.Body.nextToken == STRING
    input.Body.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListTagsForResource

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ResetEnabledBaseline

```erlang
valid {
    input.Body.enabledBaselineIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ResetEnabledControl

```erlang
valid {
    input.Body.enabledControlIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ResetLandingZone

```erlang
valid {
    input.Body.landingZoneIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# TagResource

```erlang
valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UntagResource

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.Qs.tagKeys[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateEnabledBaseline

```erlang
valid {
    input.Body.baselineVersion == STRING
    input.Body.parameters[_].key == STRING
    input.Body.parameters[_].value == {}
    input.Body.enabledBaselineIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateEnabledControl

```erlang
valid {
    input.Body.parameters[_].key == STRING
    input.Body.parameters[_].value == {}
    input.Body.enabledControlIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateLandingZone

```erlang
enum_RemediationType := [ "INHERITANCE_DRIFT" ]

valid {
    input.Body.version == STRING
    input.Body.manifest == {}
    input.Body.remediationTypes[_] == enum_RemediationType[_]
    input.Body.landingZoneIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```