valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

enum_EndpointNetworkType := [ "NETWORK_TYPE_UNSPECIFIED", "GCP_NETWORK", "NON_GCP_NETWORK" ]

valid {
    input.Body.bypassFirewallChecks == BOOLEAN
    input.Body.description == STRING
    input.Body.destination.appEngineVersion.uri == STRING
    input.Body.destination.cloudFunction.uri == STRING
    input.Body.destination.cloudRunRevision.uri == STRING
    input.Body.destination.cloudSqlInstance == STRING
    input.Body.destination.forwardingRule == STRING
    input.Body.destination.gkeMasterCluster == STRING
    input.Body.destination.instance == STRING
    input.Body.destination.ipAddress == STRING
    input.Body.destination.network == STRING
    input.Body.destination.networkType == enum_EndpointNetworkType[_]
    input.Body.destination.port == INTEGER
    input.Body.destination.projectId == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.protocol == STRING
    input.Body.relatedProjects[_] == STRING
    input.Body.source.appEngineVersion.uri == STRING
    input.Body.source.cloudFunction.uri == STRING
    input.Body.source.cloudRunRevision.uri == STRING
    input.Body.source.cloudSqlInstance == STRING
    input.Body.source.forwardingRule == STRING
    input.Body.source.gkeMasterCluster == STRING
    input.Body.source.instance == STRING
    input.Body.source.ipAddress == STRING
    input.Body.source.network == STRING
    input.Body.source.networkType == enum_EndpointNetworkType[_]
    input.Body.source.port == INTEGER
    input.Body.source.projectId == STRING
    input.ReqMap.parent == STRING
    input.Qs.testId == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.resource == STRING
    input.Qs.options.requestedPolicyVersion == INTEGER
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_EndpointNetworkType := [ "NETWORK_TYPE_UNSPECIFIED", "GCP_NETWORK", "NON_GCP_NETWORK" ]

valid {
    input.Body.bypassFirewallChecks == BOOLEAN
    input.Body.description == STRING
    input.Body.destination.appEngineVersion.uri == STRING
    input.Body.destination.cloudFunction.uri == STRING
    input.Body.destination.cloudRunRevision.uri == STRING
    input.Body.destination.cloudSqlInstance == STRING
    input.Body.destination.forwardingRule == STRING
    input.Body.destination.gkeMasterCluster == STRING
    input.Body.destination.instance == STRING
    input.Body.destination.ipAddress == STRING
    input.Body.destination.network == STRING
    input.Body.destination.networkType == enum_EndpointNetworkType[_]
    input.Body.destination.port == INTEGER
    input.Body.destination.projectId == STRING
    input.Body.labels.STRING == STRING
    input.Body.name == STRING
    input.Body.protocol == STRING
    input.Body.relatedProjects[_] == STRING
    input.Body.source.appEngineVersion.uri == STRING
    input.Body.source.cloudFunction.uri == STRING
    input.Body.source.cloudRunRevision.uri == STRING
    input.Body.source.cloudSqlInstance == STRING
    input.Body.source.forwardingRule == STRING
    input.Body.source.gkeMasterCluster == STRING
    input.Body.source.instance == STRING
    input.Body.source.ipAddress == STRING
    input.Body.source.network == STRING
    input.Body.source.networkType == enum_EndpointNetworkType[_]
    input.Body.source.port == INTEGER
    input.Body.source.projectId == STRING
    input.ReqMap.name == STRING
    input.Qs.updateMask == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.STRING == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

enum_AuditLogConfigLogType := [ "LOG_TYPE_UNSPECIFIED", "ADMIN_READ", "DATA_WRITE", "DATA_READ" ]

valid {
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].exemptedMembers[_] == STRING
    input.Body.policy.auditConfigs[_].auditLogConfigs[_].logType == enum_AuditLogConfigLogType[_]
    input.Body.policy.auditConfigs[_].service == STRING
    input.Body.policy.bindings[_].condition.description == STRING
    input.Body.policy.bindings[_].condition.expression == STRING
    input.Body.policy.bindings[_].condition.location == STRING
    input.Body.policy.bindings[_].condition.title == STRING
    input.Body.policy.bindings[_].members[_] == STRING
    input.Body.policy.bindings[_].role == STRING
    input.Body.policy.etag == STRING
    input.Body.policy.version == INTEGER
    input.Body.updateMask == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.permissions[_] == STRING
    input.ReqMap.resource == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.Body.STRING == STRING
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.filter == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.Qs.filter == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_VpcFlowLogsConfigAggregationInterval := [ "AGGREGATION_INTERVAL_UNSPECIFIED", "INTERVAL_5_SEC", "INTERVAL_30_SEC", "INTERVAL_1_MIN", "INTERVAL_5_MIN", "INTERVAL_10_MIN", "INTERVAL_15_MIN" ]
enum_VpcFlowLogsConfigMetadata := [ "METADATA_UNSPECIFIED", "INCLUDE_ALL_METADATA", "EXCLUDE_ALL_METADATA", "CUSTOM_METADATA" ]
enum_VpcFlowLogsConfigState := [ "STATE_UNSPECIFIED", "ENABLED", "DISABLED" ]

valid {
    input.Body.aggregationInterval == enum_VpcFlowLogsConfigAggregationInterval[_]
    input.Body.description == STRING
    input.Body.filterExpr == STRING
    input.Body.flowSampling == NUMBER
    input.Body.interconnectAttachment == STRING
    input.Body.metadata == enum_VpcFlowLogsConfigMetadata[_]
    input.Body.metadataFields[_] == STRING
    input.Body.name == STRING
    input.Body.network == STRING
    input.Body.state == enum_VpcFlowLogsConfigState[_]
    input.Body.subnet == STRING
    input.Body.vpnTunnel == STRING
    input.ReqMap.parent == STRING
    input.Qs.vpcFlowLogsConfigId == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.name == STRING
    input.ProviderMetadata.Region == STRING
}

valid {
    input.ReqMap.parent == STRING
    input.Qs.filter == STRING
    input.Qs.orderBy == STRING
    input.Qs.pageSize == INTEGER
    input.Qs.pageToken == STRING
    input.ProviderMetadata.Region == STRING
}

enum_VpcFlowLogsConfigAggregationInterval := [ "AGGREGATION_INTERVAL_UNSPECIFIED", "INTERVAL_5_SEC", "INTERVAL_30_SEC", "INTERVAL_1_MIN", "INTERVAL_5_MIN", "INTERVAL_10_MIN", "INTERVAL_15_MIN" ]
enum_VpcFlowLogsConfigMetadata := [ "METADATA_UNSPECIFIED", "INCLUDE_ALL_METADATA", "EXCLUDE_ALL_METADATA", "CUSTOM_METADATA" ]
enum_VpcFlowLogsConfigState := [ "STATE_UNSPECIFIED", "ENABLED", "DISABLED" ]

valid {
    input.Body.aggregationInterval == enum_VpcFlowLogsConfigAggregationInterval[_]
    input.Body.description == STRING
    input.Body.filterExpr == STRING
    input.Body.flowSampling == NUMBER
    input.Body.interconnectAttachment == STRING
    input.Body.metadata == enum_VpcFlowLogsConfigMetadata[_]
    input.Body.metadataFields[_] == STRING
    input.Body.name == STRING
    input.Body.network == STRING
    input.Body.state == enum_VpcFlowLogsConfigState[_]
    input.Body.subnet == STRING
    input.Body.vpnTunnel == STRING
    input.ReqMap.name == STRING
    input.Qs.updateMask == STRING
    input.ProviderMetadata.Region == STRING
}