Guides

MICROSOFT.SOLUTIONS

Suggest Edits
docs.microsoft.com
Azure documentation

ApplianceDefinitions_CreateOrUpdate

enum_ApplianceArtifactType := [ "Template", "Custom" ]
enum_ApplianceLockLevel := [ "CanNotDelete", "ReadOnly", "None" ]
enum_IdentityType := [ "SystemAssigned" ]

valid {
    input.Body.properties.lockLevel == enum_ApplianceLockLevel[_]
    input.Body.properties.displayName == STRING
    input.Body.properties.authorizations[_].principalId == STRING
    input.Body.properties.authorizations[_].roleDefinitionId == STRING
    input.Body.properties.artifacts[_].name == STRING
    input.Body.properties.artifacts[_].uri == STRING
    input.Body.properties.artifacts[_].type == enum_ApplianceArtifactType[_]
    input.Body.properties.description == STRING
    input.Body.properties.packageFileUri == STRING
    input.Body.managedBy == STRING
    input.Body.sku.name == STRING
    input.Body.sku.tier == STRING
    input.Body.sku.size == STRING
    input.Body.sku.family == STRING
    input.Body.sku.model == STRING
    input.Body.sku.capacity == INTEGER
    input.Body.identity.type == enum_IdentityType[_]
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applianceDefinitionName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplianceDefinitions_CreateOrUpdateById

enum_ApplianceArtifactType := [ "Template", "Custom" ]
enum_ApplianceLockLevel := [ "CanNotDelete", "ReadOnly", "None" ]

valid {
    input.Body.properties.lockLevel == enum_ApplianceLockLevel[_]
    input.Body.properties.displayName == STRING
    input.Body.properties.authorizations[_].principalId == STRING
    input.Body.properties.authorizations[_].roleDefinitionId == STRING
    input.Body.properties.artifacts[_].name == STRING
    input.Body.properties.artifacts[_].uri == STRING
    input.Body.properties.artifacts[_].type == enum_ApplianceArtifactType[_]
    input.Body.properties.description == STRING
    input.Body.properties.packageFileUri == STRING
    input.ReqMap.applianceDefinitionId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

ApplianceDefinitions_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applianceDefinitionName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplianceDefinitions_DeleteById

valid {
    input.ReqMap.applianceDefinitionId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

ApplianceDefinitions_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applianceDefinitionName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplianceDefinitions_GetById

valid {
    input.ReqMap.applianceDefinitionId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

ApplianceDefinitions_ListByResourceGroup

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Appliances_CreateOrUpdate

enum_IdentityType := [ "SystemAssigned" ]

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applianceDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.uiDefinitionUri == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.Body.managedBy == STRING
    input.Body.sku.name == STRING
    input.Body.sku.tier == STRING
    input.Body.sku.size == STRING
    input.Body.sku.family == STRING
    input.Body.sku.model == STRING
    input.Body.sku.capacity == INTEGER
    input.Body.identity.type == enum_IdentityType[_]
    input.Body.location == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applianceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Appliances_CreateOrUpdateById

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applianceDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.uiDefinitionUri == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.ReqMap.applianceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Appliances_Delete

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applianceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Appliances_DeleteById

valid {
    input.ReqMap.applianceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Appliances_Get

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applianceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Appliances_GetById

valid {
    input.ReqMap.applianceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Appliances_ListByResourceGroup

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Appliances_ListBySubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Appliances_Update

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applianceDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.uiDefinitionUri == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applianceName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Appliances_UpdateById

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applianceDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.uiDefinitionUri == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.ReqMap.applianceId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

ApplicationDefinitions_CreateOrUpdate

enum_ApplicationArtifactType := [ "NotSpecified", "Template", "Custom" ]
enum_ApplicationDefinitionArtifactName := [ "NotSpecified", "ApplicationResourceTemplate", "CreateUiDefinition", "MainTemplateParameters" ]
enum_ApplicationLockLevel := [ "CanNotDelete", "ReadOnly", "None" ]
enum_ApplicationManagementMode := [ "NotSpecified", "Unmanaged", "Managed" ]
enum_DeploymentMode := [ "NotSpecified", "Incremental", "Complete" ]

valid {
    input.Body.properties.lockLevel == enum_ApplicationLockLevel[_]
    input.Body.properties.displayName == STRING
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.authorizations[_].principalId == STRING
    input.Body.properties.authorizations[_].roleDefinitionId == STRING
    input.Body.properties.artifacts[_].name == enum_ApplicationDefinitionArtifactName[_]
    input.Body.properties.artifacts[_].uri == STRING
    input.Body.properties.artifacts[_].type == enum_ApplicationArtifactType[_]
    input.Body.properties.description == STRING
    input.Body.properties.packageFileUri == STRING
    input.Body.properties.storageAccountId == STRING
    input.Body.properties.mainTemplate.STRING == STRING
    input.Body.properties.createUiDefinition.STRING == STRING
    input.Body.properties.notificationPolicy.notificationEndpoints[_].uri == STRING
    input.Body.properties.lockingPolicy.allowedActions[_] == STRING
    input.Body.properties.lockingPolicy.allowedDataActions[_] == STRING
    input.Body.properties.deploymentPolicy.deploymentMode == enum_DeploymentMode[_]
    input.Body.properties.managementPolicy.mode == enum_ApplicationManagementMode[_]
    input.Body.properties.policies[_].name == STRING
    input.Body.properties.policies[_].policyDefinitionId == STRING
    input.Body.properties.policies[_].parameters == STRING
    input.Body.managedBy == STRING
    input.Body.sku.name == STRING
    input.Body.sku.tier == STRING
    input.Body.sku.size == STRING
    input.Body.sku.family == STRING
    input.Body.sku.model == STRING
    input.Body.sku.capacity == INTEGER
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_CreateOrUpdateById

enum_ApplicationArtifactType := [ "NotSpecified", "Template", "Custom" ]
enum_ApplicationDefinitionArtifactName := [ "NotSpecified", "ApplicationResourceTemplate", "CreateUiDefinition", "MainTemplateParameters" ]
enum_ApplicationLockLevel := [ "CanNotDelete", "ReadOnly", "None" ]
enum_ApplicationManagementMode := [ "NotSpecified", "Unmanaged", "Managed" ]
enum_DeploymentMode := [ "NotSpecified", "Incremental", "Complete" ]

valid {
    input.Body.properties.lockLevel == enum_ApplicationLockLevel[_]
    input.Body.properties.displayName == STRING
    input.Body.properties.isEnabled == BOOLEAN
    input.Body.properties.authorizations[_].principalId == STRING
    input.Body.properties.authorizations[_].roleDefinitionId == STRING
    input.Body.properties.artifacts[_].name == enum_ApplicationDefinitionArtifactName[_]
    input.Body.properties.artifacts[_].uri == STRING
    input.Body.properties.artifacts[_].type == enum_ApplicationArtifactType[_]
    input.Body.properties.description == STRING
    input.Body.properties.packageFileUri == STRING
    input.Body.properties.storageAccountId == STRING
    input.Body.properties.mainTemplate.STRING == STRING
    input.Body.properties.createUiDefinition.STRING == STRING
    input.Body.properties.notificationPolicy.notificationEndpoints[_].uri == STRING
    input.Body.properties.lockingPolicy.allowedActions[_] == STRING
    input.Body.properties.lockingPolicy.allowedDataActions[_] == STRING
    input.Body.properties.deploymentPolicy.deploymentMode == enum_DeploymentMode[_]
    input.Body.properties.managementPolicy.mode == enum_ApplicationManagementMode[_]
    input.Body.properties.policies[_].name == STRING
    input.Body.properties.policies[_].policyDefinitionId == STRING
    input.Body.properties.policies[_].parameters == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_Delete

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_DeleteById

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_Get

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_GetById

valid {
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_ListByResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_ListBySubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

ApplicationDefinitions_Update

valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ApplicationDefinitions_UpdateById

valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationDefinitionName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_CreateOrUpdate

enum_IdentityType := [ "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", "None" ]
enum_JitApprovalMode := [ "NotSpecified", "AutoApprove", "ManualApprove" ]
enum_JitApproverDefinitionType := [ "user", "group" ]

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applicationDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.jitAccessPolicy.jitAccessEnabled == BOOLEAN
    input.Body.properties.jitAccessPolicy.jitApprovalMode == enum_JitApprovalMode[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].id == STRING
    input.Body.properties.jitAccessPolicy.jitApprovers[_].type == enum_JitApproverDefinitionType[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].displayName == STRING
    input.Body.properties.jitAccessPolicy.maximumJitAccessDuration == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.Body.identity.type == enum_IdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.Body.managedBy == STRING
    input.Body.sku.name == STRING
    input.Body.sku.tier == STRING
    input.Body.sku.size == STRING
    input.Body.sku.family == STRING
    input.Body.sku.model == STRING
    input.Body.sku.capacity == INTEGER
    input.Body.location == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_CreateOrUpdateById

enum_IdentityType := [ "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", "None" ]
enum_JitApprovalMode := [ "NotSpecified", "AutoApprove", "ManualApprove" ]
enum_JitApproverDefinitionType := [ "user", "group" ]

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applicationDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.jitAccessPolicy.jitAccessEnabled == BOOLEAN
    input.Body.properties.jitAccessPolicy.jitApprovalMode == enum_JitApprovalMode[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].id == STRING
    input.Body.properties.jitAccessPolicy.jitApprovers[_].type == enum_JitApproverDefinitionType[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].displayName == STRING
    input.Body.properties.jitAccessPolicy.maximumJitAccessDuration == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.Body.identity.type == enum_IdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Applications_Delete

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_DeleteById

valid {
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Applications_Get

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_GetById

valid {
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

Applications_ListAllowedUpgradePlans

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_ListByResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_ListBySubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Applications_ListTokens

valid {
    input.Body.authorizationAudience == STRING
    input.Body.userAssignedIdentities[_] == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_RefreshPermissions

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_Update

enum_IdentityType := [ "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", "None" ]
enum_JitApprovalMode := [ "NotSpecified", "AutoApprove", "ManualApprove" ]
enum_JitApproverDefinitionType := [ "user", "group" ]

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applicationDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.jitAccessPolicy.jitAccessEnabled == BOOLEAN
    input.Body.properties.jitAccessPolicy.jitApprovalMode == enum_JitApprovalMode[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].id == STRING
    input.Body.properties.jitAccessPolicy.jitApprovers[_].type == enum_JitApproverDefinitionType[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].displayName == STRING
    input.Body.properties.jitAccessPolicy.maximumJitAccessDuration == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.Body.identity.type == enum_IdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.Body.managedBy == STRING
    input.Body.sku.name == STRING
    input.Body.sku.tier == STRING
    input.Body.sku.size == STRING
    input.Body.sku.family == STRING
    input.Body.sku.model == STRING
    input.Body.sku.capacity == INTEGER
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_UpdateAccess

enum_Status := [ "NotSpecified", "Elevate", "Remove" ]
enum_SubStatus := [ "NotSpecified", "Approved", "Denied", "Failed", "Expired", "Timeout" ]

valid {
    input.Body.approver == STRING
    input.Body.metadata.originRequestId == STRING
    input.Body.metadata.requestorId == STRING
    input.Body.metadata.tenantDisplayName == STRING
    input.Body.metadata.subjectDisplayName == STRING
    input.Body.status == enum_Status[_]
    input.Body.subStatus == enum_SubStatus[_]
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.applicationName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

Applications_UpdateById

enum_IdentityType := [ "SystemAssigned", "UserAssigned", "SystemAssigned, UserAssigned", "None" ]
enum_JitApprovalMode := [ "NotSpecified", "AutoApprove", "ManualApprove" ]
enum_JitApproverDefinitionType := [ "user", "group" ]

valid {
    input.Body.properties.managedResourceGroupId == STRING
    input.Body.properties.applicationDefinitionId == STRING
    input.Body.properties.parameters.STRING == STRING
    input.Body.properties.jitAccessPolicy.jitAccessEnabled == BOOLEAN
    input.Body.properties.jitAccessPolicy.jitApprovalMode == enum_JitApprovalMode[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].id == STRING
    input.Body.properties.jitAccessPolicy.jitApprovers[_].type == enum_JitApproverDefinitionType[_]
    input.Body.properties.jitAccessPolicy.jitApprovers[_].displayName == STRING
    input.Body.properties.jitAccessPolicy.maximumJitAccessDuration == STRING
    input.Body.plan.name == STRING
    input.Body.plan.publisher == STRING
    input.Body.plan.product == STRING
    input.Body.plan.promotionCode == STRING
    input.Body.plan.version == STRING
    input.Body.kind == STRING
    input.Body.identity.type == enum_IdentityType[_]
    input.Body.identity.userAssignedIdentities.STRING == {}
    input.ReqMap.applicationId == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

JitRequests_Get

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.jitRequestName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

JitRequests_Update

valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.jitRequestName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

ListOperations

valid {
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

PortalRegistryPackage

valid {
    input.Body.publisher == STRING
    input.Body.offer == STRING
    input.Body.plan == STRING
    input.Body.version == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
}

jitRequests_CreateOrUpdate

enum_JitSchedulingType := [ "NotSpecified", "Once", "Recurring" ]

valid {
    input.Body.properties.applicationResourceId == STRING
    input.Body.properties.jitAuthorizationPolicies[_].principalId == STRING
    input.Body.properties.jitAuthorizationPolicies[_].roleDefinitionId == STRING
    input.Body.properties.jitSchedulingPolicy.type == enum_JitSchedulingType[_]
    input.Body.properties.jitSchedulingPolicy.duration == STRING
    input.Body.properties.jitSchedulingPolicy.startTime == STRING
    input.Body.location == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.jitRequestName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

jitRequests_Delete

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.ReqMap.jitRequestName == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

jitRequests_ListByResourceGroup

valid {
    input.ReqMap.SubscriptionID == STRING
    input.ReqMap.ResourceGroup == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
    input.ProviderMetadata.ResourceGroup == STRING
}

jitRequests_ListBySubscription

valid {
    input.ReqMap.SubscriptionID == STRING
    input.Qs.api-version == STRING
    input.ProviderMetadata.Region == STRING
    input.ProviderMetadata.SubscriptionID == STRING
}

Updated 8 months ago