valid {
    input.Body.activationToken == STRING
    input.Body.channel == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.ReqMap.parent == STRING
    input.Qs.channelConnectionId == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.cryptoKeyName == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.provider == STRING
    input.ReqMap.parent == STRING
    input.Qs.channelId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.cryptoKeyName == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.provider == STRING
    input.ReqMap.name == STRING
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.annotations.STRING == STRING
    input.Body.celMatch == STRING
    input.Body.destination == STRING
    input.Body.displayName == STRING
    input.Body.labels.STRING == STRING
    input.Body.messageBus == STRING
    input.Body.name == STRING
    input.ReqMap.parent == STRING
    input.Qs.enrollmentId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.annotations.STRING == STRING
    input.Body.celMatch == STRING
    input.Body.destination == STRING
    input.Body.displayName == STRING
    input.Body.labels.STRING == STRING
    input.Body.messageBus == STRING
    input.Body.name == STRING
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

enum_LoggingConfigLogSeverity := [ "LOG_SEVERITY_UNSPECIFIED", "NONE", "DEBUG", "INFO", "NOTICE", "WARNING", "ERROR", "CRITICAL", "ALERT", "EMERGENCY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.cryptoKeyName == STRING
    input.Body.destination == STRING
    input.Body.displayName == STRING
    input.Body.labels.STRING == STRING
    input.Body.loggingConfig.logSeverity == enum_LoggingConfigLogSeverity[_]
    input.Body.name == STRING
    input.ReqMap.parent == STRING
    input.Qs.googleApiSourceId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_LoggingConfigLogSeverity := [ "LOG_SEVERITY_UNSPECIFIED", "NONE", "DEBUG", "INFO", "NOTICE", "WARNING", "ERROR", "CRITICAL", "ALERT", "EMERGENCY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.cryptoKeyName == STRING
    input.Body.destination == STRING
    input.Body.displayName == STRING
    input.Body.labels.STRING == STRING
    input.Body.loggingConfig.logSeverity == enum_LoggingConfigLogSeverity[_]
    input.Body.name == STRING
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.filter == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_LoggingConfigLogSeverity := [ "LOG_SEVERITY_UNSPECIFIED", "NONE", "DEBUG", "INFO", "NOTICE", "WARNING", "ERROR", "CRITICAL", "ALERT", "EMERGENCY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.cryptoKeyName == STRING
    input.Body.displayName == STRING
    input.Body.labels.STRING == STRING
    input.Body.loggingConfig.logSeverity == enum_LoggingConfigLogSeverity[_]
    input.Body.name == STRING
    input.ReqMap.parent == STRING
    input.Qs.messageBusId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_LoggingConfigLogSeverity := [ "LOG_SEVERITY_UNSPECIFIED", "NONE", "DEBUG", "INFO", "NOTICE", "WARNING", "ERROR", "CRITICAL", "ALERT", "EMERGENCY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.cryptoKeyName == STRING
    input.Body.displayName == STRING
    input.Body.labels.STRING == STRING
    input.Body.loggingConfig.logSeverity == enum_LoggingConfigLogSeverity[_]
    input.Body.name == STRING
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.STRING == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.filter == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_LoggingConfigLogSeverity := [ "LOG_SEVERITY_UNSPECIFIED", "NONE", "DEBUG", "INFO", "NOTICE", "WARNING", "ERROR", "CRITICAL", "ALERT", "EMERGENCY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.cryptoKeyName == STRING
    input.Body.destinations[_].authenticationConfig.googleOidc.audience == STRING
    input.Body.destinations[_].authenticationConfig.googleOidc.serviceAccount == STRING
    input.Body.destinations[_].authenticationConfig.oauthToken.scope == STRING
    input.Body.destinations[_].authenticationConfig.oauthToken.serviceAccount == STRING
    input.Body.destinations[_].httpEndpoint.messageBindingTemplate == STRING
    input.Body.destinations[_].httpEndpoint.uri == STRING
    input.Body.destinations[_].messageBus == STRING
    input.Body.destinations[_].networkConfig.networkAttachment == STRING
    input.Body.destinations[_].outputPayloadFormat.avro.schemaDefinition == STRING
    input.Body.destinations[_].outputPayloadFormat.json.STRING == STRING
    input.Body.destinations[_].outputPayloadFormat.protobuf.schemaDefinition == STRING
    input.Body.destinations[_].topic == STRING
    input.Body.destinations[_].workflow == STRING
    input.Body.displayName == STRING
    input.Body.etag == STRING
    input.Body.inputPayloadFormat.avro.schemaDefinition == STRING
    input.Body.inputPayloadFormat.json.STRING == STRING
    input.Body.inputPayloadFormat.protobuf.schemaDefinition == STRING
    input.Body.labels.STRING == STRING
    input.Body.loggingConfig.logSeverity == enum_LoggingConfigLogSeverity[_]
    input.Body.mediations[_].transformation.transformationTemplate == STRING
    input.Body.name == STRING
    input.Body.retryPolicy.maxAttempts == INTEGER
    input.Body.retryPolicy.maxRetryDelay == STRING
    input.Body.retryPolicy.minRetryDelay == STRING
    input.ReqMap.parent == STRING
    input.Qs.pipelineId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_LoggingConfigLogSeverity := [ "LOG_SEVERITY_UNSPECIFIED", "NONE", "DEBUG", "INFO", "NOTICE", "WARNING", "ERROR", "CRITICAL", "ALERT", "EMERGENCY" ]

valid {
    input.Body.annotations.STRING == STRING
    input.Body.cryptoKeyName == STRING
    input.Body.destinations[_].authenticationConfig.googleOidc.audience == STRING
    input.Body.destinations[_].authenticationConfig.googleOidc.serviceAccount == STRING
    input.Body.destinations[_].authenticationConfig.oauthToken.scope == STRING
    input.Body.destinations[_].authenticationConfig.oauthToken.serviceAccount == STRING
    input.Body.destinations[_].httpEndpoint.messageBindingTemplate == STRING
    input.Body.destinations[_].httpEndpoint.uri == STRING
    input.Body.destinations[_].messageBus == STRING
    input.Body.destinations[_].networkConfig.networkAttachment == STRING
    input.Body.destinations[_].outputPayloadFormat.avro.schemaDefinition == STRING
    input.Body.destinations[_].outputPayloadFormat.json.STRING == STRING
    input.Body.destinations[_].outputPayloadFormat.protobuf.schemaDefinition == STRING
    input.Body.destinations[_].topic == STRING
    input.Body.destinations[_].workflow == STRING
    input.Body.displayName == STRING
    input.Body.etag == STRING
    input.Body.inputPayloadFormat.avro.schemaDefinition == STRING
    input.Body.inputPayloadFormat.json.STRING == STRING
    input.Body.inputPayloadFormat.protobuf.schemaDefinition == STRING
    input.Body.labels.STRING == STRING
    input.Body.loggingConfig.logSeverity == enum_LoggingConfigLogSeverity[_]
    input.Body.mediations[_].transformation.transformationTemplate == STRING
    input.Body.name == STRING
    input.Body.retryPolicy.maxAttempts == INTEGER
    input.Body.retryPolicy.maxRetryDelay == STRING
    input.Body.retryPolicy.minRetryDelay == STRING
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.channel == STRING
    input.Body.destination.cloudFunction == STRING
    input.Body.destination.cloudRun.path == STRING
    input.Body.destination.cloudRun.region == STRING
    input.Body.destination.cloudRun.service == STRING
    input.Body.destination.gke.cluster == STRING
    input.Body.destination.gke.location == STRING
    input.Body.destination.gke.namespace == STRING
    input.Body.destination.gke.path == STRING
    input.Body.destination.gke.service == STRING
    input.Body.destination.httpEndpoint.uri == STRING
    input.Body.destination.networkConfig.networkAttachment == STRING
    input.Body.destination.workflow == STRING
    input.Body.eventDataContentType == STRING
    input.Body.eventFilters[_].attribute == STRING
    input.Body.eventFilters[_].operator == STRING
    input.Body.eventFilters[_].value == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.serviceAccount == STRING
    input.Body.transport.pubsub.topic == STRING
    input.ReqMap.parent == STRING
    input.Qs.triggerId == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.etag == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.channel == STRING
    input.Body.destination.cloudFunction == STRING
    input.Body.destination.cloudRun.path == STRING
    input.Body.destination.cloudRun.region == STRING
    input.Body.destination.cloudRun.service == STRING
    input.Body.destination.gke.cluster == STRING
    input.Body.destination.gke.location == STRING
    input.Body.destination.gke.namespace == STRING
    input.Body.destination.gke.path == STRING
    input.Body.destination.gke.service == STRING
    input.Body.destination.httpEndpoint.uri == STRING
    input.Body.destination.networkConfig.networkAttachment == STRING
    input.Body.destination.workflow == STRING
    input.Body.eventDataContentType == STRING
    input.Body.eventFilters[_].attribute == STRING
    input.Body.eventFilters[_].operator == STRING
    input.Body.eventFilters[_].value == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.serviceAccount == STRING
    input.Body.transport.pubsub.topic == STRING
    input.ReqMap.name == STRING
    input.Qs.allowMissing == BOOLEAN
    input.Qs.updateMask == STRING
    input.Qs.validateOnly == BOOLEAN
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.cryptoKeyName == STRING
    input.Body.name == STRING
    input.ReqMap.name == STRING
    input.Qs.updateMask == STRING
    input.ProviderMetadata.Region == STRING
}