valid {
    input.Body.accessTuple.fullResourceName == STRING
    input.Body.accessTuple.permission == STRING
    input.Body.accessTuple.principal == STRING
    input.ProviderMetadata.Region == STRING
}