MICROSOFT.DATABRICKS

AccessConnectors_CreateOrUpdate

enum_ManagedServiceIdentityType := [ "None", "SystemAssigned", "UserAssigned", "SystemAssigned,UserAssigned" ]

valid {
    input.Body.identity.type == enum_ManagedServiceIdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.Body.properties == {}
    input.Body.tags.STRING == STRING
    input.Body.location == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.connectorName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

AccessConnectors_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.connectorName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

AccessConnectors_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.connectorName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

AccessConnectors_ListByResourceGroup

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

AccessConnectors_ListBySubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

AccessConnectors_Update

enum_ManagedServiceIdentityType := [ "None", "SystemAssigned", "UserAssigned", "SystemAssigned,UserAssigned" ]

valid {
    input.Body.tags.STRING == STRING
    input.Body.identity.type == enum_ManagedServiceIdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.connectorName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Operations_List

valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

OutboundNetworkDependenciesEndpoints_List

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateEndpointConnections_Create

enum_PrivateLinkServiceConnectionStateStatus := [ "Pending", "Approved", "Rejected", "Disconnected" ]

valid {
    input.Body.properties.privateEndpoint == {}
    input.Body.properties.groupIds[_] == STRING
    input.Body.properties.privateLinkServiceConnectionState.status == enum_PrivateLinkServiceConnectionStateStatus[_]
    input.Body.properties.privateLinkServiceConnectionState.description == STRING
    input.Body.properties.privateLinkServiceConnectionState.actionsRequired == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.privateEndpointConnectionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateEndpointConnections_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.privateEndpointConnectionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateEndpointConnections_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.privateEndpointConnectionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateEndpointConnections_List

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateLinkResources_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.groupId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateLinkResources_List

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Workspaces_CreateOrUpdate

enum_AutomaticClusterUpdateDefinitionValue := [ "Enabled", "Disabled" ]
enum_ComplianceSecurityProfileDefinitionValue := [ "Enabled", "Disabled" ]
enum_ComplianceStandardDefinition := [ "NONE", "HIPAA", "PCI_DSS" ]
enum_DefaultCatalogPropertiesInitialType := [ "HiveMetastore", "UnityCatalog" ]
enum_EncryptionKeySource := [ "Default", "Microsoft.Keyvault" ]
enum_EncryptionV2KeySource := [ "Microsoft.Keyvault" ]
enum_EnhancedSecurityMonitoringDefinitionValue := [ "Enabled", "Disabled" ]
enum_ManagedDiskEncryptionKeySource := [ "Microsoft.Keyvault" ]
enum_WorkspacePropertiesPublicNetworkAccess := [ "Enabled", "Disabled" ]
enum_WorkspacePropertiesRequiredNsgRules := [ "AllRules", "NoAzureDatabricksRules", "NoAzureServiceRules" ]

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.parameters.amlWorkspaceId.value == STRING
    input.Body.properties.parameters.customVirtualNetworkId.value == STRING
    input.Body.properties.parameters.customPublicSubnetName.value == STRING
    input.Body.properties.parameters.customPrivateSubnetName.value == STRING
    input.Body.properties.parameters.enableNoPublicIp.value == BOOLEAN
    input.Body.properties.parameters.loadBalancerBackendPoolName.value == STRING
    input.Body.properties.parameters.loadBalancerId.value == STRING
    input.Body.properties.parameters.natGatewayName.value == STRING
    input.Body.properties.parameters.publicIpName.value == STRING
    input.Body.properties.parameters.prepareEncryption.value == BOOLEAN
    input.Body.properties.parameters.encryption.value.keySource == enum_EncryptionKeySource[_]
    input.Body.properties.parameters.encryption.value.KeyName == STRING
    input.Body.properties.parameters.encryption.value.keyversion == STRING
    input.Body.properties.parameters.encryption.value.keyvaulturi == STRING
    input.Body.properties.parameters.requireInfrastructureEncryption.value == BOOLEAN
    input.Body.properties.parameters.storageAccountName.value == STRING
    input.Body.properties.parameters.storageAccountSkuName.value == STRING
    input.Body.properties.parameters.vnetAddressPrefix.value == STRING
    input.Body.properties.uiDefinitionUri == STRING
    input.Body.properties.authorizations[_].principalId == STRING
    input.Body.properties.authorizations[_].roleDefinitionId == STRING
    input.Body.properties.createdBy == {}
    input.Body.properties.updatedBy == {}
    input.Body.properties.storageAccountIdentity == {}
    input.Body.properties.managedDiskIdentity == {}
    input.Body.properties.encryption.entities.managedServices.keySource == enum_EncryptionV2KeySource[_]
    input.Body.properties.encryption.entities.managedServices.keyVaultProperties.keyVaultUri == STRING
    input.Body.properties.encryption.entities.managedServices.keyVaultProperties.keyName == STRING
    input.Body.properties.encryption.entities.managedServices.keyVaultProperties.keyVersion == STRING
    input.Body.properties.encryption.entities.managedDisk.keySource == enum_ManagedDiskEncryptionKeySource[_]
    input.Body.properties.encryption.entities.managedDisk.keyVaultProperties.keyVaultUri == STRING
    input.Body.properties.encryption.entities.managedDisk.keyVaultProperties.keyName == STRING
    input.Body.properties.encryption.entities.managedDisk.keyVaultProperties.keyVersion == STRING
    input.Body.properties.encryption.entities.managedDisk.rotationToLatestKeyVersionEnabled == BOOLEAN
    input.Body.properties.enhancedSecurityCompliance.automaticClusterUpdate.value == enum_AutomaticClusterUpdateDefinitionValue[_]
    input.Body.properties.enhancedSecurityCompliance.complianceSecurityProfile.complianceStandards[_] == enum_ComplianceStandardDefinition[_]
    input.Body.properties.enhancedSecurityCompliance.complianceSecurityProfile.value == enum_ComplianceSecurityProfileDefinitionValue[_]
    input.Body.properties.enhancedSecurityCompliance.enhancedSecurityMonitoring.value == enum_EnhancedSecurityMonitoringDefinitionValue[_]
    input.Body.properties.publicNetworkAccess == enum_WorkspacePropertiesPublicNetworkAccess[_]
    input.Body.properties.requiredNsgRules == enum_WorkspacePropertiesRequiredNsgRules[_]
    input.Body.properties.defaultCatalog.initialType == enum_DefaultCatalogPropertiesInitialType[_]
    input.Body.properties.defaultCatalog.initialName == STRING
    input.Body.sku.name == STRING
    input.Body.sku.tier == STRING
    input.Body.tags.STRING == STRING
    input.Body.location == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Workspaces_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.retainUcData == BOOLEAN
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Workspaces_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Workspaces_ListByResourceGroup

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Workspaces_ListBySubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Workspaces_Update

valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

vNetPeering_CreateOrUpdate

valid {
    input.Body.properties.allowVirtualNetworkAccess == BOOLEAN
    input.Body.properties.allowForwardedTraffic == BOOLEAN
    input.Body.properties.allowGatewayTransit == BOOLEAN
    input.Body.properties.useRemoteGateways == BOOLEAN
    input.Body.properties.databricksVirtualNetwork.id == STRING
    input.Body.properties.databricksAddressSpace.addressPrefixes[_] == STRING
    input.Body.properties.remoteVirtualNetwork.id == STRING
    input.Body.properties.remoteAddressSpace.addressPrefixes[_] == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.peeringName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

vNetPeering_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.peeringName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

vNetPeering_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.peeringName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

vNetPeering_ListByWorkspace

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.workspaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}