Guides

MICROSOFT.POLICYINSIGHTS

docs.microsoft.com
Azure documentation

Attestations_CreateOrUpdateAtResource

enum_AttestationPropertiesComplianceState := [ "Compliant", "NonCompliant", "Unknown" ]

valid {
    input.Body.properties.policyAssignmentId == STRING
    input.Body.properties.policyDefinitionReferenceId == STRING
    input.Body.properties.complianceState == enum_AttestationPropertiesComplianceState[_]
    input.Body.properties.expiresOn == STRING
    input.Body.properties.owner == STRING
    input.Body.properties.comments == STRING
    input.Body.properties.evidence[_].description == STRING
    input.Body.properties.evidence[_].sourceUri == STRING
    input.Body.properties.assessmentDate == STRING
    input.Body.properties.metadata.STRING == STRING
    input.ReqMap.resourceId == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Attestations_CreateOrUpdateAtResourceGroup

enum_AttestationPropertiesComplianceState := [ "Compliant", "NonCompliant", "Unknown" ]

valid {
    input.Body.properties.policyAssignmentId == STRING
    input.Body.properties.policyDefinitionReferenceId == STRING
    input.Body.properties.complianceState == enum_AttestationPropertiesComplianceState[_]
    input.Body.properties.expiresOn == STRING
    input.Body.properties.owner == STRING
    input.Body.properties.comments == STRING
    input.Body.properties.evidence[_].description == STRING
    input.Body.properties.evidence[_].sourceUri == STRING
    input.Body.properties.assessmentDate == STRING
    input.Body.properties.metadata.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Attestations_CreateOrUpdateAtSubscription

enum_AttestationPropertiesComplianceState := [ "Compliant", "NonCompliant", "Unknown" ]

valid {
    input.Body.properties.policyAssignmentId == STRING
    input.Body.properties.policyDefinitionReferenceId == STRING
    input.Body.properties.complianceState == enum_AttestationPropertiesComplianceState[_]
    input.Body.properties.expiresOn == STRING
    input.Body.properties.owner == STRING
    input.Body.properties.comments == STRING
    input.Body.properties.evidence[_].description == STRING
    input.Body.properties.evidence[_].sourceUri == STRING
    input.Body.properties.assessmentDate == STRING
    input.Body.properties.metadata.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Attestations_DeleteAtResource

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Attestations_DeleteAtResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Attestations_DeleteAtSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Attestations_GetAtResource

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Attestations_GetAtResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Attestations_GetAtSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.attestationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Attestations_ListForResource

valid {
    input.ReqMap.resourceId == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Attestations_ListForResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Attestations_ListForSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

ComponentPolicyStates_ListQueryResultsForPolicyDefinition

enum_authorizationNamespace := [ "Microsoft.Authorization" ]
enum_componentPolicyStatesResource := [ "latest" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespace[_]
    input.ReqMap.policyDefinitionName == STRING
    input.ReqMap.componentPolicyStatesResource == enum_componentPolicyStatesResource[_]
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

ComponentPolicyStates_ListQueryResultsForResource

enum_componentPolicyStatesResource := [ "latest" ]

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.componentPolicyStatesResource == enum_componentPolicyStatesResource[_]
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$expand == STRING
    input.ProviderMetadata.Region == STRING
}

ComponentPolicyStates_ListQueryResultsForResourceGroup

enum_componentPolicyStatesResource := [ "latest" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.componentPolicyStatesResource == enum_componentPolicyStatesResource[_]
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ComponentPolicyStates_ListQueryResultsForResourceGroupLevelPolicyAssignment

enum_authorizationNamespace := [ "Microsoft.Authorization" ]
enum_componentPolicyStatesResource := [ "latest" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespace[_]
    input.ReqMap.policyAssignmentName == STRING
    input.ReqMap.componentPolicyStatesResource == enum_componentPolicyStatesResource[_]
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ComponentPolicyStates_ListQueryResultsForSubscription

enum_componentPolicyStatesResource := [ "latest" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.componentPolicyStatesResource == enum_componentPolicyStatesResource[_]
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

ComponentPolicyStates_ListQueryResultsForSubscriptionLevelPolicyAssignment

enum_authorizationNamespace := [ "Microsoft.Authorization" ]
enum_componentPolicyStatesResource := [ "latest" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespace[_]
    input.ReqMap.policyAssignmentName == STRING
    input.ReqMap.componentPolicyStatesResource == enum_componentPolicyStatesResource[_]
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Operations_List

valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyEvents_GetMetadata

valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyEvents_ListQueryResultsForManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]
enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyEvents_ListQueryResultsForPolicyDefinition

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyDefinitionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyEvents_ListQueryResultsForPolicySetDefinition

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policySetDefinitionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyEvents_ListQueryResultsForResource

enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.resourceId == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$expand == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyEvents_ListQueryResultsForResourceGroup

enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyEvents_ListQueryResultsForResourceGroupLevelPolicyAssignment

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyAssignmentName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyEvents_ListQueryResultsForSubscription

enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyEvents_ListQueryResultsForSubscriptionLevelPolicyAssignment

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyEventsResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyEventsResource == enum_policyEventsResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyAssignmentName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyEvents_NextLink

valid {
    input.ReqMap.nextLink == STRING
    input.Qs.api-version == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyMetadata_GetResource

valid {
    input.ReqMap.resourceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyMetadata_List

valid {
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.ProviderMetadata.Region == STRING
}

PolicyRestrictions_CheckAtManagementGroupScope

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]

valid {
    input.Body.resourceDetails.resourceContent.STRING == STRING
    input.Body.resourceDetails.apiVersion == STRING
    input.Body.resourceDetails.scope == STRING
    input.Body.pendingFields[_].field == STRING
    input.Body.pendingFields[_].values[_] == STRING
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyRestrictions_CheckAtResourceGroupScope

valid {
    input.Body.resourceDetails.resourceContent.STRING == STRING
    input.Body.resourceDetails.apiVersion == STRING
    input.Body.resourceDetails.scope == STRING
    input.Body.pendingFields[_].field == STRING
    input.Body.pendingFields[_].values[_] == STRING
    input.Body.includeAuditEffect == BOOLEAN
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyRestrictions_CheckAtSubscriptionScope

valid {
    input.Body.resourceDetails.resourceContent.STRING == STRING
    input.Body.resourceDetails.apiVersion == STRING
    input.Body.resourceDetails.scope == STRING
    input.Body.pendingFields[_].field == STRING
    input.Body.pendingFields[_].values[_] == STRING
    input.Body.includeAuditEffect == BOOLEAN
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_GetMetadata

valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyStates_ListQueryResultsForManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]
enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyStates_ListQueryResultsForPolicyDefinition

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyDefinitionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_ListQueryResultsForPolicySetDefinition

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policySetDefinitionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_ListQueryResultsForResource

enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.resourceId == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$expand == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyStates_ListQueryResultsForResourceGroup

enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyStates_ListQueryResultsForResourceGroupLevelPolicyAssignment

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyAssignmentName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyStates_ListQueryResultsForSubscription

enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_ListQueryResultsForSubscriptionLevelPolicyAssignment

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesResourceParameter := [ "default", "latest" ]

valid {
    input.ReqMap.policyStatesResource == enum_policyStatesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyAssignmentName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$orderby == STRING
    input.Qs.$select == STRING
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.Qs.$apply == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_NextLink

valid {
    input.ReqMap.nextLink == STRING
    input.Qs.api-version == STRING
    input.Qs.$skiptoken == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyStates_SummarizeForManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]
enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyStates_SummarizeForPolicyDefinition

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyDefinitionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_SummarizeForPolicySetDefinition

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policySetDefinitionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_SummarizeForResource

enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.resourceId == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyStates_SummarizeForResourceGroup

enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyStates_SummarizeForResourceGroupLevelPolicyAssignment

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyAssignmentName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyStates_SummarizeForSubscription

enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_SummarizeForSubscriptionLevelPolicyAssignment

enum_authorizationNamespaceParameter := [ "Microsoft.Authorization" ]
enum_policyStatesSummaryResourceParameter := [ "latest" ]

valid {
    input.ReqMap.policyStatesSummaryResource == enum_policyStatesSummaryResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.authorizationNamespace == enum_authorizationNamespaceParameter[_]
    input.ReqMap.policyAssignmentName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.Qs.$from == STRING
    input.Qs.$to == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyStates_TriggerResourceGroupEvaluation

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyStates_TriggerSubscriptionEvaluation

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

PolicyTrackedResources_ListQueryResultsForManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]
enum_policyTrackedResourcesResourceParameter := [ "default" ]

valid {
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupName == STRING
    input.ReqMap.policyTrackedResourcesResource == enum_policyTrackedResourcesResourceParameter[_]
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyTrackedResources_ListQueryResultsForResource

enum_policyTrackedResourcesResourceParameter := [ "default" ]

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.policyTrackedResourcesResource == enum_policyTrackedResourcesResourceParameter[_]
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PolicyTrackedResources_ListQueryResultsForResourceGroup

enum_policyTrackedResourcesResourceParameter := [ "default" ]

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.policyTrackedResourcesResource == enum_policyTrackedResourcesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

PolicyTrackedResources_ListQueryResultsForSubscription

enum_policyTrackedResourcesResourceParameter := [ "default" ]

valid {
    input.ReqMap.policyTrackedResourcesResource == enum_policyTrackedResourcesResourceParameter[_]
    input.ReqMap.SubscriptionID == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Remediations_CancelAtManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]

valid {
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_CancelAtResource

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_CancelAtResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Remediations_CancelAtSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Remediations_CreateOrUpdateAtManagementGroup

enum_RemediationPropertiesResourceDiscoveryMode := [ "ExistingNonCompliant", "ReEvaluateCompliance" ]
enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]

valid {
    input.Body.properties.policyAssignmentId == STRING
    input.Body.properties.policyDefinitionReferenceId == STRING
    input.Body.properties.resourceDiscoveryMode == enum_RemediationPropertiesResourceDiscoveryMode[_]
    input.Body.properties.filters.locations[_] == STRING
    input.Body.properties.resourceCount == INTEGER
    input.Body.properties.parallelDeployments == INTEGER
    input.Body.properties.failureThreshold.percentage == NUMBER
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_CreateOrUpdateAtResource

enum_RemediationPropertiesResourceDiscoveryMode := [ "ExistingNonCompliant", "ReEvaluateCompliance" ]

valid {
    input.Body.properties.policyAssignmentId == STRING
    input.Body.properties.policyDefinitionReferenceId == STRING
    input.Body.properties.resourceDiscoveryMode == enum_RemediationPropertiesResourceDiscoveryMode[_]
    input.Body.properties.filters.locations[_] == STRING
    input.Body.properties.resourceCount == INTEGER
    input.Body.properties.parallelDeployments == INTEGER
    input.Body.properties.failureThreshold.percentage == NUMBER
    input.ReqMap.resourceId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_CreateOrUpdateAtResourceGroup

enum_RemediationPropertiesResourceDiscoveryMode := [ "ExistingNonCompliant", "ReEvaluateCompliance" ]

valid {
    input.Body.properties.policyAssignmentId == STRING
    input.Body.properties.policyDefinitionReferenceId == STRING
    input.Body.properties.resourceDiscoveryMode == enum_RemediationPropertiesResourceDiscoveryMode[_]
    input.Body.properties.filters.locations[_] == STRING
    input.Body.properties.resourceCount == INTEGER
    input.Body.properties.parallelDeployments == INTEGER
    input.Body.properties.failureThreshold.percentage == NUMBER
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Remediations_CreateOrUpdateAtSubscription

enum_RemediationPropertiesResourceDiscoveryMode := [ "ExistingNonCompliant", "ReEvaluateCompliance" ]

valid {
    input.Body.properties.policyAssignmentId == STRING
    input.Body.properties.policyDefinitionReferenceId == STRING
    input.Body.properties.resourceDiscoveryMode == enum_RemediationPropertiesResourceDiscoveryMode[_]
    input.Body.properties.filters.locations[_] == STRING
    input.Body.properties.resourceCount == INTEGER
    input.Body.properties.parallelDeployments == INTEGER
    input.Body.properties.failureThreshold.percentage == NUMBER
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Remediations_DeleteAtManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]

valid {
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_DeleteAtResource

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_DeleteAtResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Remediations_DeleteAtSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Remediations_GetAtManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]

valid {
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_GetAtResource

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_GetAtResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Remediations_GetAtSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Remediations_ListDeploymentsAtManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]

valid {
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.$top == INTEGER
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_ListDeploymentsAtResource

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.$top == INTEGER
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_ListDeploymentsAtResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.$top == INTEGER
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Remediations_ListDeploymentsAtSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.remediationName == STRING
    input.Qs.$top == INTEGER
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Remediations_ListForManagementGroup

enum_managementGroupsNamespaceParameter := [ "Microsoft.Management" ]

valid {
    input.ReqMap.managementGroupsNamespace == enum_managementGroupsNamespaceParameter[_]
    input.ReqMap.managementGroupId == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_ListForResource

valid {
    input.ReqMap.resourceId == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Remediations_ListForResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Remediations_ListForSubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.$top == INTEGER
    input.Qs.$filter == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}