ActivateKeySigningKey

valid {
    input.ReqMap.HostedZoneId == STRING
    input.ReqMap.Name == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateVPCWithHostedZone

enum_VPCRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-west-3", "eu-central-1", "eu-central-2", "ap-east-1", "me-south-1", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "me-central-1", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-south-1", "ap-south-2", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "ca-central-1", "cn-north-1", "cn-northwest-1", "af-south-1", "eu-south-1", "eu-south-2", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]

valid {
    input.Body.VPC.VPCRegion == enum_VPCRegion[_]
    input.Body.VPC.VPCId == STRING
    input.Body.Comment == STRING
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ChangeCidrCollection

enum_CidrCollectionChangeAction := [ "PUT", "DELETE_IF_EXISTS" ]

valid {
    input.Body.CollectionVersion == LONG
    input.Body.Changes[_].LocationName == STRING
    input.Body.Changes[_].Action == enum_CidrCollectionChangeAction[_]
    input.Body.Changes[_].CidrList[_] == STRING
    input.ReqMap.CidrCollectionId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ChangeResourceRecordSets

enum_ChangeAction := [ "CREATE", "DELETE", "UPSERT" ]
enum_RRType := [ "SOA", "A", "TXT", "NS", "CNAME", "MX", "NAPTR", "PTR", "SRV", "SPF", "AAAA", "CAA", "DS", "TLSA", "SSHFP", "SVCB", "HTTPS" ]
enum_ResourceRecordSetFailover := [ "PRIMARY", "SECONDARY" ]
enum_ResourceRecordSetRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "ca-central-1", "eu-west-1", "eu-west-2", "eu-west-3", "eu-central-1", "eu-central-2", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "cn-north-1", "cn-northwest-1", "ap-east-1", "me-south-1", "me-central-1", "ap-south-1", "ap-south-2", "af-south-1", "eu-south-1", "eu-south-2", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]

valid {
    input.Body.ChangeBatch.Comment == STRING
    input.Body.ChangeBatch.Changes[_].Action == enum_ChangeAction[_]
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.Name == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.Type == enum_RRType[_]
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.SetIdentifier == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.Weight == LONG
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.Region == enum_ResourceRecordSetRegion[_]
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoLocation.ContinentCode == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoLocation.CountryCode == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoLocation.SubdivisionCode == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.Failover == enum_ResourceRecordSetFailover[_]
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.MultiValueAnswer == BOOLEAN
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.TTL == LONG
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.ResourceRecords[_].Value == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.AliasTarget.HostedZoneId == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.AliasTarget.DNSName == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.AliasTarget.EvaluateTargetHealth == BOOLEAN
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.HealthCheckId == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.TrafficPolicyInstanceId == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.CidrRoutingConfig.CollectionId == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.CidrRoutingConfig.LocationName == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoProximityLocation.AWSRegion == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoProximityLocation.LocalZoneGroup == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoProximityLocation.Coordinates.Latitude == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoProximityLocation.Coordinates.Longitude == STRING
    input.Body.ChangeBatch.Changes[_].ResourceRecordSet.GeoProximityLocation.Bias == INTEGER
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ChangeTagsForResource

enum_TagResourceType := [ "healthcheck", "hostedzone" ]

valid {
    input.Body.AddTags[_].Key == STRING
    input.Body.AddTags[_].Value == STRING
    input.Body.RemoveTagKeys[_] == STRING
    input.ReqMap.ResourceType == enum_TagResourceType[_]
    input.ReqMap.ResourceId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateCidrCollection

valid {
    input.Body.Name == STRING
    input.Body.CallerReference == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateHealthCheck

enum_CloudWatchRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "ca-central-1", "eu-central-1", "eu-central-2", "eu-west-1", "eu-west-2", "eu-west-3", "ap-east-1", "me-south-1", "me-central-1", "ap-south-1", "ap-south-2", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "cn-northwest-1", "cn-north-1", "af-south-1", "eu-south-1", "eu-south-2", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]
enum_HealthCheckRegion := [ "us-east-1", "us-west-1", "us-west-2", "eu-west-1", "ap-southeast-1", "ap-southeast-2", "ap-northeast-1", "sa-east-1" ]
enum_HealthCheckType := [ "HTTP", "HTTPS", "HTTP_STR_MATCH", "HTTPS_STR_MATCH", "TCP", "CALCULATED", "CLOUDWATCH_METRIC", "RECOVERY_CONTROL" ]
enum_InsufficientDataHealthStatus := [ "Healthy", "Unhealthy", "LastKnownStatus" ]

valid {
    input.Body.CallerReference == STRING
    input.Body.HealthCheckConfig.IPAddress == STRING
    input.Body.HealthCheckConfig.Port == INTEGER
    input.Body.HealthCheckConfig.Type == enum_HealthCheckType[_]
    input.Body.HealthCheckConfig.ResourcePath == STRING
    input.Body.HealthCheckConfig.FullyQualifiedDomainName == STRING
    input.Body.HealthCheckConfig.SearchString == STRING
    input.Body.HealthCheckConfig.RequestInterval == INTEGER
    input.Body.HealthCheckConfig.FailureThreshold == INTEGER
    input.Body.HealthCheckConfig.MeasureLatency == BOOLEAN
    input.Body.HealthCheckConfig.Inverted == BOOLEAN
    input.Body.HealthCheckConfig.Disabled == BOOLEAN
    input.Body.HealthCheckConfig.HealthThreshold == INTEGER
    input.Body.HealthCheckConfig.ChildHealthChecks[_] == STRING
    input.Body.HealthCheckConfig.EnableSNI == BOOLEAN
    input.Body.HealthCheckConfig.Regions[_] == enum_HealthCheckRegion[_]
    input.Body.HealthCheckConfig.AlarmIdentifier.Region == enum_CloudWatchRegion[_]
    input.Body.HealthCheckConfig.AlarmIdentifier.Name == STRING
    input.Body.HealthCheckConfig.InsufficientDataHealthStatus == enum_InsufficientDataHealthStatus[_]
    input.Body.HealthCheckConfig.RoutingControlArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateHostedZone

enum_VPCRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-west-3", "eu-central-1", "eu-central-2", "ap-east-1", "me-south-1", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "me-central-1", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-south-1", "ap-south-2", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "ca-central-1", "cn-north-1", "cn-northwest-1", "af-south-1", "eu-south-1", "eu-south-2", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]

valid {
    input.Body.Name == STRING
    input.Body.VPC.VPCRegion == enum_VPCRegion[_]
    input.Body.VPC.VPCId == STRING
    input.Body.CallerReference == STRING
    input.Body.HostedZoneConfig.Comment == STRING
    input.Body.HostedZoneConfig.PrivateZone == BOOLEAN
    input.Body.DelegationSetId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateKeySigningKey

valid {
    input.Body.CallerReference == STRING
    input.Body.HostedZoneId == STRING
    input.Body.KeyManagementServiceArn == STRING
    input.Body.Name == STRING
    input.Body.Status == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateQueryLoggingConfig

valid {
    input.Body.HostedZoneId == STRING
    input.Body.CloudWatchLogsLogGroupArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateReusableDelegationSet

valid {
    input.Body.CallerReference == STRING
    input.Body.HostedZoneId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateTrafficPolicy

valid {
    input.Body.Name == STRING
    input.Body.Document == STRING
    input.Body.Comment == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateTrafficPolicyInstance

valid {
    input.Body.HostedZoneId == STRING
    input.Body.Name == STRING
    input.Body.TTL == LONG
    input.Body.TrafficPolicyId == STRING
    input.Body.TrafficPolicyVersion == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateTrafficPolicyVersion

valid {
    input.Body.Document == STRING
    input.Body.Comment == STRING
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateVPCAssociationAuthorization

enum_VPCRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-west-3", "eu-central-1", "eu-central-2", "ap-east-1", "me-south-1", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "me-central-1", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-south-1", "ap-south-2", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "ca-central-1", "cn-north-1", "cn-northwest-1", "af-south-1", "eu-south-1", "eu-south-2", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]

valid {
    input.Body.VPC.VPCRegion == enum_VPCRegion[_]
    input.Body.VPC.VPCId == STRING
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeactivateKeySigningKey

valid {
    input.ReqMap.HostedZoneId == STRING
    input.ReqMap.Name == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteCidrCollection

valid {
    input.ReqMap.CidrCollectionId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteHealthCheck

valid {
    input.ReqMap.HealthCheckId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteHostedZone

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteKeySigningKey

valid {
    input.ReqMap.HostedZoneId == STRING
    input.ReqMap.Name == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteQueryLoggingConfig

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteReusableDelegationSet

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteTrafficPolicy

valid {
    input.ReqMap.Id == STRING
    input.ReqMap.Version == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteTrafficPolicyInstance

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteVPCAssociationAuthorization

enum_VPCRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-west-3", "eu-central-1", "eu-central-2", "ap-east-1", "me-south-1", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "me-central-1", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-south-1", "ap-south-2", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "ca-central-1", "cn-north-1", "cn-northwest-1", "af-south-1", "eu-south-1", "eu-south-2", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]

valid {
    input.Body.VPC.VPCRegion == enum_VPCRegion[_]
    input.Body.VPC.VPCId == STRING
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisableHostedZoneDNSSEC

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateVPCFromHostedZone

enum_VPCRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-west-3", "eu-central-1", "eu-central-2", "ap-east-1", "me-south-1", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "me-central-1", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-south-1", "ap-south-2", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "ca-central-1", "cn-north-1", "cn-northwest-1", "af-south-1", "eu-south-1", "eu-south-2", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]

valid {
    input.Body.VPC.VPCRegion == enum_VPCRegion[_]
    input.Body.VPC.VPCId == STRING
    input.Body.Comment == STRING
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

EnableHostedZoneDNSSEC

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetAccountLimit

enum_AccountLimitType := [ "MAX_HEALTH_CHECKS_BY_OWNER", "MAX_HOSTED_ZONES_BY_OWNER", "MAX_TRAFFIC_POLICY_INSTANCES_BY_OWNER", "MAX_REUSABLE_DELEGATION_SETS_BY_OWNER", "MAX_TRAFFIC_POLICIES_BY_OWNER" ]

valid {
    input.ReqMap.Type == enum_AccountLimitType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetChange

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetCheckerIpRanges

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetDNSSEC

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetGeoLocation

valid {
    input.Qs.continentcode == STRING
    input.Qs.countrycode == STRING
    input.Qs.subdivisioncode == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetHealthCheck

valid {
    input.ReqMap.HealthCheckId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetHealthCheckCount

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetHealthCheckLastFailureReason

valid {
    input.ReqMap.HealthCheckId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetHealthCheckStatus

valid {
    input.ReqMap.HealthCheckId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetHostedZone

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetHostedZoneCount

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetHostedZoneLimit

enum_HostedZoneLimitType := [ "MAX_RRSETS_BY_ZONE", "MAX_VPCS_ASSOCIATED_BY_ZONE" ]

valid {
    input.ReqMap.Type == enum_HostedZoneLimitType[_]
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetQueryLoggingConfig

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetReusableDelegationSet

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetReusableDelegationSetLimit

enum_ReusableDelegationSetLimitType := [ "MAX_ZONES_BY_REUSABLE_DELEGATION_SET" ]

valid {
    input.ReqMap.Type == enum_ReusableDelegationSetLimitType[_]
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetTrafficPolicy

valid {
    input.ReqMap.Id == STRING
    input.ReqMap.Version == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetTrafficPolicyInstance

valid {
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetTrafficPolicyInstanceCount

valid {
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCidrBlocks

valid {
    input.ReqMap.CidrCollectionId == STRING
    input.Qs.location == STRING
    input.Qs.nexttoken == STRING
    input.Qs.maxresults == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCidrCollections

valid {
    input.Qs.nexttoken == STRING
    input.Qs.maxresults == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListCidrLocations

valid {
    input.ReqMap.CidrCollectionId == STRING
    input.Qs.nexttoken == STRING
    input.Qs.maxresults == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListGeoLocations

valid {
    input.Qs.startcontinentcode == STRING
    input.Qs.startcountrycode == STRING
    input.Qs.startsubdivisioncode == STRING
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListHealthChecks

valid {
    input.Qs.marker == STRING
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListHostedZones

enum_HostedZoneType := [ "PrivateHostedZone" ]

valid {
    input.Qs.marker == STRING
    input.Qs.maxitems == STRING
    input.Qs.delegationsetid == STRING
    input.Qs.hostedzonetype == enum_HostedZoneType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListHostedZonesByName

valid {
    input.Qs.dnsname == STRING
    input.Qs.hostedzoneid == STRING
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListHostedZonesByVPC

enum_VPCRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "eu-west-1", "eu-west-2", "eu-west-3", "eu-central-1", "eu-central-2", "ap-east-1", "me-south-1", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "me-central-1", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-south-1", "ap-south-2", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "ca-central-1", "cn-north-1", "cn-northwest-1", "af-south-1", "eu-south-1", "eu-south-2", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]

valid {
    input.Qs.vpcid == STRING
    input.Qs.vpcregion == enum_VPCRegion[_]
    input.Qs.maxitems == STRING
    input.Qs.nexttoken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListQueryLoggingConfigs

valid {
    input.Qs.hostedzoneid == STRING
    input.Qs.nexttoken == STRING
    input.Qs.maxresults == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListResourceRecordSets

enum_RRType := [ "SOA", "A", "TXT", "NS", "CNAME", "MX", "NAPTR", "PTR", "SRV", "SPF", "AAAA", "CAA", "DS", "TLSA", "SSHFP", "SVCB", "HTTPS" ]

valid {
    input.ReqMap.Id == STRING
    input.Qs.name == STRING
    input.Qs.type == enum_RRType[_]
    input.Qs.identifier == STRING
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListReusableDelegationSets

valid {
    input.Qs.marker == STRING
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTagsForResource

enum_TagResourceType := [ "healthcheck", "hostedzone" ]

valid {
    input.ReqMap.ResourceType == enum_TagResourceType[_]
    input.ReqMap.ResourceId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTagsForResources

enum_TagResourceType := [ "healthcheck", "hostedzone" ]

valid {
    input.Body.ResourceIds[_] == STRING
    input.ReqMap.ResourceType == enum_TagResourceType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTrafficPolicies

valid {
    input.Qs.trafficpolicyid == STRING
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTrafficPolicyInstances

enum_RRType := [ "SOA", "A", "TXT", "NS", "CNAME", "MX", "NAPTR", "PTR", "SRV", "SPF", "AAAA", "CAA", "DS", "TLSA", "SSHFP", "SVCB", "HTTPS" ]

valid {
    input.Qs.hostedzoneid == STRING
    input.Qs.trafficpolicyinstancename == STRING
    input.Qs.trafficpolicyinstancetype == enum_RRType[_]
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTrafficPolicyInstancesByHostedZone

enum_RRType := [ "SOA", "A", "TXT", "NS", "CNAME", "MX", "NAPTR", "PTR", "SRV", "SPF", "AAAA", "CAA", "DS", "TLSA", "SSHFP", "SVCB", "HTTPS" ]

valid {
    input.Qs.id == STRING
    input.Qs.trafficpolicyinstancename == STRING
    input.Qs.trafficpolicyinstancetype == enum_RRType[_]
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTrafficPolicyInstancesByPolicy

enum_RRType := [ "SOA", "A", "TXT", "NS", "CNAME", "MX", "NAPTR", "PTR", "SRV", "SPF", "AAAA", "CAA", "DS", "TLSA", "SSHFP", "SVCB", "HTTPS" ]

valid {
    input.Qs.id == STRING
    input.Qs.version == INTEGER
    input.Qs.hostedzoneid == STRING
    input.Qs.trafficpolicyinstancename == STRING
    input.Qs.trafficpolicyinstancetype == enum_RRType[_]
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTrafficPolicyVersions

valid {
    input.ReqMap.Id == STRING
    input.Qs.trafficpolicyversion == STRING
    input.Qs.maxitems == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListVPCAssociationAuthorizations

valid {
    input.ReqMap.Id == STRING
    input.Qs.nexttoken == STRING
    input.Qs.maxresults == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

TestDNSAnswer

enum_RRType := [ "SOA", "A", "TXT", "NS", "CNAME", "MX", "NAPTR", "PTR", "SRV", "SPF", "AAAA", "CAA", "DS", "TLSA", "SSHFP", "SVCB", "HTTPS" ]

valid {
    input.Qs.hostedzoneid == STRING
    input.Qs.recordname == STRING
    input.Qs.recordtype == enum_RRType[_]
    input.Qs.resolverip == STRING
    input.Qs.edns0clientsubnetip == STRING
    input.Qs.edns0clientsubnetmask == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateHealthCheck

enum_CloudWatchRegion := [ "us-east-1", "us-east-2", "us-west-1", "us-west-2", "ca-central-1", "eu-central-1", "eu-central-2", "eu-west-1", "eu-west-2", "eu-west-3", "ap-east-1", "me-south-1", "me-central-1", "ap-south-1", "ap-south-2", "ap-southeast-1", "ap-southeast-2", "ap-southeast-3", "ap-northeast-1", "ap-northeast-2", "ap-northeast-3", "eu-north-1", "sa-east-1", "cn-northwest-1", "cn-north-1", "af-south-1", "eu-south-1", "eu-south-2", "us-gov-west-1", "us-gov-east-1", "us-iso-east-1", "us-iso-west-1", "us-isob-east-1", "ap-southeast-4", "il-central-1", "ca-west-1", "ap-southeast-5" ]
enum_HealthCheckRegion := [ "us-east-1", "us-west-1", "us-west-2", "eu-west-1", "ap-southeast-1", "ap-southeast-2", "ap-northeast-1", "sa-east-1" ]
enum_InsufficientDataHealthStatus := [ "Healthy", "Unhealthy", "LastKnownStatus" ]
enum_ResettableElementName := [ "FullyQualifiedDomainName", "Regions", "ResourcePath", "ChildHealthChecks" ]

valid {
    input.Body.HealthCheckVersion == LONG
    input.Body.IPAddress == STRING
    input.Body.Port == INTEGER
    input.Body.ResourcePath == STRING
    input.Body.FullyQualifiedDomainName == STRING
    input.Body.SearchString == STRING
    input.Body.FailureThreshold == INTEGER
    input.Body.Inverted == BOOLEAN
    input.Body.Disabled == BOOLEAN
    input.Body.HealthThreshold == INTEGER
    input.Body.ChildHealthChecks[_] == STRING
    input.Body.EnableSNI == BOOLEAN
    input.Body.Regions[_] == enum_HealthCheckRegion[_]
    input.Body.AlarmIdentifier.Region == enum_CloudWatchRegion[_]
    input.Body.AlarmIdentifier.Name == STRING
    input.Body.InsufficientDataHealthStatus == enum_InsufficientDataHealthStatus[_]
    input.Body.ResetElements[_] == enum_ResettableElementName[_]
    input.ReqMap.HealthCheckId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateHostedZoneComment

valid {
    input.Body.Comment == STRING
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateTrafficPolicyComment

valid {
    input.Body.Comment == STRING
    input.ReqMap.Id == STRING
    input.ReqMap.Version == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateTrafficPolicyInstance

valid {
    input.Body.TTL == LONG
    input.Body.TrafficPolicyId == STRING
    input.Body.TrafficPolicyVersion == INTEGER
    input.ReqMap.Id == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}