Guides

INSPECTOR2

Suggest Edits
docs.aws.amazon.com
AWS documentation

AssociateMember

valid {
    input.Body.accountId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

BatchGetAccountStatus

valid {
    input.Body.accountIds[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

BatchGetCodeSnippet

valid {
    input.Body.findingArns[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

BatchGetFindingDetails

valid {
    input.Body.findingArns[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

BatchGetFreeTrialInfo

valid {
    input.Body.accountIds[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

BatchGetMemberEc2DeepInspectionStatus

valid {
    input.Body.accountIds[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

BatchUpdateMemberEc2DeepInspectionStatus

valid {
    input.Body.accountIds[_].accountId == STRING
    input.Body.accountIds[_].activateDeepInspection == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CancelFindingsReport

valid {
    input.Body.reportId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CancelSbomExport

valid {
    input.Body.reportId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateCisScanConfiguration

enum_CisSecurityLevel := [ "LEVEL_1", "LEVEL_2" ]
enum_Day := [ "SUN", "MON", "TUE", "WED", "THU", "FRI", "SAT" ]

valid {
    input.Body.scanName == STRING
    input.Body.schedule.daily.startTime.timeOfDay == STRING
    input.Body.schedule.daily.startTime.timezone == STRING
    input.Body.schedule.monthly.day == enum_Day[_]
    input.Body.schedule.monthly.startTime.timeOfDay == STRING
    input.Body.schedule.monthly.startTime.timezone == STRING
    input.Body.schedule.oneTime == {}
    input.Body.schedule.weekly.days[_] == enum_Day[_]
    input.Body.schedule.weekly.startTime.timeOfDay == STRING
    input.Body.schedule.weekly.startTime.timezone == STRING
    input.Body.securityLevel == enum_CisSecurityLevel[_]
    input.Body.tags.STRING == STRING
    input.Body.targets.accountIds[_] == STRING
    input.Body.targets.targetResourceTags.STRING[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateFilter

enum_FilterAction := [ "NONE", "SUPPRESS" ]
enum_MapComparison := [ "EQUALS" ]
enum_StringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]

valid {
    input.Body.action == enum_FilterAction[_]
    input.Body.description == STRING
    input.Body.filterCriteria.awsAccountId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.awsAccountId[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].value == STRING
    input.Body.filterCriteria.componentId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentId[_].value == STRING
    input.Body.filterCriteria.componentType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentType[_].value == STRING
    input.Body.filterCriteria.ec2InstanceImageId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceImageId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceSubnetId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceSubnetId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceVpcId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceVpcId[_].value == STRING
    input.Body.filterCriteria.ecrImageArchitecture[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageArchitecture[_].value == STRING
    input.Body.filterCriteria.ecrImageHash[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageHash[_].value == STRING
    input.Body.filterCriteria.ecrImagePushedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImagePushedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImageRegistry[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRegistry[_].value == STRING
    input.Body.filterCriteria.ecrImageRepositoryName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRepositoryName[_].value == STRING
    input.Body.filterCriteria.ecrImageTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageTags[_].value == STRING
    input.Body.filterCriteria.epssScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.epssScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.exploitAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.exploitAvailable[_].value == STRING
    input.Body.filterCriteria.findingArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingArn[_].value == STRING
    input.Body.filterCriteria.findingStatus[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingStatus[_].value == STRING
    input.Body.filterCriteria.findingType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingType[_].value == STRING
    input.Body.filterCriteria.firstObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.firstObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.fixAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.fixAvailable[_].value == STRING
    input.Body.filterCriteria.inspectorScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.inspectorScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLayers[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionLayers[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionName[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionRuntime[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionRuntime[_].value == STRING
    input.Body.filterCriteria.lastObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lastObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.networkProtocol[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.networkProtocol[_].value == STRING
    input.Body.filterCriteria.portRange[_].beginInclusive == INTEGER
    input.Body.filterCriteria.portRange[_].endInclusive == INTEGER
    input.Body.filterCriteria.relatedVulnerabilities[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.relatedVulnerabilities[_].value == STRING
    input.Body.filterCriteria.resourceId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceId[_].value == STRING
    input.Body.filterCriteria.resourceTags[_].comparison == enum_MapComparison[_]
    input.Body.filterCriteria.resourceTags[_].key == STRING
    input.Body.filterCriteria.resourceTags[_].value == STRING
    input.Body.filterCriteria.resourceType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceType[_].value == STRING
    input.Body.filterCriteria.severity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.severity[_].value == STRING
    input.Body.filterCriteria.title[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.title[_].value == STRING
    input.Body.filterCriteria.updatedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.updatedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.vendorSeverity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vendorSeverity[_].value == STRING
    input.Body.filterCriteria.vulnerabilityId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilityId[_].value == STRING
    input.Body.filterCriteria.vulnerabilitySource[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilitySource[_].value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].architecture.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].architecture.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].epoch.lowerInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].epoch.upperInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].filePath.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].filePath.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].name.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].name.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].release.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].release.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].version.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].version.value == STRING
    input.Body.name == STRING
    input.Body.reason == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateFindingsReport

enum_MapComparison := [ "EQUALS" ]
enum_ReportFormat := [ "CSV", "JSON" ]
enum_StringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]

valid {
    input.Body.filterCriteria.awsAccountId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.awsAccountId[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].value == STRING
    input.Body.filterCriteria.componentId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentId[_].value == STRING
    input.Body.filterCriteria.componentType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentType[_].value == STRING
    input.Body.filterCriteria.ec2InstanceImageId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceImageId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceSubnetId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceSubnetId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceVpcId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceVpcId[_].value == STRING
    input.Body.filterCriteria.ecrImageArchitecture[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageArchitecture[_].value == STRING
    input.Body.filterCriteria.ecrImageHash[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageHash[_].value == STRING
    input.Body.filterCriteria.ecrImagePushedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImagePushedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImageRegistry[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRegistry[_].value == STRING
    input.Body.filterCriteria.ecrImageRepositoryName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRepositoryName[_].value == STRING
    input.Body.filterCriteria.ecrImageTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageTags[_].value == STRING
    input.Body.filterCriteria.epssScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.epssScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.exploitAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.exploitAvailable[_].value == STRING
    input.Body.filterCriteria.findingArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingArn[_].value == STRING
    input.Body.filterCriteria.findingStatus[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingStatus[_].value == STRING
    input.Body.filterCriteria.findingType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingType[_].value == STRING
    input.Body.filterCriteria.firstObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.firstObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.fixAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.fixAvailable[_].value == STRING
    input.Body.filterCriteria.inspectorScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.inspectorScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLayers[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionLayers[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionName[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionRuntime[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionRuntime[_].value == STRING
    input.Body.filterCriteria.lastObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lastObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.networkProtocol[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.networkProtocol[_].value == STRING
    input.Body.filterCriteria.portRange[_].beginInclusive == INTEGER
    input.Body.filterCriteria.portRange[_].endInclusive == INTEGER
    input.Body.filterCriteria.relatedVulnerabilities[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.relatedVulnerabilities[_].value == STRING
    input.Body.filterCriteria.resourceId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceId[_].value == STRING
    input.Body.filterCriteria.resourceTags[_].comparison == enum_MapComparison[_]
    input.Body.filterCriteria.resourceTags[_].key == STRING
    input.Body.filterCriteria.resourceTags[_].value == STRING
    input.Body.filterCriteria.resourceType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceType[_].value == STRING
    input.Body.filterCriteria.severity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.severity[_].value == STRING
    input.Body.filterCriteria.title[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.title[_].value == STRING
    input.Body.filterCriteria.updatedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.updatedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.vendorSeverity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vendorSeverity[_].value == STRING
    input.Body.filterCriteria.vulnerabilityId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilityId[_].value == STRING
    input.Body.filterCriteria.vulnerabilitySource[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilitySource[_].value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].architecture.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].architecture.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].epoch.lowerInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].epoch.upperInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].filePath.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].filePath.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].name.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].name.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].release.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].release.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].version.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].version.value == STRING
    input.Body.reportFormat == enum_ReportFormat[_]
    input.Body.s3Destination.bucketName == STRING
    input.Body.s3Destination.keyPrefix == STRING
    input.Body.s3Destination.kmsKeyArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateSbomExport

enum_ResourceMapComparison := [ "EQUALS" ]
enum_ResourceStringComparison := [ "EQUALS", "NOT_EQUALS" ]
enum_SbomReportFormat := [ "CYCLONEDX_1_4", "SPDX_2_3" ]

valid {
    input.Body.reportFormat == enum_SbomReportFormat[_]
    input.Body.resourceFilterCriteria.accountId[_].comparison == enum_ResourceStringComparison[_]
    input.Body.resourceFilterCriteria.accountId[_].value == STRING
    input.Body.resourceFilterCriteria.ec2InstanceTags[_].comparison == enum_ResourceMapComparison[_]
    input.Body.resourceFilterCriteria.ec2InstanceTags[_].key == STRING
    input.Body.resourceFilterCriteria.ec2InstanceTags[_].value == STRING
    input.Body.resourceFilterCriteria.ecrImageTags[_].comparison == enum_ResourceStringComparison[_]
    input.Body.resourceFilterCriteria.ecrImageTags[_].value == STRING
    input.Body.resourceFilterCriteria.ecrRepositoryName[_].comparison == enum_ResourceStringComparison[_]
    input.Body.resourceFilterCriteria.ecrRepositoryName[_].value == STRING
    input.Body.resourceFilterCriteria.lambdaFunctionName[_].comparison == enum_ResourceStringComparison[_]
    input.Body.resourceFilterCriteria.lambdaFunctionName[_].value == STRING
    input.Body.resourceFilterCriteria.lambdaFunctionTags[_].comparison == enum_ResourceMapComparison[_]
    input.Body.resourceFilterCriteria.lambdaFunctionTags[_].key == STRING
    input.Body.resourceFilterCriteria.lambdaFunctionTags[_].value == STRING
    input.Body.resourceFilterCriteria.resourceId[_].comparison == enum_ResourceStringComparison[_]
    input.Body.resourceFilterCriteria.resourceId[_].value == STRING
    input.Body.resourceFilterCriteria.resourceType[_].comparison == enum_ResourceStringComparison[_]
    input.Body.resourceFilterCriteria.resourceType[_].value == STRING
    input.Body.s3Destination.bucketName == STRING
    input.Body.s3Destination.keyPrefix == STRING
    input.Body.s3Destination.kmsKeyArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteCisScanConfiguration

valid {
    input.Body.scanConfigurationArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteFilter

valid {
    input.Body.arn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DescribeOrganizationConfiguration

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

Disable

enum_ResourceScanType := [ "EC2", "ECR", "LAMBDA", "LAMBDA_CODE" ]

valid {
    input.Body.accountIds[_] == STRING
    input.Body.resourceTypes[_] == enum_ResourceScanType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisableDelegatedAdminAccount

valid {
    input.Body.delegatedAdminAccountId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateMember

valid {
    input.Body.accountId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

Enable

enum_ResourceScanType := [ "EC2", "ECR", "LAMBDA", "LAMBDA_CODE" ]

valid {
    input.Body.accountIds[_] == STRING
    input.Body.clientToken == STRING
    input.Body.resourceTypes[_] == enum_ResourceScanType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

EnableDelegatedAdminAccount

valid {
    input.Body.clientToken == STRING
    input.Body.delegatedAdminAccountId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetCisScanReport

enum_CisReportFormat := [ "PDF", "CSV" ]

valid {
    input.Body.reportFormat == enum_CisReportFormat[_]
    input.Body.scanArn == STRING
    input.Body.targetAccounts[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetCisScanResultDetails

enum_CisFindingStatus := [ "PASSED", "FAILED", "SKIPPED" ]
enum_CisFindingStatusComparison := [ "EQUALS" ]
enum_CisScanResultDetailsSortBy := [ "CHECK_ID", "STATUS" ]
enum_CisSecurityLevel := [ "LEVEL_1", "LEVEL_2" ]
enum_CisSecurityLevelComparison := [ "EQUALS" ]
enum_CisSortOrder := [ "ASC", "DESC" ]
enum_CisStringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]

valid {
    input.Body.accountId == STRING
    input.Body.filterCriteria.checkIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.checkIdFilters[_].value == STRING
    input.Body.filterCriteria.findingArnFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.findingArnFilters[_].value == STRING
    input.Body.filterCriteria.findingStatusFilters[_].comparison == enum_CisFindingStatusComparison[_]
    input.Body.filterCriteria.findingStatusFilters[_].value == enum_CisFindingStatus[_]
    input.Body.filterCriteria.securityLevelFilters[_].comparison == enum_CisSecurityLevelComparison[_]
    input.Body.filterCriteria.securityLevelFilters[_].value == enum_CisSecurityLevel[_]
    input.Body.filterCriteria.titleFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.titleFilters[_].value == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.scanArn == STRING
    input.Body.sortBy == enum_CisScanResultDetailsSortBy[_]
    input.Body.sortOrder == enum_CisSortOrder[_]
    input.Body.targetResourceId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetConfiguration

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetDelegatedAdminAccount

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetEc2DeepInspectionConfiguration

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetEncryptionKey

enum_ResourceType := [ "AWS_EC2_INSTANCE", "AWS_ECR_CONTAINER_IMAGE", "AWS_ECR_REPOSITORY", "AWS_LAMBDA_FUNCTION" ]
enum_ScanType := [ "NETWORK", "PACKAGE", "CODE" ]

valid {
    input.Qs.resourceType == enum_ResourceType[_]
    input.Qs.scanType == enum_ScanType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetFindingsReportStatus

valid {
    input.Body.reportId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetMember

valid {
    input.Body.accountId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetSbomExport

valid {
    input.Body.reportId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListAccountPermissions

enum_Service := [ "EC2", "ECR", "LAMBDA" ]

valid {
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.service == enum_Service[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCisScanConfigurations

enum_CisScanConfigurationsSortBy := [ "SCAN_NAME", "SCAN_CONFIGURATION_ARN" ]
enum_CisSortOrder := [ "ASC", "DESC" ]
enum_CisStringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]
enum_TagComparison := [ "EQUALS" ]

valid {
    input.Body.filterCriteria.scanConfigurationArnFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.scanConfigurationArnFilters[_].value == STRING
    input.Body.filterCriteria.scanNameFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.scanNameFilters[_].value == STRING
    input.Body.filterCriteria.targetResourceTagFilters[_].comparison == enum_TagComparison[_]
    input.Body.filterCriteria.targetResourceTagFilters[_].key == STRING
    input.Body.filterCriteria.targetResourceTagFilters[_].value == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.sortBy == enum_CisScanConfigurationsSortBy[_]
    input.Body.sortOrder == enum_CisSortOrder[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCisScanResultsAggregatedByChecks

enum_CisScanResultsAggregatedByChecksSortBy := [ "CHECK_ID", "TITLE", "PLATFORM", "FAILED_COUNTS", "SECURITY_LEVEL" ]
enum_CisSecurityLevel := [ "LEVEL_1", "LEVEL_2" ]
enum_CisSecurityLevelComparison := [ "EQUALS" ]
enum_CisSortOrder := [ "ASC", "DESC" ]
enum_CisStringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]

valid {
    input.Body.filterCriteria.accountIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.accountIdFilters[_].value == STRING
    input.Body.filterCriteria.checkIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.checkIdFilters[_].value == STRING
    input.Body.filterCriteria.failedResourcesFilters[_].lowerInclusive == INTEGER
    input.Body.filterCriteria.failedResourcesFilters[_].upperInclusive == INTEGER
    input.Body.filterCriteria.platformFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.platformFilters[_].value == STRING
    input.Body.filterCriteria.securityLevelFilters[_].comparison == enum_CisSecurityLevelComparison[_]
    input.Body.filterCriteria.securityLevelFilters[_].value == enum_CisSecurityLevel[_]
    input.Body.filterCriteria.titleFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.titleFilters[_].value == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.scanArn == STRING
    input.Body.sortBy == enum_CisScanResultsAggregatedByChecksSortBy[_]
    input.Body.sortOrder == enum_CisSortOrder[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCisScanResultsAggregatedByTargetResource

enum_CisResultStatus := [ "PASSED", "FAILED", "SKIPPED" ]
enum_CisResultStatusComparison := [ "EQUALS" ]
enum_CisScanResultsAggregatedByTargetResourceSortBy := [ "RESOURCE_ID", "FAILED_COUNTS", "ACCOUNT_ID", "PLATFORM", "TARGET_STATUS", "TARGET_STATUS_REASON" ]
enum_CisSortOrder := [ "ASC", "DESC" ]
enum_CisStringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]
enum_CisTargetStatus := [ "TIMED_OUT", "CANCELLED", "COMPLETED" ]
enum_CisTargetStatusComparison := [ "EQUALS" ]
enum_CisTargetStatusReason := [ "SCAN_IN_PROGRESS", "UNSUPPORTED_OS", "SSM_UNMANAGED" ]
enum_TagComparison := [ "EQUALS" ]

valid {
    input.Body.filterCriteria.accountIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.accountIdFilters[_].value == STRING
    input.Body.filterCriteria.checkIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.checkIdFilters[_].value == STRING
    input.Body.filterCriteria.failedChecksFilters[_].lowerInclusive == INTEGER
    input.Body.filterCriteria.failedChecksFilters[_].upperInclusive == INTEGER
    input.Body.filterCriteria.platformFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.platformFilters[_].value == STRING
    input.Body.filterCriteria.statusFilters[_].comparison == enum_CisResultStatusComparison[_]
    input.Body.filterCriteria.statusFilters[_].value == enum_CisResultStatus[_]
    input.Body.filterCriteria.targetResourceIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.targetResourceIdFilters[_].value == STRING
    input.Body.filterCriteria.targetResourceTagFilters[_].comparison == enum_TagComparison[_]
    input.Body.filterCriteria.targetResourceTagFilters[_].key == STRING
    input.Body.filterCriteria.targetResourceTagFilters[_].value == STRING
    input.Body.filterCriteria.targetStatusFilters[_].comparison == enum_CisTargetStatusComparison[_]
    input.Body.filterCriteria.targetStatusFilters[_].value == enum_CisTargetStatus[_]
    input.Body.filterCriteria.targetStatusReasonFilters[_].comparison == enum_CisTargetStatusComparison[_]
    input.Body.filterCriteria.targetStatusReasonFilters[_].value == enum_CisTargetStatusReason[_]
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.scanArn == STRING
    input.Body.sortBy == enum_CisScanResultsAggregatedByTargetResourceSortBy[_]
    input.Body.sortOrder == enum_CisSortOrder[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCisScans

enum_CisScanStatus := [ "FAILED", "COMPLETED", "CANCELLED", "IN_PROGRESS" ]
enum_CisScanStatusComparison := [ "EQUALS" ]
enum_CisSortOrder := [ "ASC", "DESC" ]
enum_CisStringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]
enum_ListCisScansDetailLevel := [ "ORGANIZATION", "MEMBER" ]
enum_ListCisScansSortBy := [ "STATUS", "SCHEDULED_BY", "SCAN_START_DATE", "FAILED_CHECKS" ]
enum_TagComparison := [ "EQUALS" ]

valid {
    input.Body.detailLevel == enum_ListCisScansDetailLevel[_]
    input.Body.filterCriteria.failedChecksFilters[_].lowerInclusive == INTEGER
    input.Body.filterCriteria.failedChecksFilters[_].upperInclusive == INTEGER
    input.Body.filterCriteria.scanArnFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.scanArnFilters[_].value == STRING
    input.Body.filterCriteria.scanAtFilters[_].earliestScanStartTime == TIMESTAMP
    input.Body.filterCriteria.scanAtFilters[_].latestScanStartTime == TIMESTAMP
    input.Body.filterCriteria.scanConfigurationArnFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.scanConfigurationArnFilters[_].value == STRING
    input.Body.filterCriteria.scanNameFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.scanNameFilters[_].value == STRING
    input.Body.filterCriteria.scanStatusFilters[_].comparison == enum_CisScanStatusComparison[_]
    input.Body.filterCriteria.scanStatusFilters[_].value == enum_CisScanStatus[_]
    input.Body.filterCriteria.scheduledByFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.scheduledByFilters[_].value == STRING
    input.Body.filterCriteria.targetAccountIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.targetAccountIdFilters[_].value == STRING
    input.Body.filterCriteria.targetResourceIdFilters[_].comparison == enum_CisStringComparison[_]
    input.Body.filterCriteria.targetResourceIdFilters[_].value == STRING
    input.Body.filterCriteria.targetResourceTagFilters[_].comparison == enum_TagComparison[_]
    input.Body.filterCriteria.targetResourceTagFilters[_].key == STRING
    input.Body.filterCriteria.targetResourceTagFilters[_].value == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.sortBy == enum_ListCisScansSortBy[_]
    input.Body.sortOrder == enum_CisSortOrder[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCoverage

enum_CoverageMapComparison := [ "EQUALS" ]
enum_CoverageStringComparison := [ "EQUALS", "NOT_EQUALS" ]

valid {
    input.Body.filterCriteria.accountId[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.accountId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceTags[_].comparison == enum_CoverageMapComparison[_]
    input.Body.filterCriteria.ec2InstanceTags[_].key == STRING
    input.Body.filterCriteria.ec2InstanceTags[_].value == STRING
    input.Body.filterCriteria.ecrImageTags[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.ecrImageTags[_].value == STRING
    input.Body.filterCriteria.ecrRepositoryName[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.ecrRepositoryName[_].value == STRING
    input.Body.filterCriteria.imagePulledAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.imagePulledAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionName[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.lambdaFunctionName[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionRuntime[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.lambdaFunctionRuntime[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionTags[_].comparison == enum_CoverageMapComparison[_]
    input.Body.filterCriteria.lambdaFunctionTags[_].key == STRING
    input.Body.filterCriteria.lambdaFunctionTags[_].value == STRING
    input.Body.filterCriteria.lastScannedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lastScannedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.resourceId[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.resourceId[_].value == STRING
    input.Body.filterCriteria.resourceType[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.resourceType[_].value == STRING
    input.Body.filterCriteria.scanMode[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanMode[_].value == STRING
    input.Body.filterCriteria.scanStatusCode[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanStatusCode[_].value == STRING
    input.Body.filterCriteria.scanStatusReason[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanStatusReason[_].value == STRING
    input.Body.filterCriteria.scanType[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanType[_].value == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCoverageStatistics

enum_CoverageMapComparison := [ "EQUALS" ]
enum_CoverageStringComparison := [ "EQUALS", "NOT_EQUALS" ]
enum_GroupKey := [ "SCAN_STATUS_CODE", "SCAN_STATUS_REASON", "ACCOUNT_ID", "RESOURCE_TYPE", "ECR_REPOSITORY_NAME" ]

valid {
    input.Body.filterCriteria.accountId[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.accountId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceTags[_].comparison == enum_CoverageMapComparison[_]
    input.Body.filterCriteria.ec2InstanceTags[_].key == STRING
    input.Body.filterCriteria.ec2InstanceTags[_].value == STRING
    input.Body.filterCriteria.ecrImageTags[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.ecrImageTags[_].value == STRING
    input.Body.filterCriteria.ecrRepositoryName[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.ecrRepositoryName[_].value == STRING
    input.Body.filterCriteria.imagePulledAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.imagePulledAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionName[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.lambdaFunctionName[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionRuntime[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.lambdaFunctionRuntime[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionTags[_].comparison == enum_CoverageMapComparison[_]
    input.Body.filterCriteria.lambdaFunctionTags[_].key == STRING
    input.Body.filterCriteria.lambdaFunctionTags[_].value == STRING
    input.Body.filterCriteria.lastScannedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lastScannedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.resourceId[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.resourceId[_].value == STRING
    input.Body.filterCriteria.resourceType[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.resourceType[_].value == STRING
    input.Body.filterCriteria.scanMode[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanMode[_].value == STRING
    input.Body.filterCriteria.scanStatusCode[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanStatusCode[_].value == STRING
    input.Body.filterCriteria.scanStatusReason[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanStatusReason[_].value == STRING
    input.Body.filterCriteria.scanType[_].comparison == enum_CoverageStringComparison[_]
    input.Body.filterCriteria.scanType[_].value == STRING
    input.Body.groupBy == enum_GroupKey[_]
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListDelegatedAdminAccounts

valid {
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListFilters

enum_FilterAction := [ "NONE", "SUPPRESS" ]

valid {
    input.Body.action == enum_FilterAction[_]
    input.Body.arns[_] == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListFindingAggregations

enum_AccountSortBy := [ "CRITICAL", "HIGH", "ALL" ]
enum_AggregationFindingType := [ "NETWORK_REACHABILITY", "PACKAGE_VULNERABILITY", "CODE_VULNERABILITY" ]
enum_AggregationResourceType := [ "AWS_EC2_INSTANCE", "AWS_ECR_CONTAINER_IMAGE", "AWS_LAMBDA_FUNCTION" ]
enum_AggregationType := [ "FINDING_TYPE", "PACKAGE", "TITLE", "REPOSITORY", "AMI", "AWS_EC2_INSTANCE", "AWS_ECR_CONTAINER", "IMAGE_LAYER", "ACCOUNT", "AWS_LAMBDA_FUNCTION", "LAMBDA_LAYER" ]
enum_AmiSortBy := [ "CRITICAL", "HIGH", "ALL", "AFFECTED_INSTANCES" ]
enum_AwsEcrContainerSortBy := [ "CRITICAL", "HIGH", "ALL" ]
enum_Ec2InstanceSortBy := [ "NETWORK_FINDINGS", "CRITICAL", "HIGH", "ALL" ]
enum_FindingTypeSortBy := [ "CRITICAL", "HIGH", "ALL" ]
enum_ImageLayerSortBy := [ "CRITICAL", "HIGH", "ALL" ]
enum_LambdaFunctionSortBy := [ "CRITICAL", "HIGH", "ALL" ]
enum_LambdaLayerSortBy := [ "CRITICAL", "HIGH", "ALL" ]
enum_MapComparison := [ "EQUALS" ]
enum_PackageSortBy := [ "CRITICAL", "HIGH", "ALL" ]
enum_RepositorySortBy := [ "CRITICAL", "HIGH", "ALL", "AFFECTED_IMAGES" ]
enum_SortOrder := [ "ASC", "DESC" ]
enum_StringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]
enum_TitleSortBy := [ "CRITICAL", "HIGH", "ALL" ]

valid {
    input.Body.accountIds[_].comparison == enum_StringComparison[_]
    input.Body.accountIds[_].value == STRING
    input.Body.aggregationRequest.accountAggregation.findingType == enum_AggregationFindingType[_]
    input.Body.aggregationRequest.accountAggregation.resourceType == enum_AggregationResourceType[_]
    input.Body.aggregationRequest.accountAggregation.sortBy == enum_AccountSortBy[_]
    input.Body.aggregationRequest.accountAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.amiAggregation.amis[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.amiAggregation.amis[_].value == STRING
    input.Body.aggregationRequest.amiAggregation.sortBy == enum_AmiSortBy[_]
    input.Body.aggregationRequest.amiAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.awsEcrContainerAggregation.architectures[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.awsEcrContainerAggregation.architectures[_].value == STRING
    input.Body.aggregationRequest.awsEcrContainerAggregation.imageShas[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.awsEcrContainerAggregation.imageShas[_].value == STRING
    input.Body.aggregationRequest.awsEcrContainerAggregation.imageTags[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.awsEcrContainerAggregation.imageTags[_].value == STRING
    input.Body.aggregationRequest.awsEcrContainerAggregation.repositories[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.awsEcrContainerAggregation.repositories[_].value == STRING
    input.Body.aggregationRequest.awsEcrContainerAggregation.resourceIds[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.awsEcrContainerAggregation.resourceIds[_].value == STRING
    input.Body.aggregationRequest.awsEcrContainerAggregation.sortBy == enum_AwsEcrContainerSortBy[_]
    input.Body.aggregationRequest.awsEcrContainerAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.ec2InstanceAggregation.amis[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.ec2InstanceAggregation.amis[_].value == STRING
    input.Body.aggregationRequest.ec2InstanceAggregation.instanceIds[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.ec2InstanceAggregation.instanceIds[_].value == STRING
    input.Body.aggregationRequest.ec2InstanceAggregation.instanceTags[_].comparison == enum_MapComparison[_]
    input.Body.aggregationRequest.ec2InstanceAggregation.instanceTags[_].key == STRING
    input.Body.aggregationRequest.ec2InstanceAggregation.instanceTags[_].value == STRING
    input.Body.aggregationRequest.ec2InstanceAggregation.operatingSystems[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.ec2InstanceAggregation.operatingSystems[_].value == STRING
    input.Body.aggregationRequest.ec2InstanceAggregation.sortBy == enum_Ec2InstanceSortBy[_]
    input.Body.aggregationRequest.ec2InstanceAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.findingTypeAggregation.findingType == enum_AggregationFindingType[_]
    input.Body.aggregationRequest.findingTypeAggregation.resourceType == enum_AggregationResourceType[_]
    input.Body.aggregationRequest.findingTypeAggregation.sortBy == enum_FindingTypeSortBy[_]
    input.Body.aggregationRequest.findingTypeAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.imageLayerAggregation.layerHashes[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.imageLayerAggregation.layerHashes[_].value == STRING
    input.Body.aggregationRequest.imageLayerAggregation.repositories[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.imageLayerAggregation.repositories[_].value == STRING
    input.Body.aggregationRequest.imageLayerAggregation.resourceIds[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.imageLayerAggregation.resourceIds[_].value == STRING
    input.Body.aggregationRequest.imageLayerAggregation.sortBy == enum_ImageLayerSortBy[_]
    input.Body.aggregationRequest.imageLayerAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.lambdaFunctionAggregation.functionNames[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.lambdaFunctionAggregation.functionNames[_].value == STRING
    input.Body.aggregationRequest.lambdaFunctionAggregation.functionTags[_].comparison == enum_MapComparison[_]
    input.Body.aggregationRequest.lambdaFunctionAggregation.functionTags[_].key == STRING
    input.Body.aggregationRequest.lambdaFunctionAggregation.functionTags[_].value == STRING
    input.Body.aggregationRequest.lambdaFunctionAggregation.resourceIds[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.lambdaFunctionAggregation.resourceIds[_].value == STRING
    input.Body.aggregationRequest.lambdaFunctionAggregation.runtimes[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.lambdaFunctionAggregation.runtimes[_].value == STRING
    input.Body.aggregationRequest.lambdaFunctionAggregation.sortBy == enum_LambdaFunctionSortBy[_]
    input.Body.aggregationRequest.lambdaFunctionAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.lambdaLayerAggregation.functionNames[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.lambdaLayerAggregation.functionNames[_].value == STRING
    input.Body.aggregationRequest.lambdaLayerAggregation.layerArns[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.lambdaLayerAggregation.layerArns[_].value == STRING
    input.Body.aggregationRequest.lambdaLayerAggregation.resourceIds[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.lambdaLayerAggregation.resourceIds[_].value == STRING
    input.Body.aggregationRequest.lambdaLayerAggregation.sortBy == enum_LambdaLayerSortBy[_]
    input.Body.aggregationRequest.lambdaLayerAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.packageAggregation.packageNames[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.packageAggregation.packageNames[_].value == STRING
    input.Body.aggregationRequest.packageAggregation.sortBy == enum_PackageSortBy[_]
    input.Body.aggregationRequest.packageAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.repositoryAggregation.repositories[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.repositoryAggregation.repositories[_].value == STRING
    input.Body.aggregationRequest.repositoryAggregation.sortBy == enum_RepositorySortBy[_]
    input.Body.aggregationRequest.repositoryAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.titleAggregation.findingType == enum_AggregationFindingType[_]
    input.Body.aggregationRequest.titleAggregation.resourceType == enum_AggregationResourceType[_]
    input.Body.aggregationRequest.titleAggregation.sortBy == enum_TitleSortBy[_]
    input.Body.aggregationRequest.titleAggregation.sortOrder == enum_SortOrder[_]
    input.Body.aggregationRequest.titleAggregation.titles[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.titleAggregation.titles[_].value == STRING
    input.Body.aggregationRequest.titleAggregation.vulnerabilityIds[_].comparison == enum_StringComparison[_]
    input.Body.aggregationRequest.titleAggregation.vulnerabilityIds[_].value == STRING
    input.Body.aggregationType == enum_AggregationType[_]
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListFindings

enum_MapComparison := [ "EQUALS" ]
enum_SortField := [ "AWS_ACCOUNT_ID", "FINDING_TYPE", "SEVERITY", "FIRST_OBSERVED_AT", "LAST_OBSERVED_AT", "FINDING_STATUS", "RESOURCE_TYPE", "ECR_IMAGE_PUSHED_AT", "ECR_IMAGE_REPOSITORY_NAME", "ECR_IMAGE_REGISTRY", "NETWORK_PROTOCOL", "COMPONENT_TYPE", "VULNERABILITY_ID", "VULNERABILITY_SOURCE", "INSPECTOR_SCORE", "VENDOR_SEVERITY", "EPSS_SCORE" ]
enum_SortOrder := [ "ASC", "DESC" ]
enum_StringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]

valid {
    input.Body.filterCriteria.awsAccountId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.awsAccountId[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].value == STRING
    input.Body.filterCriteria.componentId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentId[_].value == STRING
    input.Body.filterCriteria.componentType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentType[_].value == STRING
    input.Body.filterCriteria.ec2InstanceImageId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceImageId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceSubnetId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceSubnetId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceVpcId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceVpcId[_].value == STRING
    input.Body.filterCriteria.ecrImageArchitecture[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageArchitecture[_].value == STRING
    input.Body.filterCriteria.ecrImageHash[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageHash[_].value == STRING
    input.Body.filterCriteria.ecrImagePushedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImagePushedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImageRegistry[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRegistry[_].value == STRING
    input.Body.filterCriteria.ecrImageRepositoryName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRepositoryName[_].value == STRING
    input.Body.filterCriteria.ecrImageTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageTags[_].value == STRING
    input.Body.filterCriteria.epssScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.epssScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.exploitAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.exploitAvailable[_].value == STRING
    input.Body.filterCriteria.findingArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingArn[_].value == STRING
    input.Body.filterCriteria.findingStatus[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingStatus[_].value == STRING
    input.Body.filterCriteria.findingType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingType[_].value == STRING
    input.Body.filterCriteria.firstObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.firstObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.fixAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.fixAvailable[_].value == STRING
    input.Body.filterCriteria.inspectorScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.inspectorScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLayers[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionLayers[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionName[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionRuntime[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionRuntime[_].value == STRING
    input.Body.filterCriteria.lastObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lastObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.networkProtocol[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.networkProtocol[_].value == STRING
    input.Body.filterCriteria.portRange[_].beginInclusive == INTEGER
    input.Body.filterCriteria.portRange[_].endInclusive == INTEGER
    input.Body.filterCriteria.relatedVulnerabilities[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.relatedVulnerabilities[_].value == STRING
    input.Body.filterCriteria.resourceId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceId[_].value == STRING
    input.Body.filterCriteria.resourceTags[_].comparison == enum_MapComparison[_]
    input.Body.filterCriteria.resourceTags[_].key == STRING
    input.Body.filterCriteria.resourceTags[_].value == STRING
    input.Body.filterCriteria.resourceType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceType[_].value == STRING
    input.Body.filterCriteria.severity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.severity[_].value == STRING
    input.Body.filterCriteria.title[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.title[_].value == STRING
    input.Body.filterCriteria.updatedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.updatedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.vendorSeverity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vendorSeverity[_].value == STRING
    input.Body.filterCriteria.vulnerabilityId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilityId[_].value == STRING
    input.Body.filterCriteria.vulnerabilitySource[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilitySource[_].value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].architecture.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].architecture.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].epoch.lowerInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].epoch.upperInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].filePath.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].filePath.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].name.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].name.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].release.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].release.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].version.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].version.value == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.sortCriteria.field == enum_SortField[_]
    input.Body.sortCriteria.sortOrder == enum_SortOrder[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListMembers

valid {
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.Body.onlyAssociated == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTagsForResource

valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListUsageTotals

valid {
    input.Body.accountIds[_] == STRING
    input.Body.maxResults == INTEGER
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ResetEncryptionKey

enum_ResourceType := [ "AWS_EC2_INSTANCE", "AWS_ECR_CONTAINER_IMAGE", "AWS_ECR_REPOSITORY", "AWS_LAMBDA_FUNCTION" ]
enum_ScanType := [ "NETWORK", "PACKAGE", "CODE" ]

valid {
    input.Body.resourceType == enum_ResourceType[_]
    input.Body.scanType == enum_ScanType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

SearchVulnerabilities

valid {
    input.Body.filterCriteria.vulnerabilityIds[_] == STRING
    input.Body.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

SendCisSessionHealth

valid {
    input.Body.scanJobId == STRING
    input.Body.sessionToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

SendCisSessionTelemetry

enum_CisRuleStatus := [ "FAILED", "PASSED", "NOT_EVALUATED", "INFORMATIONAL", "UNKNOWN", "NOT_APPLICABLE", "ERROR" ]

valid {
    input.Body.messages[_].cisRuleDetails == BLOB
    input.Body.messages[_].ruleId == STRING
    input.Body.messages[_].status == enum_CisRuleStatus[_]
    input.Body.scanJobId == STRING
    input.Body.sessionToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

StartCisSession

valid {
    input.Body.message.sessionToken == STRING
    input.Body.scanJobId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

StopCisSession

enum_StopCisSessionStatus := [ "SUCCESS", "FAILED", "INTERRUPTED", "UNSUPPORTED_OS" ]

valid {
    input.Body.message.benchmarkProfile == STRING
    input.Body.message.benchmarkVersion == STRING
    input.Body.message.computePlatform.product == STRING
    input.Body.message.computePlatform.vendor == STRING
    input.Body.message.computePlatform.version == STRING
    input.Body.message.progress.errorChecks == INTEGER
    input.Body.message.progress.failedChecks == INTEGER
    input.Body.message.progress.informationalChecks == INTEGER
    input.Body.message.progress.notApplicableChecks == INTEGER
    input.Body.message.progress.notEvaluatedChecks == INTEGER
    input.Body.message.progress.successfulChecks == INTEGER
    input.Body.message.progress.totalChecks == INTEGER
    input.Body.message.progress.unknownChecks == INTEGER
    input.Body.message.reason == STRING
    input.Body.message.status == enum_StopCisSessionStatus[_]
    input.Body.scanJobId == STRING
    input.Body.sessionToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

TagResource

valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UntagResource

valid {
    input.ReqMap.resourceArn == STRING
    input.Qs.tagKeys[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateCisScanConfiguration

enum_CisSecurityLevel := [ "LEVEL_1", "LEVEL_2" ]
enum_Day := [ "SUN", "MON", "TUE", "WED", "THU", "FRI", "SAT" ]

valid {
    input.Body.scanConfigurationArn == STRING
    input.Body.scanName == STRING
    input.Body.schedule.daily.startTime.timeOfDay == STRING
    input.Body.schedule.daily.startTime.timezone == STRING
    input.Body.schedule.monthly.day == enum_Day[_]
    input.Body.schedule.monthly.startTime.timeOfDay == STRING
    input.Body.schedule.monthly.startTime.timezone == STRING
    input.Body.schedule.oneTime == {}
    input.Body.schedule.weekly.days[_] == enum_Day[_]
    input.Body.schedule.weekly.startTime.timeOfDay == STRING
    input.Body.schedule.weekly.startTime.timezone == STRING
    input.Body.securityLevel == enum_CisSecurityLevel[_]
    input.Body.targets.accountIds[_] == STRING
    input.Body.targets.targetResourceTags.STRING[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateConfiguration

enum_Ec2ScanMode := [ "EC2_SSM_AGENT_BASED", "EC2_HYBRID" ]
enum_EcrPullDateRescanDuration := [ "DAYS_14", "DAYS_30", "DAYS_60", "DAYS_90", "DAYS_180" ]
enum_EcrRescanDuration := [ "LIFETIME", "DAYS_30", "DAYS_180", "DAYS_14", "DAYS_60", "DAYS_90" ]

valid {
    input.Body.ec2Configuration.scanMode == enum_Ec2ScanMode[_]
    input.Body.ecrConfiguration.pullDateRescanDuration == enum_EcrPullDateRescanDuration[_]
    input.Body.ecrConfiguration.rescanDuration == enum_EcrRescanDuration[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateEc2DeepInspectionConfiguration

valid {
    input.Body.activateDeepInspection == BOOLEAN
    input.Body.packagePaths[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateEncryptionKey

enum_ResourceType := [ "AWS_EC2_INSTANCE", "AWS_ECR_CONTAINER_IMAGE", "AWS_ECR_REPOSITORY", "AWS_LAMBDA_FUNCTION" ]
enum_ScanType := [ "NETWORK", "PACKAGE", "CODE" ]

valid {
    input.Body.kmsKeyId == STRING
    input.Body.resourceType == enum_ResourceType[_]
    input.Body.scanType == enum_ScanType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateFilter

enum_FilterAction := [ "NONE", "SUPPRESS" ]
enum_MapComparison := [ "EQUALS" ]
enum_StringComparison := [ "EQUALS", "PREFIX", "NOT_EQUALS" ]

valid {
    input.Body.action == enum_FilterAction[_]
    input.Body.description == STRING
    input.Body.filterArn == STRING
    input.Body.filterCriteria.awsAccountId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.awsAccountId[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorName[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityDetectorTags[_].value == STRING
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.codeVulnerabilityFilePath[_].value == STRING
    input.Body.filterCriteria.componentId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentId[_].value == STRING
    input.Body.filterCriteria.componentType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.componentType[_].value == STRING
    input.Body.filterCriteria.ec2InstanceImageId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceImageId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceSubnetId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceSubnetId[_].value == STRING
    input.Body.filterCriteria.ec2InstanceVpcId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ec2InstanceVpcId[_].value == STRING
    input.Body.filterCriteria.ecrImageArchitecture[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageArchitecture[_].value == STRING
    input.Body.filterCriteria.ecrImageHash[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageHash[_].value == STRING
    input.Body.filterCriteria.ecrImagePushedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImagePushedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.ecrImageRegistry[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRegistry[_].value == STRING
    input.Body.filterCriteria.ecrImageRepositoryName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageRepositoryName[_].value == STRING
    input.Body.filterCriteria.ecrImageTags[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.ecrImageTags[_].value == STRING
    input.Body.filterCriteria.epssScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.epssScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.exploitAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.exploitAvailable[_].value == STRING
    input.Body.filterCriteria.findingArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingArn[_].value == STRING
    input.Body.filterCriteria.findingStatus[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingStatus[_].value == STRING
    input.Body.filterCriteria.findingType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.findingType[_].value == STRING
    input.Body.filterCriteria.firstObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.firstObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.fixAvailable[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.fixAvailable[_].value == STRING
    input.Body.filterCriteria.inspectorScore[_].lowerInclusive == DOUBLE
    input.Body.filterCriteria.inspectorScore[_].upperInclusive == DOUBLE
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionExecutionRoleArn[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLastModifiedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.lambdaFunctionLayers[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionLayers[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionName[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionName[_].value == STRING
    input.Body.filterCriteria.lambdaFunctionRuntime[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.lambdaFunctionRuntime[_].value == STRING
    input.Body.filterCriteria.lastObservedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.lastObservedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.networkProtocol[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.networkProtocol[_].value == STRING
    input.Body.filterCriteria.portRange[_].beginInclusive == INTEGER
    input.Body.filterCriteria.portRange[_].endInclusive == INTEGER
    input.Body.filterCriteria.relatedVulnerabilities[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.relatedVulnerabilities[_].value == STRING
    input.Body.filterCriteria.resourceId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceId[_].value == STRING
    input.Body.filterCriteria.resourceTags[_].comparison == enum_MapComparison[_]
    input.Body.filterCriteria.resourceTags[_].key == STRING
    input.Body.filterCriteria.resourceTags[_].value == STRING
    input.Body.filterCriteria.resourceType[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.resourceType[_].value == STRING
    input.Body.filterCriteria.severity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.severity[_].value == STRING
    input.Body.filterCriteria.title[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.title[_].value == STRING
    input.Body.filterCriteria.updatedAt[_].endInclusive == TIMESTAMP
    input.Body.filterCriteria.updatedAt[_].startInclusive == TIMESTAMP
    input.Body.filterCriteria.vendorSeverity[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vendorSeverity[_].value == STRING
    input.Body.filterCriteria.vulnerabilityId[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilityId[_].value == STRING
    input.Body.filterCriteria.vulnerabilitySource[_].comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerabilitySource[_].value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].architecture.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].architecture.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].epoch.lowerInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].epoch.upperInclusive == DOUBLE
    input.Body.filterCriteria.vulnerablePackages[_].filePath.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].filePath.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].name.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].name.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].release.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].release.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLambdaLayerArn.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].sourceLayerHash.value == STRING
    input.Body.filterCriteria.vulnerablePackages[_].version.comparison == enum_StringComparison[_]
    input.Body.filterCriteria.vulnerablePackages[_].version.value == STRING
    input.Body.name == STRING
    input.Body.reason == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateOrgEc2DeepInspectionConfiguration

valid {
    input.Body.orgPackagePaths[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateOrganizationConfiguration

valid {
    input.Body.autoEnable.ec2 == BOOLEAN
    input.Body.autoEnable.ecr == BOOLEAN
    input.Body.autoEnable.lambda == BOOLEAN
    input.Body.autoEnable.lambdaCode == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

Updated 9 days ago