---
updatedAt: 2025-11-12T01:18:07.000Z
agentTools:
  projectIndex: https://public.docs.kivera.io/llms.txt
---

# MICROSOFT.SECURITY

<Embed url="https://docs.microsoft.com/en-us/rest/api/azure/" title="Azure documentation" provider="docs.microsoft.com" href="https://docs.microsoft.com/en-us/rest/api/azure/" />

# APICollectionOffboarding\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.serviceName == STRING
    input.ReqMap.apiCollectionId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# APICollectionOnboarding\_Create

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.serviceName == STRING
    input.ReqMap.apiCollectionId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# APICollection\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.serviceName == STRING
    input.ReqMap.apiCollectionId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# APICollections\_GetByAzureApiManagementService

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.serviceName == STRING
    input.ReqMap.apiId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# APICollections\_ListByAzureApiManagementService

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.serviceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# APICollections\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# APICollections\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# APICollections\_OffboardAzureApiManagementApi

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.serviceName == STRING
    input.ReqMap.apiId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# APICollections\_OnboardAzureApiManagementApi

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.serviceName == STRING
    input.ReqMap.apiId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AdaptiveApplicationControls\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.groupName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AdaptiveApplicationControls\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.groupName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AdaptiveApplicationControls\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.includePathRecommendations == BOOLEAN
    input.Qs.summary == BOOLEAN
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AdaptiveApplicationControls\_Put

```erlang
enum_ConfigurationStatus := [ "Configured", "NotConfigured", "InProgress", "Failed", "NoStatus" ]
enum_EnforcementMode := [ "Audit", "Enforce", "None" ]
enum_EnforcementSupport := [ "Supported", "NotSupported", "Unknown" ]
enum_FileType := [ "Exe", "Dll", "Msi", "Script", "Executable", "Unknown" ]
enum_RecommendationAction := [ "Recommended", "Add", "Remove" ]
enum_RecommendationType := [ "File", "FileHash", "PublisherSignature", "ProductSignature", "BinarySignature", "VersionAndAboveSignature" ]

valid {
    input.Body.properties.enforcementMode == enum_EnforcementMode[_]
    input.Body.properties.protectionMode.exe == enum_EnforcementMode[_]
    input.Body.properties.protectionMode.msi == enum_EnforcementMode[_]
    input.Body.properties.protectionMode.script == enum_EnforcementMode[_]
    input.Body.properties.protectionMode.executable == enum_EnforcementMode[_]
    input.Body.properties.vmRecommendations[_].configurationStatus == enum_ConfigurationStatus[_]
    input.Body.properties.vmRecommendations[_].recommendationAction == enum_RecommendationAction[_]
    input.Body.properties.vmRecommendations[_].resourceId == STRING
    input.Body.properties.vmRecommendations[_].enforcementSupport == enum_EnforcementSupport[_]
    input.Body.properties.pathRecommendations[_].path == STRING
    input.Body.properties.pathRecommendations[_].action == enum_RecommendationAction[_]
    input.Body.properties.pathRecommendations[_].type == enum_RecommendationType[_]
    input.Body.properties.pathRecommendations[_].publisherInfo.publisherName == STRING
    input.Body.properties.pathRecommendations[_].publisherInfo.productName == STRING
    input.Body.properties.pathRecommendations[_].publisherInfo.binaryName == STRING
    input.Body.properties.pathRecommendations[_].publisherInfo.version == STRING
    input.Body.properties.pathRecommendations[_].common == BOOLEAN
    input.Body.properties.pathRecommendations[_].userSids[_] == STRING
    input.Body.properties.pathRecommendations[_].usernames[_].username == STRING
    input.Body.properties.pathRecommendations[_].usernames[_].recommendationAction == enum_RecommendationAction[_]
    input.Body.properties.pathRecommendations[_].fileType == enum_FileType[_]
    input.Body.properties.pathRecommendations[_].configurationStatus == enum_ConfigurationStatus[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.groupName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AdaptiveNetworkHardenings\_Enforce

```erlang
enum_AdaptiveNetworkHardeningEnforceAction := [ "enforce" ]
enum_RuleDirection := [ "Inbound", "Outbound" ]
enum_RuleProtocols := [ "TCP", "UDP" ]

valid {
    input.Body.rules[_].name == STRING
    input.Body.rules[_].direction == enum_RuleDirection[_]
    input.Body.rules[_].destinationPort == INTEGER
    input.Body.rules[_].protocols[_] == enum_RuleProtocols[_]
    input.Body.rules[_].ipAddresses[_] == STRING
    input.Body.networkSecurityGroups[_] == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.ReqMap.adaptiveNetworkHardeningResourceName == STRING
    input.ReqMap.adaptiveNetworkHardeningEnforceAction == enum_AdaptiveNetworkHardeningEnforceAction[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AdaptiveNetworkHardenings\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.ReqMap.adaptiveNetworkHardeningResourceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AdaptiveNetworkHardenings\_ListByExtendedResource

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AdvancedThreatProtection\_Create

```erlang
enum_AdvancedThreatProtectionSettingName := [ "current" ]

valid {
    input.Body.properties.isEnabled == BOOLEAN
    input.ReqMap.resourceId == STRING
    input.ReqMap.settingName == enum_AdvancedThreatProtectionSettingName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# AdvancedThreatProtection\_Get

```erlang
enum_AdvancedThreatProtectionSettingName := [ "current" ]

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.settingName == enum_AdvancedThreatProtectionSettingName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# AlertsSuppressionRules\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.alertsSuppressionRuleName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AlertsSuppressionRules\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.alertsSuppressionRuleName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AlertsSuppressionRules\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.AlertType == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AlertsSuppressionRules\_Update

```erlang
enum_AlertsSuppressionRulePropertiesState := [ "Enabled", "Disabled", "Expired" ]

valid {
    input.Body.properties.alertType == STRING
    input.Body.properties.expirationDateUtc == STRING
    input.Body.properties.reason == STRING
    input.Body.properties.state == enum_AlertsSuppressionRulePropertiesState[_]
    input.Body.properties.comment == STRING
    input.Body.properties.suppressionAlertsScope.allOf[_].field == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.alertsSuppressionRuleName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_GetResourceGroupLevel

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_GetSubscriptionLevel

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_ListResourceGroupLevelByRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_ListSubscriptionLevelByRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_Simulate

```erlang
enum_AlertSimulatorRequestPropertiesKind := [ "Bundles" ]

valid {
    input.Body.properties.kind == enum_AlertSimulatorRequestPropertiesKind[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_UpdateResourceGroupLevelAlertStateToReactivate

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_UpdateResourceGroupLevelStateToActivate

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_UpdateResourceGroupLevelStateToDismiss

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_UpdateResourceGroupLevelStateToInProgress

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_UpdateResourceGroupLevelStateToResolve

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Alerts\_UpdateSubscriptionLevelAlertStateToReactivate

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_UpdateSubscriptionLevelStateToActivate

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_UpdateSubscriptionLevelStateToDismiss

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_UpdateSubscriptionLevelStateToInProgress

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Alerts\_UpdateSubscriptionLevelStateToResolve

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.alertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AllowedConnections\_Get

```erlang
enum_ConnectionType := [ "Internal", "External" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.connectionType == enum_ConnectionType[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AllowedConnections\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AllowedConnections\_ListByHomeRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Application\_CreateOrUpdate

```erlang
enum_ApplicationPropertiesSourceResourceType := [ "Assessments" ]

valid {
    input.Body.properties.displayName == STRING
    input.Body.properties.description == STRING
    input.Body.properties.sourceResourceType == enum_ApplicationPropertiesSourceResourceType[_]
    input.Body.properties.conditionSets[_].STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Application\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Application\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Applications\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AssessmentsMetadata\_CreateInSubscription

```erlang
enum_SecurityAssessmentMetadataPropertiesAssessmentType := [ "BuiltIn", "CustomPolicy", "CustomerManaged", "VerifiedPartner" ]
enum_SecurityAssessmentMetadataPropertiesCategories := [ "Compute", "Networking", "Data", "IdentityAndAccess", "IoT" ]
enum_SecurityAssessmentMetadataPropertiesImplementationEffort := [ "Low", "Moderate", "High" ]
enum_SecurityAssessmentMetadataPropertiesResponseTactics := [ "Reconnaissance", "Resource Development", "Initial Access", "Execution", "Persistence", "Privilege Escalation", "Defense Evasion", "Credential Access", "Discovery", "Lateral Movement", "Collection", "Command and Control", "Exfiltration", "Impact" ]
enum_SecurityAssessmentMetadataPropertiesResponseTechniques := [ "Abuse Elevation Control Mechanism", "Access Token Manipulation", "Account Discovery", "Account Manipulation", "Active Scanning", "Application Layer Protocol", "Audio Capture", "Boot or Logon Autostart Execution", "Boot or Logon Initialization Scripts", "Brute Force", "Cloud Infrastructure Discovery", "Cloud Service Dashboard", "Cloud Service Discovery", "Command and Scripting Interpreter", "Compromise Client Software Binary", "Compromise Infrastructure", "Container and Resource Discovery", "Create Account", "Create or Modify System Process", "Credentials from Password Stores", "Data Destruction", "Data Encrypted for Impact", "Data from Cloud Storage Object", "Data from Configuration Repository", "Data from Information Repositories", "Data from Local System", "Data Manipulation", "Data Staged", "Defacement", "Deobfuscate/Decode Files or Information", "Disk Wipe", "Domain Trust Discovery", "Drive-by Compromise", "Dynamic Resolution", "Endpoint Denial of Service", "Event Triggered Execution", "Exfiltration Over Alternative Protocol", "Exploit Public-Facing Application", "Exploitation for Client Execution", "Exploitation for Credential Access", "Exploitation for Defense Evasion", "Exploitation for Privilege Escalation", "Exploitation of Remote Services", "External Remote Services", "Fallback Channels", "File and Directory Discovery", "Gather Victim Network Information", "Hide Artifacts", "Hijack Execution Flow", "Impair Defenses", "Implant Container Image", "Indicator Removal on Host", "Indirect Command Execution", "Ingress Tool Transfer", "Input Capture", "Inter-Process Communication", "Lateral Tool Transfer", "Man-in-the-Middle", "Masquerading", "Modify Authentication Process", "Modify Registry", "Network Denial of Service", "Network Service Scanning", "Network Sniffing", "Non-Application Layer Protocol", "Non-Standard Port", "Obtain Capabilities", "Obfuscated Files or Information", "Office Application Startup", "OS Credential Dumping", "Permission Groups Discovery", "Phishing", "Pre-OS Boot", "Process Discovery", "Process Injection", "Protocol Tunneling", "Proxy", "Query Registry", "Remote Access Software", "Remote Service Session Hijacking", "Remote Services", "Remote System Discovery", "Resource Hijacking", "Scheduled Task/Job", "Screen Capture", "Search Victim-Owned Websites", "Server Software Component", "Service Stop", "Signed Binary Proxy Execution", "Software Deployment Tools", "SQL Stored Procedures", "Steal or Forge Kerberos Tickets", "Subvert Trust Controls", "Supply Chain Compromise", "System Information Discovery", "Taint Shared Content", "Traffic Signaling", "Transfer Data to Cloud Account", "Trusted Relationship", "Unsecured Credentials", "User Execution", "Valid Accounts", "Windows Management Instrumentation", "File and Directory Permissions Modification" ]
enum_SecurityAssessmentMetadataPropertiesSeverity := [ "Low", "Medium", "High" ]
enum_SecurityAssessmentMetadataPropertiesThreats := [ "accountBreach", "dataExfiltration", "dataSpillage", "maliciousInsider", "elevationOfPrivilege", "threatResistance", "missingCoverage", "denialOfService" ]
enum_SecurityAssessmentMetadataPropertiesUserImpact := [ "Low", "Moderate", "High" ]

valid {
    input.Body.properties.publishDates.GA == STRING
    input.Body.properties.publishDates.public == STRING
    input.Body.properties.plannedDeprecationDate == STRING
    input.Body.properties.tactics[_] == enum_SecurityAssessmentMetadataPropertiesResponseTactics[_]
    input.Body.properties.techniques[_] == enum_SecurityAssessmentMetadataPropertiesResponseTechniques[_]
    input.Body.properties.displayName == STRING
    input.Body.properties.description == STRING
    input.Body.properties.remediationDescription == STRING
    input.Body.properties.categories[_] == enum_SecurityAssessmentMetadataPropertiesCategories[_]
    input.Body.properties.severity == enum_SecurityAssessmentMetadataPropertiesSeverity[_]
    input.Body.properties.userImpact == enum_SecurityAssessmentMetadataPropertiesUserImpact[_]
    input.Body.properties.implementationEffort == enum_SecurityAssessmentMetadataPropertiesImplementationEffort[_]
    input.Body.properties.threats[_] == enum_SecurityAssessmentMetadataPropertiesThreats[_]
    input.Body.properties.preview == BOOLEAN
    input.Body.properties.assessmentType == enum_SecurityAssessmentMetadataPropertiesAssessmentType[_]
    input.Body.properties.partnerData.partnerName == STRING
    input.Body.properties.partnerData.productName == STRING
    input.Body.properties.partnerData.secret == STRING
    input.ReqMap.assessmentMetadataName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AssessmentsMetadata\_DeleteInSubscription

```erlang
valid {
    input.ReqMap.assessmentMetadataName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AssessmentsMetadata\_Get

```erlang
valid {
    input.ReqMap.assessmentMetadataName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# AssessmentsMetadata\_GetInSubscription

```erlang
valid {
    input.ReqMap.assessmentMetadataName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AssessmentsMetadata\_List

```erlang
valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# AssessmentsMetadata\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Assessments\_CreateOrUpdate

```erlang
enum_AssessmentStatusCode := [ "Healthy", "Unhealthy", "NotApplicable" ]
enum_ResourceDetailsSource := [ "Azure", "OnPremise", "OnPremiseSql" ]
enum_SecurityAssessmentMetadataPropertiesAssessmentType := [ "BuiltIn", "CustomPolicy", "CustomerManaged", "VerifiedPartner" ]
enum_SecurityAssessmentMetadataPropertiesCategories := [ "Compute", "Networking", "Data", "IdentityAndAccess", "IoT" ]
enum_SecurityAssessmentMetadataPropertiesImplementationEffort := [ "Low", "Moderate", "High" ]
enum_SecurityAssessmentMetadataPropertiesSeverity := [ "Low", "Medium", "High" ]
enum_SecurityAssessmentMetadataPropertiesThreats := [ "accountBreach", "dataExfiltration", "dataSpillage", "maliciousInsider", "elevationOfPrivilege", "threatResistance", "missingCoverage", "denialOfService" ]
enum_SecurityAssessmentMetadataPropertiesUserImpact := [ "Low", "Moderate", "High" ]

valid {
    input.Body.properties.status.code == enum_AssessmentStatusCode[_]
    input.Body.properties.status.cause == STRING
    input.Body.properties.status.description == STRING
    input.Body.properties.resourceDetails.source == enum_ResourceDetailsSource[_]
    input.Body.properties.additionalData.STRING == STRING
    input.Body.properties.metadata.displayName == STRING
    input.Body.properties.metadata.description == STRING
    input.Body.properties.metadata.remediationDescription == STRING
    input.Body.properties.metadata.categories[_] == enum_SecurityAssessmentMetadataPropertiesCategories[_]
    input.Body.properties.metadata.severity == enum_SecurityAssessmentMetadataPropertiesSeverity[_]
    input.Body.properties.metadata.userImpact == enum_SecurityAssessmentMetadataPropertiesUserImpact[_]
    input.Body.properties.metadata.implementationEffort == enum_SecurityAssessmentMetadataPropertiesImplementationEffort[_]
    input.Body.properties.metadata.threats[_] == enum_SecurityAssessmentMetadataPropertiesThreats[_]
    input.Body.properties.metadata.preview == BOOLEAN
    input.Body.properties.metadata.assessmentType == enum_SecurityAssessmentMetadataPropertiesAssessmentType[_]
    input.Body.properties.metadata.partnerData.partnerName == STRING
    input.Body.properties.metadata.partnerData.productName == STRING
    input.Body.properties.metadata.partnerData.secret == STRING
    input.Body.properties.partnersData.partnerName == STRING
    input.Body.properties.partnersData.secret == STRING
    input.ReqMap.resourceId == STRING
    input.ReqMap.assessmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Assessments\_Delete

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.assessmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Assessments\_Get

```erlang
enum_ExpandAssessments := [ "links", "metadata" ]

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.assessmentName == STRING
    input.Qs.api-version == STRING
    input.Qs.$expand == enum_ExpandAssessments[_]
    input.ProviderMetadata.Region == STRING
}
```

# Assessments\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Assignments\_CreateOrUpdate

```erlang
valid {
    input.Body.properties.displayName == STRING
    input.Body.properties.description == STRING
    input.Body.properties.assignedStandard.id == STRING
    input.Body.properties.assignedComponent.key == STRING
    input.Body.properties.scope == STRING
    input.Body.properties.effect == STRING
    input.Body.properties.expiresOn == STRING
    input.Body.properties.additionalData.exemptionCategory == STRING
    input.Body.properties.metadata.STRING == STRING
    input.Body.STRING == STRING
    input.Body.location == STRING
    input.Body.kind == STRING
    input.Body.etag == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.assignmentId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Assignments\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.assignmentId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Assignments\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.assignmentId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Assignments\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Assignments\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AutoProvisioningSettings\_Create

```erlang
enum_AutoProvisioningSettingPropertiesAutoProvision := [ "On", "Off" ]

valid {
    input.Body.properties.autoProvision == enum_AutoProvisioningSettingPropertiesAutoProvision[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.settingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AutoProvisioningSettings\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.settingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# AutoProvisioningSettings\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Automations\_CreateOrUpdate

```erlang
enum_AutomationActionActionType := [ "LogicApp", "EventHub", "Workspace" ]
enum_AutomationSourceEventSource := [ "Assessments", "AssessmentsSnapshot", "SubAssessments", "SubAssessmentsSnapshot", "Alerts", "SecureScores", "SecureScoresSnapshot", "SecureScoreControls", "SecureScoreControlsSnapshot", "RegulatoryComplianceAssessment", "RegulatoryComplianceAssessmentSnapshot", "AttackPaths", "AttackPathsSnapshot" ]
enum_AutomationTriggeringRuleOperator := [ "Equals", "GreaterThan", "GreaterThanOrEqualTo", "LesserThan", "LesserThanOrEqualTo", "NotEquals", "Contains", "StartsWith", "EndsWith" ]
enum_AutomationTriggeringRulePropertyType := [ "String", "Integer", "Number", "Boolean" ]

valid {
    input.Body.properties.description == STRING
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.scopes[_].description == STRING
    input.Body.properties.scopes[_].scopePath == STRING
    input.Body.properties.sources[_].eventSource == enum_AutomationSourceEventSource[_]
    input.Body.properties.sources[_].ruleSets[_].rules[_].propertyJPath == STRING
    input.Body.properties.sources[_].ruleSets[_].rules[_].propertyType == enum_AutomationTriggeringRulePropertyType[_]
    input.Body.properties.sources[_].ruleSets[_].rules[_].expectedValue == STRING
    input.Body.properties.sources[_].ruleSets[_].rules[_].operator == enum_AutomationTriggeringRuleOperator[_]
    input.Body.properties.actions[_].actionType == enum_AutomationActionActionType[_]
    input.Body.STRING == STRING
    input.Body.location == STRING
    input.Body.kind == STRING
    input.Body.etag == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.automationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Automations\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.automationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Automations\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.automationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Automations\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Automations\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Automations\_Update

```erlang
enum_AutomationActionActionType := [ "LogicApp", "EventHub", "Workspace" ]
enum_AutomationSourceEventSource := [ "Assessments", "AssessmentsSnapshot", "SubAssessments", "SubAssessmentsSnapshot", "Alerts", "SecureScores", "SecureScoresSnapshot", "SecureScoreControls", "SecureScoreControlsSnapshot", "RegulatoryComplianceAssessment", "RegulatoryComplianceAssessmentSnapshot", "AttackPaths", "AttackPathsSnapshot" ]
enum_AutomationTriggeringRuleOperator := [ "Equals", "GreaterThan", "GreaterThanOrEqualTo", "LesserThan", "LesserThanOrEqualTo", "NotEquals", "Contains", "StartsWith", "EndsWith" ]
enum_AutomationTriggeringRulePropertyType := [ "String", "Integer", "Number", "Boolean" ]

valid {
    input.Body.properties.description == STRING
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.scopes[_].description == STRING
    input.Body.properties.scopes[_].scopePath == STRING
    input.Body.properties.sources[_].eventSource == enum_AutomationSourceEventSource[_]
    input.Body.properties.sources[_].ruleSets[_].rules[_].propertyJPath == STRING
    input.Body.properties.sources[_].ruleSets[_].rules[_].propertyType == enum_AutomationTriggeringRulePropertyType[_]
    input.Body.properties.sources[_].ruleSets[_].rules[_].expectedValue == STRING
    input.Body.properties.sources[_].ruleSets[_].rules[_].operator == enum_AutomationTriggeringRuleOperator[_]
    input.Body.properties.actions[_].actionType == enum_AutomationActionActionType[_]
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.automationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Automations\_Validate

```erlang
enum_AutomationActionActionType := [ "LogicApp", "EventHub", "Workspace" ]
enum_AutomationSourceEventSource := [ "Assessments", "AssessmentsSnapshot", "SubAssessments", "SubAssessmentsSnapshot", "Alerts", "SecureScores", "SecureScoresSnapshot", "SecureScoreControls", "SecureScoreControlsSnapshot", "RegulatoryComplianceAssessment", "RegulatoryComplianceAssessmentSnapshot", "AttackPaths", "AttackPathsSnapshot" ]
enum_AutomationTriggeringRuleOperator := [ "Equals", "GreaterThan", "GreaterThanOrEqualTo", "LesserThan", "LesserThanOrEqualTo", "NotEquals", "Contains", "StartsWith", "EndsWith" ]
enum_AutomationTriggeringRulePropertyType := [ "String", "Integer", "Number", "Boolean" ]

valid {
    input.Body.properties.description == STRING
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.scopes[_].description == STRING
    input.Body.properties.scopes[_].scopePath == STRING
    input.Body.properties.sources[_].eventSource == enum_AutomationSourceEventSource[_]
    input.Body.properties.sources[_].ruleSets[_].rules[_].propertyJPath == STRING
    input.Body.properties.sources[_].ruleSets[_].rules[_].propertyType == enum_AutomationTriggeringRulePropertyType[_]
    input.Body.properties.sources[_].ruleSets[_].rules[_].expectedValue == STRING
    input.Body.properties.sources[_].ruleSets[_].rules[_].operator == enum_AutomationTriggeringRuleOperator[_]
    input.Body.properties.actions[_].actionType == enum_AutomationActionActionType[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.automationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsOrgs\_CreateOrUpdate

```erlang
enum_ActionableRemediationState := [ "None", "Disabled", "Enabled" ]
enum_AnnotateDefaultBranchState := [ "Disabled", "Enabled" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]
enum_InheritFromParentState := [ "Disabled", "Enabled" ]
enum_OnboardingState := [ "NotApplicable", "OnboardedByOtherConnector", "Onboarded", "NotOnboarded" ]
enum_RuleCategory := [ "Code", "Artifacts", "Dependencies", "Secrets", "IaC", "Containers" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.onboardingState == enum_OnboardingState[_]
    input.Body.properties.actionableRemediation.state == enum_ActionableRemediationState[_]
    input.Body.properties.actionableRemediation.categoryConfigurations[_].minimumSeverityLevel == STRING
    input.Body.properties.actionableRemediation.categoryConfigurations[_].category == enum_RuleCategory[_]
    input.Body.properties.actionableRemediation.branchConfiguration.branchNames[_] == STRING
    input.Body.properties.actionableRemediation.branchConfiguration.annotateDefaultBranch == enum_AnnotateDefaultBranchState[_]
    input.Body.properties.actionableRemediation.inheritFromParentState == enum_InheritFromParentState[_]
    input.Body.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsOrgs\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsOrgs\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsOrgs\_ListAvailable

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsOrgs\_Update

```erlang
enum_ActionableRemediationState := [ "None", "Disabled", "Enabled" ]
enum_AnnotateDefaultBranchState := [ "Disabled", "Enabled" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]
enum_InheritFromParentState := [ "Disabled", "Enabled" ]
enum_OnboardingState := [ "NotApplicable", "OnboardedByOtherConnector", "Onboarded", "NotOnboarded" ]
enum_RuleCategory := [ "Code", "Artifacts", "Dependencies", "Secrets", "IaC", "Containers" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.onboardingState == enum_OnboardingState[_]
    input.Body.properties.actionableRemediation.state == enum_ActionableRemediationState[_]
    input.Body.properties.actionableRemediation.categoryConfigurations[_].minimumSeverityLevel == STRING
    input.Body.properties.actionableRemediation.categoryConfigurations[_].category == enum_RuleCategory[_]
    input.Body.properties.actionableRemediation.branchConfiguration.branchNames[_] == STRING
    input.Body.properties.actionableRemediation.branchConfiguration.annotateDefaultBranch == enum_AnnotateDefaultBranchState[_]
    input.Body.properties.actionableRemediation.inheritFromParentState == enum_InheritFromParentState[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsProjects\_CreateOrUpdate

```erlang
enum_ActionableRemediationState := [ "None", "Disabled", "Enabled" ]
enum_AnnotateDefaultBranchState := [ "Disabled", "Enabled" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]
enum_InheritFromParentState := [ "Disabled", "Enabled" ]
enum_OnboardingState := [ "NotApplicable", "OnboardedByOtherConnector", "Onboarded", "NotOnboarded" ]
enum_RuleCategory := [ "Code", "Artifacts", "Dependencies", "Secrets", "IaC", "Containers" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.parentOrgName == STRING
    input.Body.properties.onboardingState == enum_OnboardingState[_]
    input.Body.properties.actionableRemediation.state == enum_ActionableRemediationState[_]
    input.Body.properties.actionableRemediation.categoryConfigurations[_].minimumSeverityLevel == STRING
    input.Body.properties.actionableRemediation.categoryConfigurations[_].category == enum_RuleCategory[_]
    input.Body.properties.actionableRemediation.branchConfiguration.branchNames[_] == STRING
    input.Body.properties.actionableRemediation.branchConfiguration.annotateDefaultBranch == enum_AnnotateDefaultBranchState[_]
    input.Body.properties.actionableRemediation.inheritFromParentState == enum_InheritFromParentState[_]
    input.Body.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.ReqMap.projectName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsProjects\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.ReqMap.projectName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsProjects\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsProjects\_Update

```erlang
enum_ActionableRemediationState := [ "None", "Disabled", "Enabled" ]
enum_AnnotateDefaultBranchState := [ "Disabled", "Enabled" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]
enum_InheritFromParentState := [ "Disabled", "Enabled" ]
enum_OnboardingState := [ "NotApplicable", "OnboardedByOtherConnector", "Onboarded", "NotOnboarded" ]
enum_RuleCategory := [ "Code", "Artifacts", "Dependencies", "Secrets", "IaC", "Containers" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.parentOrgName == STRING
    input.Body.properties.onboardingState == enum_OnboardingState[_]
    input.Body.properties.actionableRemediation.state == enum_ActionableRemediationState[_]
    input.Body.properties.actionableRemediation.categoryConfigurations[_].minimumSeverityLevel == STRING
    input.Body.properties.actionableRemediation.categoryConfigurations[_].category == enum_RuleCategory[_]
    input.Body.properties.actionableRemediation.branchConfiguration.branchNames[_] == STRING
    input.Body.properties.actionableRemediation.branchConfiguration.annotateDefaultBranch == enum_AnnotateDefaultBranchState[_]
    input.Body.properties.actionableRemediation.inheritFromParentState == enum_InheritFromParentState[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.ReqMap.projectName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsRepos\_CreateOrUpdate

```erlang
enum_ActionableRemediationState := [ "None", "Disabled", "Enabled" ]
enum_AnnotateDefaultBranchState := [ "Disabled", "Enabled" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]
enum_InheritFromParentState := [ "Disabled", "Enabled" ]
enum_OnboardingState := [ "NotApplicable", "OnboardedByOtherConnector", "Onboarded", "NotOnboarded" ]
enum_RuleCategory := [ "Code", "Artifacts", "Dependencies", "Secrets", "IaC", "Containers" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.parentOrgName == STRING
    input.Body.properties.parentProjectName == STRING
    input.Body.properties.onboardingState == enum_OnboardingState[_]
    input.Body.properties.actionableRemediation.state == enum_ActionableRemediationState[_]
    input.Body.properties.actionableRemediation.categoryConfigurations[_].minimumSeverityLevel == STRING
    input.Body.properties.actionableRemediation.categoryConfigurations[_].category == enum_RuleCategory[_]
    input.Body.properties.actionableRemediation.branchConfiguration.branchNames[_] == STRING
    input.Body.properties.actionableRemediation.branchConfiguration.annotateDefaultBranch == enum_AnnotateDefaultBranchState[_]
    input.Body.properties.actionableRemediation.inheritFromParentState == enum_InheritFromParentState[_]
    input.Body.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.ReqMap.projectName == STRING
    input.ReqMap.repoName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsRepos\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.ReqMap.projectName == STRING
    input.ReqMap.repoName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsRepos\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.ReqMap.projectName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# AzureDevOpsRepos\_Update

```erlang
enum_ActionableRemediationState := [ "None", "Disabled", "Enabled" ]
enum_AnnotateDefaultBranchState := [ "Disabled", "Enabled" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]
enum_InheritFromParentState := [ "Disabled", "Enabled" ]
enum_OnboardingState := [ "NotApplicable", "OnboardedByOtherConnector", "Onboarded", "NotOnboarded" ]
enum_RuleCategory := [ "Code", "Artifacts", "Dependencies", "Secrets", "IaC", "Containers" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.parentOrgName == STRING
    input.Body.properties.parentProjectName == STRING
    input.Body.properties.onboardingState == enum_OnboardingState[_]
    input.Body.properties.actionableRemediation.state == enum_ActionableRemediationState[_]
    input.Body.properties.actionableRemediation.categoryConfigurations[_].minimumSeverityLevel == STRING
    input.Body.properties.actionableRemediation.categoryConfigurations[_].category == enum_RuleCategory[_]
    input.Body.properties.actionableRemediation.branchConfiguration.branchNames[_] == STRING
    input.Body.properties.actionableRemediation.branchConfiguration.annotateDefaultBranch == enum_AnnotateDefaultBranchState[_]
    input.Body.properties.actionableRemediation.inheritFromParentState == enum_InheritFromParentState[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.orgName == STRING
    input.ReqMap.projectName == STRING
    input.ReqMap.repoName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# ComplianceResults\_Get

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.complianceResultName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ComplianceResults\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Compliances\_Get

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.complianceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Compliances\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Connectors\_CreateOrUpdate

```erlang
enum_AuthenticationDetailsPropertiesAuthenticationType := [ "awsCreds", "awsAssumeRole", "gcpCredentials" ]
enum_HybridComputeSettingsPropertiesAutoProvision := [ "On", "Off" ]

valid {
    input.Body.properties.hybridComputeSettings.autoProvision == enum_HybridComputeSettingsPropertiesAutoProvision[_]
    input.Body.properties.hybridComputeSettings.resourceGroupName == STRING
    input.Body.properties.hybridComputeSettings.region == STRING
    input.Body.properties.hybridComputeSettings.proxyServer.ip == STRING
    input.Body.properties.hybridComputeSettings.proxyServer.port == STRING
    input.Body.properties.hybridComputeSettings.servicePrincipal.applicationId == STRING
    input.Body.properties.hybridComputeSettings.servicePrincipal.secret == STRING
    input.Body.properties.authenticationDetails.authenticationType == enum_AuthenticationDetailsPropertiesAuthenticationType[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.connectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Connectors\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.connectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Connectors\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.connectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Connectors\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# CustomAssessmentAutomations\_Create

```erlang
enum_customAssessmentAutomationRequestPropertiesSeverity := [ "High", "Medium", "Low" ]
enum_customAssessmentAutomationRequestPropertiesSupportedCloud := [ "AWS", "GCP" ]

valid {
    input.Body.properties.compressedQuery == STRING
    input.Body.properties.supportedCloud == enum_customAssessmentAutomationRequestPropertiesSupportedCloud[_]
    input.Body.properties.severity == enum_customAssessmentAutomationRequestPropertiesSeverity[_]
    input.Body.properties.displayName == STRING
    input.Body.properties.description == STRING
    input.Body.properties.remediationDescription == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.customAssessmentAutomationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomAssessmentAutomations\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.customAssessmentAutomationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomAssessmentAutomations\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.customAssessmentAutomationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomAssessmentAutomations\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomAssessmentAutomations\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# CustomEntityStoreAssignments\_Create

```erlang
valid {
    input.Body.properties.principal == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.customEntityStoreAssignmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomEntityStoreAssignments\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.customEntityStoreAssignmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomEntityStoreAssignments\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.customEntityStoreAssignmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomEntityStoreAssignments\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# CustomEntityStoreAssignments\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# DefenderForStorage\_Create

```erlang
enum_DefenderForStorageSettingName := [ "current" ]

valid {
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.malwareScanning.onUpload.isEnabled == BOOLEAN
    input.Body.properties.malwareScanning.onUpload.capGBPerMonth == INTEGER
    input.Body.properties.malwareScanning.scanResultsEventGridTopicResourceId == STRING
    input.Body.properties.sensitiveDataDiscovery.isEnabled == BOOLEAN
    input.Body.properties.overrideSubscriptionLevelSettings == BOOLEAN
    input.ReqMap.resourceId == STRING
    input.ReqMap.settingName == enum_DefenderForStorageSettingName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DefenderForStorage\_Get

```erlang
enum_DefenderForStorageSettingName := [ "current" ]

valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.settingName == enum_DefenderForStorageSettingName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DevOpsConfigurations\_CreateOrUpdate

```erlang
enum_AutoDiscovery := [ "Disabled", "Enabled", "NotApplicable" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.authorization.code == STRING
    input.Body.properties.autoDiscovery == enum_AutoDiscovery[_]
    input.Body.properties.topLevelInventoryList[_] == STRING
    input.Body.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# DevOpsConfigurations\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# DevOpsConfigurations\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# DevOpsConfigurations\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# DevOpsConfigurations\_Update

```erlang
enum_AutoDiscovery := [ "Disabled", "Enabled", "NotApplicable" ]
enum_DevOpsProvisioningState := [ "Succeeded", "Failed", "Canceled", "Pending", "PendingDeletion", "DeletionSuccess", "DeletionFailure" ]

valid {
    input.Body.properties.provisioningState == enum_DevOpsProvisioningState[_]
    input.Body.properties.authorization.code == STRING
    input.Body.properties.autoDiscovery == enum_AutoDiscovery[_]
    input.Body.properties.topLevelInventoryList[_] == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# DevOpsOperationResults\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.operationResultId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# DeviceSecurityGroups\_CreateOrUpdate

```erlang
valid {
    input.Body.properties.thresholdRules[_].minThreshold == INTEGER
    input.Body.properties.thresholdRules[_].maxThreshold == INTEGER
    input.Body.properties.thresholdRules[_].isEnabled == BOOLEAN
    input.Body.properties.thresholdRules[_].ruleType == STRING
    input.Body.properties.timeWindowRules[_].timeWindowSize == STRING
    input.Body.properties.timeWindowRules[_].minThreshold == INTEGER
    input.Body.properties.timeWindowRules[_].maxThreshold == INTEGER
    input.Body.properties.allowlistRules[_].allowlistValues[_] == STRING
    input.Body.properties.allowlistRules[_].isEnabled == BOOLEAN
    input.Body.properties.allowlistRules[_].ruleType == STRING
    input.Body.properties.denylistRules[_].denylistValues[_] == STRING
    input.ReqMap.resourceId == STRING
    input.ReqMap.deviceSecurityGroupName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeviceSecurityGroups\_Delete

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.deviceSecurityGroupName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeviceSecurityGroups\_Get

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.deviceSecurityGroupName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeviceSecurityGroups\_List

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DiscoveredSecuritySolutions\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.discoveredSecuritySolutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# DiscoveredSecuritySolutions\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# DiscoveredSecuritySolutions\_ListByHomeRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# ExternalSecuritySolutions\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.externalSecuritySolutionsName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# ExternalSecuritySolutions\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# ExternalSecuritySolutions\_ListByHomeRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# GitHubOwners\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.ownerName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitHubOwners\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitHubOwners\_ListAvailable

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitHubRepos\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.ownerName == STRING
    input.ReqMap.repoName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitHubRepos\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.ownerName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitLabGroups\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.groupFQName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitLabGroups\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitLabGroups\_ListAvailable

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitLabProjects\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.groupFQName == STRING
    input.ReqMap.projectName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitLabProjects\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.groupFQName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GitLabSubgroups\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.groupFQName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# GovernanceAssignments\_CreateOrUpdate

```erlang
valid {
    input.Body.properties.owner == STRING
    input.Body.properties.remediationDueDate == STRING
    input.Body.properties.remediationEta.eta == STRING
    input.Body.properties.remediationEta.justification == STRING
    input.Body.properties.isGracePeriod == BOOLEAN
    input.Body.properties.governanceEmailNotification.disableManagerEmailNotification == BOOLEAN
    input.Body.properties.governanceEmailNotification.disableOwnerEmailNotification == BOOLEAN
    input.Body.properties.additionalData.ticketNumber == INTEGER
    input.Body.properties.additionalData.ticketLink == STRING
    input.Body.properties.additionalData.ticketStatus == STRING
    input.ReqMap.scope == STRING
    input.ReqMap.assessmentName == STRING
    input.ReqMap.assignmentKey == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceAssignments\_Delete

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.assessmentName == STRING
    input.ReqMap.assignmentKey == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceAssignments\_Get

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.assessmentName == STRING
    input.ReqMap.assignmentKey == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceAssignments\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.assessmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceRules\_CreateOrUpdate

```erlang
enum_GovernanceRuleOwnerSourceType := [ "ByTag", "Manually" ]
enum_GovernanceRulePropertiesRuleType := [ "Integrated", "ServiceNow" ]
enum_GovernanceRulePropertiesSourceResourceType := [ "Assessments" ]

valid {
    input.Body.properties.displayName == STRING
    input.Body.properties.description == STRING
    input.Body.properties.remediationTimeframe == STRING
    input.Body.properties.isGracePeriod == BOOLEAN
    input.Body.properties.rulePriority == INTEGER
    input.Body.properties.isDisabled == BOOLEAN
    input.Body.properties.ruleType == enum_GovernanceRulePropertiesRuleType[_]
    input.Body.properties.sourceResourceType == enum_GovernanceRulePropertiesSourceResourceType[_]
    input.Body.properties.excludedScopes[_] == STRING
    input.Body.properties.conditionSets[_].STRING == STRING
    input.Body.properties.includeMemberScopes == BOOLEAN
    input.Body.properties.ownerSource.type == enum_GovernanceRuleOwnerSourceType[_]
    input.Body.properties.ownerSource.value == STRING
    input.Body.properties.governanceEmailNotification.disableManagerEmailNotification == BOOLEAN
    input.Body.properties.governanceEmailNotification.disableOwnerEmailNotification == BOOLEAN
    input.Body.properties.metadata == {}
    input.ReqMap.scope == STRING
    input.ReqMap.ruleId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceRules\_Delete

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.ruleId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceRules\_Execute

```erlang
valid {
    input.Body.override == BOOLEAN
    input.ReqMap.scope == STRING
    input.ReqMap.ruleId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceRules\_Get

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.ruleId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceRules\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GovernanceRules\_OperationResults

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.ruleId == STRING
    input.ReqMap.operationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# HealthReports\_Get

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.ReqMap.healthReportName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# HealthReports\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# InformationProtectionPolicies\_CreateOrUpdate

```erlang
enum_InformationProtectionPolicyName := [ "effective", "custom" ]
enum_SensitivityLabelRank := [ "None", "Low", "Medium", "High", "Critical" ]

valid {
    input.Body.properties.labels.STRING.displayName == STRING
    input.Body.properties.labels.STRING.description == STRING
    input.Body.properties.labels.STRING.rank == enum_SensitivityLabelRank[_]
    input.Body.properties.labels.STRING.order == INTEGER
    input.Body.properties.labels.STRING.enabled == BOOLEAN
    input.Body.properties.informationTypes.STRING.displayName == STRING
    input.Body.properties.informationTypes.STRING.description == STRING
    input.Body.properties.informationTypes.STRING.order == INTEGER
    input.Body.properties.informationTypes.STRING.recommendedLabelId == STRING
    input.Body.properties.informationTypes.STRING.enabled == BOOLEAN
    input.Body.properties.informationTypes.STRING.custom == BOOLEAN
    input.Body.properties.informationTypes.STRING.keywords[_].pattern == STRING
    input.Body.properties.informationTypes.STRING.keywords[_].custom == BOOLEAN
    input.Body.properties.informationTypes.STRING.keywords[_].canBeNumeric == BOOLEAN
    input.Body.properties.informationTypes.STRING.keywords[_].excluded == BOOLEAN
    input.ReqMap.scope == STRING
    input.ReqMap.informationProtectionPolicyName == enum_InformationProtectionPolicyName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# InformationProtectionPolicies\_Get

```erlang
enum_InformationProtectionPolicyName := [ "effective", "custom" ]

valid {
    input.ReqMap.scope == STRING
    input.ReqMap.informationProtectionPolicyName == enum_InformationProtectionPolicyName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# InformationProtectionPolicies\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# IotAlertTypes\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.ReqMap.iotAlertTypeName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotAlertTypes\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotAlerts\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.ReqMap.iotAlertId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotAlerts\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.Qs.startTimeUtc> == STRING
    input.Qs.startTimeUtc< == STRING
    input.Qs.alertType == STRING
    input.Qs.compromisedEntity == STRING
    input.Qs.$limit == INTEGER
    input.Qs.$skipToken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotRecommendationTypes\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.ReqMap.iotRecommendationTypeName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotRecommendationTypes\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotRecommendations\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.ReqMap.iotRecommendationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotRecommendations\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.Qs.recommendationType == STRING
    input.Qs.deviceId == STRING
    input.Qs.$limit == INTEGER
    input.Qs.$skipToken == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolutionAnalytics\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolutionAnalytics\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolution\_CreateOrUpdate

```erlang
enum_AdditionalWorkspacesPropertiesDataTypes := [ "Alerts", "RawEvents" ]
enum_AdditionalWorkspacesPropertiesType := [ "Sentinel" ]
enum_IoTSecuritySolutionPropertiesDisabledDataSources := [ "TwinData" ]
enum_IoTSecuritySolutionPropertiesExport := [ "RawEvents" ]
enum_IoTSecuritySolutionPropertiesStatus := [ "Enabled", "Disabled" ]
enum_IoTSecuritySolutionPropertiesUnmaskedIpLoggingStatus := [ "Disabled", "Enabled" ]
enum_RecommendationConfigurationPropertiesRecommendationType := [ "IoT_ACRAuthentication", "IoT_AgentSendsUnutilizedMessages", "IoT_Baseline", "IoT_EdgeHubMemOptimize", "IoT_EdgeLoggingOptions", "IoT_InconsistentModuleSettings", "IoT_InstallAgent", "IoT_IPFilter_DenyAll", "IoT_IPFilter_PermissiveRule", "IoT_OpenPorts", "IoT_PermissiveFirewallPolicy", "IoT_PermissiveInputFirewallRules", "IoT_PermissiveOutputFirewallRules", "IoT_PrivilegedDockerOptions", "IoT_SharedCredentials", "IoT_VulnerableTLSCipherSuite" ]
enum_RecommendationConfigurationPropertiesStatus := [ "Disabled", "Enabled" ]

valid {
    input.Body.location == STRING
    input.Body.properties.workspace == STRING
    input.Body.properties.displayName == STRING
    input.Body.properties.status == enum_IoTSecuritySolutionPropertiesStatus[_]
    input.Body.properties.export[_] == enum_IoTSecuritySolutionPropertiesExport[_]
    input.Body.properties.disabledDataSources[_] == enum_IoTSecuritySolutionPropertiesDisabledDataSources[_]
    input.Body.properties.iotHubs[_] == STRING
    input.Body.properties.userDefinedResources.query == STRING
    input.Body.properties.userDefinedResources.querySubscriptions[_] == STRING
    input.Body.properties.recommendationsConfiguration[_].recommendationType == enum_RecommendationConfigurationPropertiesRecommendationType[_]
    input.Body.properties.recommendationsConfiguration[_].status == enum_RecommendationConfigurationPropertiesStatus[_]
    input.Body.properties.unmaskedIpLoggingStatus == enum_IoTSecuritySolutionPropertiesUnmaskedIpLoggingStatus[_]
    input.Body.properties.additionalWorkspaces[_].workspace == STRING
    input.Body.properties.additionalWorkspaces[_].type == enum_AdditionalWorkspacesPropertiesType[_]
    input.Body.properties.additionalWorkspaces[_].dataTypes[_] == enum_AdditionalWorkspacesPropertiesDataTypes[_]
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolution\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolution\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolution\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolution\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# IotSecuritySolution\_Update

```erlang
enum_RecommendationConfigurationPropertiesRecommendationType := [ "IoT_ACRAuthentication", "IoT_AgentSendsUnutilizedMessages", "IoT_Baseline", "IoT_EdgeHubMemOptimize", "IoT_EdgeLoggingOptions", "IoT_InconsistentModuleSettings", "IoT_InstallAgent", "IoT_IPFilter_DenyAll", "IoT_IPFilter_PermissiveRule", "IoT_OpenPorts", "IoT_PermissiveFirewallPolicy", "IoT_PermissiveInputFirewallRules", "IoT_PermissiveOutputFirewallRules", "IoT_PrivilegedDockerOptions", "IoT_SharedCredentials", "IoT_VulnerableTLSCipherSuite" ]
enum_RecommendationConfigurationPropertiesStatus := [ "Disabled", "Enabled" ]

valid {
    input.Body.properties.userDefinedResources.query == STRING
    input.Body.properties.userDefinedResources.querySubscriptions[_] == STRING
    input.Body.properties.recommendationsConfiguration[_].recommendationType == enum_RecommendationConfigurationPropertiesRecommendationType[_]
    input.Body.properties.recommendationsConfiguration[_].status == enum_RecommendationConfigurationPropertiesStatus[_]
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolutionsAnalyticsAggregatedAlert\_Dismiss

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.ReqMap.aggregatedAlertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolutionsAnalyticsAggregatedAlert\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.ReqMap.aggregatedAlertName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolutionsAnalyticsAggregatedAlert\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolutionsAnalyticsRecommendation\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.ReqMap.aggregatedRecommendationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# IotSecuritySolutionsAnalyticsRecommendation\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.solutionName == STRING
    input.Qs.api-version == STRING
    input.Qs.$top == INTEGER
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# JitNetworkAccessPolicies\_CreateOrUpdate

```erlang
enum_JitNetworkAccessPortRuleProtocol := [ "TCP", "UDP", "*" ]
enum_JitNetworkAccessRequestPortStatus := [ "Revoked", "Initiated" ]
enum_JitNetworkAccessRequestPortStatusReason := [ "Expired", "UserRequested", "NewerRequestInitiated" ]

valid {
    input.Body.properties.virtualMachines[_].id == STRING
    input.Body.properties.virtualMachines[_].ports[_].number == INTEGER
    input.Body.properties.virtualMachines[_].ports[_].protocol == enum_JitNetworkAccessPortRuleProtocol[_]
    input.Body.properties.virtualMachines[_].ports[_].allowedSourceAddressPrefix == STRING
    input.Body.properties.virtualMachines[_].ports[_].allowedSourceAddressPrefixes[_] == STRING
    input.Body.properties.virtualMachines[_].ports[_].maxRequestAccessDuration == STRING
    input.Body.properties.virtualMachines[_].publicIpAddress == STRING
    input.Body.properties.requests[_].virtualMachines[_].id == STRING
    input.Body.properties.requests[_].virtualMachines[_].ports[_].number == INTEGER
    input.Body.properties.requests[_].virtualMachines[_].ports[_].allowedSourceAddressPrefix == STRING
    input.Body.properties.requests[_].virtualMachines[_].ports[_].allowedSourceAddressPrefixes[_] == STRING
    input.Body.properties.requests[_].virtualMachines[_].ports[_].endTimeUtc == STRING
    input.Body.properties.requests[_].virtualMachines[_].ports[_].status == enum_JitNetworkAccessRequestPortStatus[_]
    input.Body.properties.requests[_].virtualMachines[_].ports[_].statusReason == enum_JitNetworkAccessRequestPortStatusReason[_]
    input.Body.properties.requests[_].virtualMachines[_].ports[_].mappedPort == INTEGER
    input.Body.properties.requests[_].startTimeUtc == STRING
    input.Body.properties.requests[_].requestor == STRING
    input.Body.properties.requests[_].justification == STRING
    input.Body.kind == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.jitNetworkAccessPolicyName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# JitNetworkAccessPolicies\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.jitNetworkAccessPolicyName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# JitNetworkAccessPolicies\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.jitNetworkAccessPolicyName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# JitNetworkAccessPolicies\_Initiate

```erlang
enum_JitNetworkAccessPolicyInitiateType := [ "initiate" ]

valid {
    input.Body.virtualMachines[_].id == STRING
    input.Body.virtualMachines[_].ports[_].number == INTEGER
    input.Body.virtualMachines[_].ports[_].allowedSourceAddressPrefix == STRING
    input.Body.virtualMachines[_].ports[_].endTimeUtc == STRING
    input.Body.justification == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.jitNetworkAccessPolicyName == STRING
    input.ReqMap.jitNetworkAccessPolicyInitiateType == enum_JitNetworkAccessPolicyInitiateType[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# JitNetworkAccessPolicies\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# JitNetworkAccessPolicies\_ListByRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# JitNetworkAccessPolicies\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# JitNetworkAccessPolicies\_ListByResourceGroupAndRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Locations\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Locations\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# MdeOnboardings\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# MdeOnboardings\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Operations\_List

```erlang
valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Pricings\_CreateOrUpdateResourceGroupPricing

```erlang
enum_PricingPropertiesPricingTier := [ "Free", "Standard" ]

valid {
    input.Body.properties.pricingTier == enum_PricingPropertiesPricingTier[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.pricingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Pricings\_Delete

```erlang
valid {
    input.ReqMap.scopeId == STRING
    input.ReqMap.pricingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Pricings\_Get

```erlang
valid {
    input.ReqMap.scopeId == STRING
    input.ReqMap.pricingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Pricings\_GetResourceGroupPricing

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.pricingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Pricings\_List

```erlang
valid {
    input.ReqMap.scopeId == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Pricings\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Pricings\_Update

```erlang
enum_ExtensionIsEnabled := [ "True", "False" ]
enum_PricingPropertiesEnforce := [ "False", "True" ]
enum_PricingPropertiesPricingTier := [ "Free", "Standard" ]

valid {
    input.Body.properties.pricingTier == enum_PricingPropertiesPricingTier[_]
    input.Body.properties.subPlan == STRING
    input.Body.properties.enforce == enum_PricingPropertiesEnforce[_]
    input.Body.properties.extensions[_].name == STRING
    input.Body.properties.extensions[_].isEnabled == enum_ExtensionIsEnabled[_]
    input.Body.properties.extensions[_].additionalExtensionProperties.STRING == STRING
    input.ReqMap.scopeId == STRING
    input.ReqMap.pricingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RegulatoryComplianceAssessments\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.regulatoryComplianceStandardName == STRING
    input.ReqMap.regulatoryComplianceControlName == STRING
    input.ReqMap.regulatoryComplianceAssessmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# RegulatoryComplianceAssessments\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.regulatoryComplianceStandardName == STRING
    input.ReqMap.regulatoryComplianceControlName == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# RegulatoryComplianceControls\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.regulatoryComplianceStandardName == STRING
    input.ReqMap.regulatoryComplianceControlName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# RegulatoryComplianceControls\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.regulatoryComplianceStandardName == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# RegulatoryComplianceStandards\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.regulatoryComplianceStandardName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# RegulatoryComplianceStandards\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecureScoreControlDefinitions\_List

```erlang
valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SecureScoreControlDefinitions\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecureScoreControls\_List

```erlang
enum_ExpandControlsDefinition := [ "definition" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$expand == enum_ExpandControlsDefinition[_]
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecureScoreControls\_ListBySecureScore

```erlang
enum_ExpandControlsDefinition := [ "definition" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.secureScoreName == STRING
    input.Qs.api-version == STRING
    input.Qs.$expand == enum_ExpandControlsDefinition[_]
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecureScores\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.secureScoreName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecureScores\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityConnectorApplication\_CreateOrUpdate

```erlang
enum_ApplicationPropertiesSourceResourceType := [ "Assessments" ]

valid {
    input.Body.properties.displayName == STRING
    input.Body.properties.description == STRING
    input.Body.properties.sourceResourceType == enum_ApplicationPropertiesSourceResourceType[_]
    input.Body.properties.conditionSets[_].STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectorApplication\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectorApplication\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectorApplications\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectors\_CreateOrUpdate

```erlang
enum_EnvironmentDataEnvironmentType := [ "AwsAccount", "GcpProject", "GithubScope", "AzureDevOpsScope", "GitlabScope" ]
enum_SecurityConnectorPropertiesEnvironmentName := [ "Azure", "AWS", "GCP", "Github", "AzureDevOps", "GitLab" ]
enum_cloudOfferingOfferingType := [ "CspmMonitorAws", "DefenderForContainersAws", "DefenderForServersAws", "DefenderForDatabasesAws", "CspmMonitorGcp", "CspmMonitorGithub", "CspmMonitorAzureDevOps", "DefenderForServersGcp", "DefenderForContainersGcp", "DefenderForDatabasesGcp", "DefenderCspmAws", "DefenderCspmGcp", "CspmMonitorGitLab" ]

valid {
    input.Body.properties.hierarchyIdentifier == STRING
    input.Body.properties.environmentName == enum_SecurityConnectorPropertiesEnvironmentName[_]
    input.Body.properties.offerings[_].offeringType == enum_cloudOfferingOfferingType[_]
    input.Body.properties.environmentData.environmentType == enum_EnvironmentDataEnvironmentType[_]
    input.Body.STRING == STRING
    input.Body.location == STRING
    input.Body.kind == STRING
    input.Body.etag == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectors\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectors\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectors\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityConnectors\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityConnectors\_Update

```erlang
enum_EnvironmentDataEnvironmentType := [ "AwsAccount", "GcpProject", "GithubScope", "AzureDevOpsScope", "GitlabScope" ]
enum_SecurityConnectorPropertiesEnvironmentName := [ "Azure", "AWS", "GCP", "Github", "AzureDevOps", "GitLab" ]
enum_cloudOfferingOfferingType := [ "CspmMonitorAws", "DefenderForContainersAws", "DefenderForServersAws", "DefenderForDatabasesAws", "CspmMonitorGcp", "CspmMonitorGithub", "CspmMonitorAzureDevOps", "DefenderForServersGcp", "DefenderForContainersGcp", "DefenderForDatabasesGcp", "DefenderCspmAws", "DefenderCspmGcp", "CspmMonitorGitLab" ]

valid {
    input.Body.properties.hierarchyIdentifier == STRING
    input.Body.properties.environmentName == enum_SecurityConnectorPropertiesEnvironmentName[_]
    input.Body.properties.offerings[_].offeringType == enum_cloudOfferingOfferingType[_]
    input.Body.properties.environmentData.environmentType == enum_EnvironmentDataEnvironmentType[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.securityConnectorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecurityContacts\_Create

```erlang
enum_NotificationsSourceSourceType := [ "Alert", "AttackPath" ]
enum_SecurityContactName := [ "default" ]
enum_SecurityContactPropertiesNotificationsByRoleState := [ "On", "Off" ]
enum_SecurityContactRole := [ "AccountAdmin", "ServiceAdmin", "Owner", "Contributor" ]

valid {
    input.Body.properties.emails == STRING
    input.Body.properties.phone == STRING
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.notificationsSources[_].sourceType == enum_NotificationsSourceSourceType[_]
    input.Body.properties.notificationsByRole.state == enum_SecurityContactPropertiesNotificationsByRoleState[_]
    input.Body.properties.notificationsByRole.roles[_] == enum_SecurityContactRole[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.securityContactName == enum_SecurityContactName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityContacts\_Delete

```erlang
enum_SecurityContactName := [ "default" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.securityContactName == enum_SecurityContactName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityContacts\_Get

```erlang
enum_SecurityContactName := [ "default" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.securityContactName == enum_SecurityContactName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityContacts\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityContacts\_Update

```erlang
enum_SecurityContactPropertiesAlertNotifications := [ "On", "Off" ]
enum_SecurityContactPropertiesAlertsToAdmins := [ "On", "Off" ]

valid {
    input.Body.properties.email == STRING
    input.Body.properties.phone == STRING
    input.Body.properties.alertNotifications == enum_SecurityContactPropertiesAlertNotifications[_]
    input.Body.properties.alertsToAdmins == enum_SecurityContactPropertiesAlertsToAdmins[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.securityContactName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityOperators\_CreateOrUpdate

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.pricingName == STRING
    input.ReqMap.securityOperatorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityOperators\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.pricingName == STRING
    input.ReqMap.securityOperatorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityOperators\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.pricingName == STRING
    input.ReqMap.securityOperatorName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecurityOperators\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.pricingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecuritySolutionsReferenceData\_ListByHomeRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SecuritySolutions\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.securitySolutionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SecuritySolutions\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SensitivitySettings\_CreateOrUpdate

```erlang
valid {
    input.Body.sensitiveInfoTypesIds[_] == STRING
    input.Body.sensitivityThresholdLabelOrder == NUMBER
    input.Body.sensitivityThresholdLabelId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SensitivitySettings\_Get

```erlang
valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SensitivitySettings\_List

```erlang
valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ServerVulnerabilityAssessment\_CreateOrUpdate

```erlang
enum_ServerVulnerabilityAssessmentParameter := [ "default" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.ReqMap.serverVulnerabilityAssessment == enum_ServerVulnerabilityAssessmentParameter[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# ServerVulnerabilityAssessment\_Delete

```erlang
enum_ServerVulnerabilityAssessmentParameter := [ "default" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.ReqMap.serverVulnerabilityAssessment == enum_ServerVulnerabilityAssessmentParameter[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# ServerVulnerabilityAssessment\_Get

```erlang
enum_ServerVulnerabilityAssessmentParameter := [ "default" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.ReqMap.serverVulnerabilityAssessment == enum_ServerVulnerabilityAssessmentParameter[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# ServerVulnerabilityAssessment\_ListByExtendedResource

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# ServerVulnerabilityAssessmentsSettings\_CreateOrUpdate

```erlang
enum_ServerVulnerabilityAssessmentsSettingKind := [ "AzureServersSetting" ]
enum_SettingKind := [ "azureServersSetting" ]

valid {
    input.Body.kind == enum_ServerVulnerabilityAssessmentsSettingKind[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.settingKind == enum_SettingKind[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# ServerVulnerabilityAssessmentsSettings\_Delete

```erlang
enum_SettingKind := [ "azureServersSetting" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.settingKind == enum_SettingKind[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# ServerVulnerabilityAssessmentsSettings\_Get

```erlang
enum_SettingKind := [ "azureServersSetting" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.settingKind == enum_SettingKind[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# ServerVulnerabilityAssessmentsSettings\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Settings\_Get

```erlang
enum_SettingName := [ "MCAS", "WDATP", "WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW", "WDATP_UNIFIED_SOLUTION", "Sentinel" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.settingName == enum_SettingName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Settings\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Settings\_Update

```erlang
enum_SettingKind := [ "DataExportSettings", "AlertSuppressionSetting", "AlertSyncSettings" ]
enum_SettingName := [ "MCAS", "WDATP", "WDATP_EXCLUDE_LINUX_PUBLIC_PREVIEW", "WDATP_UNIFIED_SOLUTION", "Sentinel" ]

valid {
    input.Body.kind == enum_SettingKind[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.settingName == enum_SettingName[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SoftwareInventories\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.ReqMap.softwareName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SoftwareInventories\_ListByExtendedResource

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.resourceNamespace == STRING
    input.ReqMap.resourceType == STRING
    input.ReqMap.resourceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# SoftwareInventories\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SqlVulnerabilityAssessmentBaselineRules\_Add

```erlang
valid {
    input.Body.latestScan == BOOLEAN
    input.Body.results.STRING[_][_] == STRING
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentBaselineRules\_CreateOrUpdate

```erlang
valid {
    input.Body.latestScan == BOOLEAN
    input.Body.results[_][_] == STRING
    input.ReqMap.ruleId == STRING
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentBaselineRules\_Delete

```erlang
valid {
    input.ReqMap.ruleId == STRING
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentBaselineRules\_Get

```erlang
valid {
    input.ReqMap.ruleId == STRING
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentBaselineRules\_List

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentScanResults\_Get

```erlang
valid {
    input.ReqMap.scanId == STRING
    input.ReqMap.scanResultId == STRING
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentScanResults\_List

```erlang
valid {
    input.ReqMap.scanId == STRING
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentScans\_Get

```erlang
valid {
    input.ReqMap.scanId == STRING
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SqlVulnerabilityAssessmentScans\_List

```erlang
valid {
    input.ReqMap.resourceId == STRING
    input.Qs.workspaceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Standards\_CreateOrUpdate

```erlang
enum_StandardSupportedClouds := [ "AWS", "GCP" ]

valid {
    input.Body.properties.displayName == STRING
    input.Body.properties.description == STRING
    input.Body.properties.category == STRING
    input.Body.properties.components[_].key == STRING
    input.Body.properties.supportedClouds[_] == enum_StandardSupportedClouds[_]
    input.Body.STRING == STRING
    input.Body.location == STRING
    input.Body.kind == STRING
    input.Body.etag == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.standardId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Standards\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.standardId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Standards\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.standardId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Standards\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Standards\_ListBySubscription

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# SubAssessments\_Get

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.assessmentName == STRING
    input.ReqMap.subAssessmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SubAssessments\_List

```erlang
valid {
    input.ReqMap.scope == STRING
    input.ReqMap.assessmentName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# SubAssessments\_ListAll

```erlang
valid {
    input.ReqMap.scope == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}
```

# Tasks\_GetResourceGroupLevelTask

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.taskName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Tasks\_GetSubscriptionLevelTask

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.taskName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Tasks\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Tasks\_ListByHomeRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Tasks\_ListByResourceGroup

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.Qs.$filter == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Tasks\_UpdateResourceGroupLevelTaskState

```erlang
enum_TaskUpdateActionType := [ "Activate", "Dismiss", "Start", "Resolve", "Close" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.taskName == STRING
    input.ReqMap.taskUpdateActionType == enum_TaskUpdateActionType[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Tasks\_UpdateSubscriptionLevelTaskState

```erlang
enum_TaskUpdateActionType := [ "Activate", "Dismiss", "Start", "Resolve", "Close" ]

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.taskName == STRING
    input.ReqMap.taskUpdateActionType == enum_TaskUpdateActionType[_]
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Topology\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.ascLocation == STRING
    input.ReqMap.topologyResourceName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}
```

# Topology\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# Topology\_ListByHomeRegion

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ascLocation == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# WorkspaceSettings\_Create

```erlang
valid {
    input.Body.properties.workspaceId == STRING
    input.Body.properties.scope == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.workspaceSettingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# WorkspaceSettings\_Delete

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.workspaceSettingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# WorkspaceSettings\_Get

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.workspaceSettingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# WorkspaceSettings\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# WorkspaceSettings\_Update

```erlang
valid {
    input.Body.properties.workspaceId == STRING
    input.Body.properties.scope == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.workspaceSettingName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```

# securitySolutionsReferenceData\_List

```erlang
valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}
```