MICROSOFT.EVENTHUB

ApplicationGroup_CreateOrUpdateApplicationGroup

enum_ApplicationGroupPolicyType := [ "ThrottlingPolicy" ]

valid {
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.clientAppGroupIdentifier == STRING
    input.Body.properties.policies[_].name == STRING
    input.Body.properties.policies[_].type == enum_ApplicationGroupPolicyType[_]
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.applicationGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationGroup_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.applicationGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationGroup_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.applicationGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationGroup_ListByNamespace

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Clusters_CreateOrUpdate

enum_ClusterSkuName := [ "Dedicated" ]

valid {
    input.Body.sku.name == enum_ClusterSkuName[_]
    input.Body.sku.capacity == INTEGER
    input.Body.properties.supportsScaling == BOOLEAN
    input.Body.location == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.clusterName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Clusters_Delete

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.clusterName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Clusters_Get

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.clusterName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Clusters_ListAvailableClusterRegion

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Clusters_ListByResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Clusters_ListBySubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Clusters_ListNamespaces

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.clusterName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Clusters_Update

enum_ClusterSkuName := [ "Dedicated" ]

valid {
    input.Body.sku.name == enum_ClusterSkuName[_]
    input.Body.sku.capacity == INTEGER
    input.Body.properties.supportsScaling == BOOLEAN
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.clusterName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Configuration_Get

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.clusterName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Configuration_Patch

valid {
    input.Body.settings.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.clusterName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ConsumerGroups_CreateOrUpdate

valid {
    input.Body.properties.userMetadata == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.consumerGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ConsumerGroups_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.consumerGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ConsumerGroups_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.consumerGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ConsumerGroups_ListByEventHub

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$skip == INTEGER
    input.Qs.$top == INTEGER
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_BreakPairing

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_CheckNameAvailability

valid {
    input.Body.name == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_CreateOrUpdate

valid {
    input.Body.properties.partnerNamespace == STRING
    input.Body.properties.alternateName == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_FailOver

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_GetAuthorizationRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_List

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_ListAuthorizationRules

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

DisasterRecoveryConfigs_ListKeys

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.alias == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_CreateOrUpdate

enum_CaptureDescriptionEncoding := [ "Avro", "AvroDeflate" ]
enum_CaptureIdentityType := [ "SystemAssigned", "UserAssigned" ]
enum_EventhubPropertiesMessageTimestampType := [ "AppendTime", "CreateTime" ]
enum_EventhubPropertiesStatus := [ "Active", "Disabled", "Restoring", "SendDisabled", "ReceiveDisabled", "Creating", "Deleting", "Renaming", "Unknown" ]
enum_RetentionDescriptionCleanupPolicy := [ "Delete", "Compact", "Delete,Compact" ]

valid {
    input.Body.properties.messageRetentionInDays == INTEGER
    input.Body.properties.partitionCount == INTEGER
    input.Body.properties.status == enum_EventhubPropertiesStatus[_]
    input.Body.properties.captureDescription.enabled == BOOLEAN
    input.Body.properties.captureDescription.encoding == enum_CaptureDescriptionEncoding[_]
    input.Body.properties.captureDescription.intervalInSeconds == INTEGER
    input.Body.properties.captureDescription.sizeLimitInBytes == INTEGER
    input.Body.properties.captureDescription.destination.name == STRING
    input.Body.properties.captureDescription.destination.identity.type == enum_CaptureIdentityType[_]
    input.Body.properties.captureDescription.destination.identity.userAssignedIdentity == STRING
    input.Body.properties.captureDescription.destination.properties.storageAccountResourceId == STRING
    input.Body.properties.captureDescription.destination.properties.blobContainer == STRING
    input.Body.properties.captureDescription.destination.properties.archiveNameFormat == STRING
    input.Body.properties.captureDescription.destination.properties.dataLakeSubscriptionId == STRING
    input.Body.properties.captureDescription.destination.properties.dataLakeAccountName == STRING
    input.Body.properties.captureDescription.destination.properties.dataLakeFolderPath == STRING
    input.Body.properties.captureDescription.skipEmptyArchives == BOOLEAN
    input.Body.properties.retentionDescription.cleanupPolicy == enum_RetentionDescriptionCleanupPolicy[_]
    input.Body.properties.retentionDescription.retentionTimeInHours == INTEGER
    input.Body.properties.retentionDescription.minCompactionLagInMins == INTEGER
    input.Body.properties.retentionDescription.tombstoneRetentionTimeInHours == INTEGER
    input.Body.properties.messageTimestampType == enum_EventhubPropertiesMessageTimestampType[_]
    input.Body.properties.userMetadata == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_CreateOrUpdateAuthorizationRule

enum_AuthorizationRulePropertiesRights := [ "Manage", "Send", "Listen" ]

valid {
    input.Body.properties.rights[_] == enum_AuthorizationRulePropertiesRights[_]
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_DeleteAuthorizationRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_GetAuthorizationRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_ListAuthorizationRules

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_ListByNamespace

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$skip == INTEGER
    input.Qs.$top == INTEGER
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_ListKeys

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_PostAuthorizationRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

EventHubs_RegenerateKeys

enum_RegenerateAccessKeyParametersKeyType := [ "PrimaryKey", "SecondaryKey" ]

valid {
    input.Body.keyType == enum_RegenerateAccessKeyParametersKeyType[_]
    input.Body.key == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.eventHubName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_CheckNameAvailability

valid {
    input.Body.name == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Namespaces_CheckNameSpaceAvailability

valid {
    input.Body.name == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Namespaces_CreateOrUpdate

enum_ConnectionStateStatus := [ "Pending", "Approved", "Rejected", "Disconnected" ]
enum_EHNamespacePropertiesMinimumTlsVersion := [ "1.0", "1.1", "1.2" ]
enum_EHNamespacePropertiesPublicNetworkAccess := [ "Enabled", "Disabled", "SecuredByPerimeter" ]
enum_EncryptionKeySource := [ "Microsoft.KeyVault" ]
enum_IdentityType := [ "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", "None" ]
enum_NamespaceReplicaLocationRoleType := [ "Primary", "Secondary" ]
enum_PrivateEndpointConnectionPropertiesProvisioningState := [ "Creating", "Updating", "Deleting", "Succeeded", "Canceled", "Failed" ]
enum_SkuName := [ "Basic", "Standard", "Premium" ]
enum_SkuTier := [ "Basic", "Standard", "Premium" ]

valid {
    input.Body.sku.name == enum_SkuName[_]
    input.Body.sku.tier == enum_SkuTier[_]
    input.Body.sku.capacity == INTEGER
    input.Body.identity.type == enum_IdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.Body.properties.minimumTlsVersion == enum_EHNamespacePropertiesMinimumTlsVersion[_]
    input.Body.properties.clusterArmId == STRING
    input.Body.properties.isAutoInflateEnabled == BOOLEAN
    input.Body.properties.publicNetworkAccess == enum_EHNamespacePropertiesPublicNetworkAccess[_]
    input.Body.properties.maximumThroughputUnits == INTEGER
    input.Body.properties.kafkaEnabled == BOOLEAN
    input.Body.properties.zoneRedundant == BOOLEAN
    input.Body.properties.encryption.keyVaultProperties[_].keyName == STRING
    input.Body.properties.encryption.keyVaultProperties[_].keyVaultUri == STRING
    input.Body.properties.encryption.keyVaultProperties[_].keyVersion == STRING
    input.Body.properties.encryption.keyVaultProperties[_].identity.userAssignedIdentity == STRING
    input.Body.properties.encryption.keySource == enum_EncryptionKeySource[_]
    input.Body.properties.encryption.requireInfrastructureEncryption == BOOLEAN
    input.Body.properties.privateEndpointConnections[_].properties.privateEndpoint.id == STRING
    input.Body.properties.privateEndpointConnections[_].properties.privateLinkServiceConnectionState.status == enum_ConnectionStateStatus[_]
    input.Body.properties.privateEndpointConnections[_].properties.privateLinkServiceConnectionState.description == STRING
    input.Body.properties.privateEndpointConnections[_].properties.provisioningState == enum_PrivateEndpointConnectionPropertiesProvisioningState[_]
    input.Body.properties.disableLocalAuth == BOOLEAN
    input.Body.properties.alternateName == STRING
    input.Body.properties.geoDataReplication.maxReplicationLagDurationInSeconds == INTEGER
    input.Body.properties.geoDataReplication.locations[_].locationName == STRING
    input.Body.properties.geoDataReplication.locations[_].roleType == enum_NamespaceReplicaLocationRoleType[_]
    input.Body.properties.geoDataReplication.locations[_].clusterArmId == STRING
    input.Body.location == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_CreateOrUpdateAuthorizationRule

enum_AuthorizationRulePropertiesRights := [ "Manage", "Send", "Listen" ]

valid {
    input.Body.properties.rights[_] == enum_AuthorizationRulePropertiesRights[_]
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_CreateOrUpdateIpFilterRule

enum_IpFilterRulePropertiesAction := [ "Accept", "Reject" ]

valid {
    input.Body.properties.ipMask == STRING
    input.Body.properties.action == enum_IpFilterRulePropertiesAction[_]
    input.Body.properties.filterName == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.ipFilterRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_CreateOrUpdateNetworkRuleSet

enum_NWRuleSetIpRulesAction := [ "Allow" ]
enum_NetworkRuleSetPropertiesDefaultAction := [ "Allow", "Deny" ]
enum_NetworkRuleSetPropertiesPublicNetworkAccess := [ "Enabled", "Disabled", "SecuredByPerimeter" ]

valid {
    input.Body.properties.trustedServiceAccessEnabled == BOOLEAN
    input.Body.properties.defaultAction == enum_NetworkRuleSetPropertiesDefaultAction[_]
    input.Body.properties.virtualNetworkRules[_].subnet.id == STRING
    input.Body.properties.virtualNetworkRules[_].ignoreMissingVnetServiceEndpoint == BOOLEAN
    input.Body.properties.ipRules[_].ipMask == STRING
    input.Body.properties.ipRules[_].action == enum_NWRuleSetIpRulesAction[_]
    input.Body.properties.publicNetworkAccess == enum_NetworkRuleSetPropertiesPublicNetworkAccess[_]
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_CreateOrUpdateVirtualNetworkRule

valid {
    input.Body.properties.virtualNetworkSubnetId == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.virtualNetworkRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_DeleteAuthorizationRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_DeleteIpFilterRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.ipFilterRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_DeleteVirtualNetworkRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.virtualNetworkRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_Failover

valid {
    input.Body.properties.primaryLocation == STRING
    input.Body.properties.maximumGracePeriodInMins == INTEGER
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_GetAuthorizationRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_GetIpFilterRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.ipFilterRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_GetMessagingPlan

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_GetNetworkRuleSet

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_GetVirtualNetworkRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.virtualNetworkRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_List

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Namespaces_ListAuthorizationRules

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_ListByResourceGroup

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_ListIPFilterRules

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_ListKeys

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_ListNetworkRuleSet

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_ListPostAuthorizationRules

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_ListVirtualNetworkRules

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_PostAuthorizationRule

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_RegenerateKeys

enum_RegenerateAccessKeyParametersKeyType := [ "PrimaryKey", "SecondaryKey" ]

valid {
    input.Body.keyType == enum_RegenerateAccessKeyParametersKeyType[_]
    input.Body.key == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.authorizationRuleName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Namespaces_Update

enum_ConnectionStateStatus := [ "Pending", "Approved", "Rejected", "Disconnected" ]
enum_EHNamespacePropertiesMinimumTlsVersion := [ "1.0", "1.1", "1.2" ]
enum_EHNamespacePropertiesPublicNetworkAccess := [ "Enabled", "Disabled", "SecuredByPerimeter" ]
enum_EncryptionKeySource := [ "Microsoft.KeyVault" ]
enum_IdentityType := [ "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", "None" ]
enum_NamespaceReplicaLocationRoleType := [ "Primary", "Secondary" ]
enum_PrivateEndpointConnectionPropertiesProvisioningState := [ "Creating", "Updating", "Deleting", "Succeeded", "Canceled", "Failed" ]
enum_SkuName := [ "Basic", "Standard", "Premium" ]
enum_SkuTier := [ "Basic", "Standard", "Premium" ]

valid {
    input.Body.sku.name == enum_SkuName[_]
    input.Body.sku.tier == enum_SkuTier[_]
    input.Body.sku.capacity == INTEGER
    input.Body.identity.type == enum_IdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.Body.properties.minimumTlsVersion == enum_EHNamespacePropertiesMinimumTlsVersion[_]
    input.Body.properties.clusterArmId == STRING
    input.Body.properties.isAutoInflateEnabled == BOOLEAN
    input.Body.properties.publicNetworkAccess == enum_EHNamespacePropertiesPublicNetworkAccess[_]
    input.Body.properties.maximumThroughputUnits == INTEGER
    input.Body.properties.kafkaEnabled == BOOLEAN
    input.Body.properties.zoneRedundant == BOOLEAN
    input.Body.properties.encryption.keyVaultProperties[_].keyName == STRING
    input.Body.properties.encryption.keyVaultProperties[_].keyVaultUri == STRING
    input.Body.properties.encryption.keyVaultProperties[_].keyVersion == STRING
    input.Body.properties.encryption.keyVaultProperties[_].identity.userAssignedIdentity == STRING
    input.Body.properties.encryption.keySource == enum_EncryptionKeySource[_]
    input.Body.properties.encryption.requireInfrastructureEncryption == BOOLEAN
    input.Body.properties.privateEndpointConnections[_].properties.privateEndpoint.id == STRING
    input.Body.properties.privateEndpointConnections[_].properties.privateLinkServiceConnectionState.status == enum_ConnectionStateStatus[_]
    input.Body.properties.privateEndpointConnections[_].properties.privateLinkServiceConnectionState.description == STRING
    input.Body.properties.privateEndpointConnections[_].properties.provisioningState == enum_PrivateEndpointConnectionPropertiesProvisioningState[_]
    input.Body.properties.disableLocalAuth == BOOLEAN
    input.Body.properties.alternateName == STRING
    input.Body.properties.geoDataReplication.maxReplicationLagDurationInSeconds == INTEGER
    input.Body.properties.geoDataReplication.locations[_].locationName == STRING
    input.Body.properties.geoDataReplication.locations[_].roleType == enum_NamespaceReplicaLocationRoleType[_]
    input.Body.properties.geoDataReplication.locations[_].clusterArmId == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

NetworkSecurityPerimeterConfiguration_List

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

NetworkSecurityPerimeterConfigurations_CreateOrUpdate

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.resourceAssociationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Operations_List

valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PrivateEndpointConnections_CreateOrUpdate

enum_ConnectionStateStatus := [ "Pending", "Approved", "Rejected", "Disconnected" ]
enum_PrivateEndpointConnectionPropertiesProvisioningState := [ "Creating", "Updating", "Deleting", "Succeeded", "Canceled", "Failed" ]

valid {
    input.Body.properties.privateEndpoint.id == STRING
    input.Body.properties.privateLinkServiceConnectionState.status == enum_ConnectionStateStatus[_]
    input.Body.properties.privateLinkServiceConnectionState.description == STRING
    input.Body.properties.provisioningState == enum_PrivateEndpointConnectionPropertiesProvisioningState[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.privateEndpointConnectionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateEndpointConnections_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.privateEndpointConnectionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateEndpointConnections_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.privateEndpointConnectionName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateEndpointConnections_List

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PrivateLinkResources_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Regions_ListBySku

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.sku == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

SchemaRegistry_CreateOrUpdate

enum_SchemaGroupPropertiesSchemaCompatibility := [ "None", "Backward", "Forward" ]
enum_SchemaGroupPropertiesSchemaType := [ "Unknown", "Avro", "ProtoBuf", "Json" ]

valid {
    input.Body.properties.groupProperties.STRING == STRING
    input.Body.properties.schemaCompatibility == enum_SchemaGroupPropertiesSchemaCompatibility[_]
    input.Body.properties.schemaType == enum_SchemaGroupPropertiesSchemaType[_]
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.schemaGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

SchemaRegistry_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.schemaGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

SchemaRegistry_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.schemaGroupName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

SchemaRegistry_ListByNamespace

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.namespaceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$skip == INTEGER
    input.Qs.$top == INTEGER
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}