VPC-LATTICE

docs.aws.amazon.com

BatchUpdateRule

valid {
    input.Body.rules[_].ruleIdentifier == STRING
    input.Body.rules[_].match.httpMatch.method == STRING
    input.Body.rules[_].match.httpMatch.pathMatch.match.exact == STRING
    input.Body.rules[_].match.httpMatch.pathMatch.match.prefix == STRING
    input.Body.rules[_].match.httpMatch.pathMatch.caseSensitive == BOOLEAN
    input.Body.rules[_].match.httpMatch.headerMatches[_].name == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].match.exact == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].match.prefix == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].match.contains == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].caseSensitive == BOOLEAN
    input.Body.rules[_].priority == INTEGER
    input.Body.rules[_].action.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.rules[_].action.forward.targetGroups[_].weight == INTEGER
    input.Body.rules[_].action.fixedResponse.statusCode == INTEGER
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateAccessLogSubscription

enum_ServiceNetworkLogType := [ "SERVICE", "RESOURCE" ]

valid {
    input.Body.clientToken == STRING
    input.Body.resourceIdentifier == STRING
    input.Body.destinationArn == STRING
    input.Body.serviceNetworkLogType == enum_ServiceNetworkLogType[_]
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateListener

enum_ListenerProtocol := [ "HTTP", "HTTPS", "TLS_PASSTHROUGH" ]

valid {
    input.Body.name == STRING
    input.Body.protocol == enum_ListenerProtocol[_]
    input.Body.port == INTEGER
    input.Body.defaultAction.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.defaultAction.forward.targetGroups[_].weight == INTEGER
    input.Body.defaultAction.fixedResponse.statusCode == INTEGER
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateResourceConfiguration

enum_ProtocolType := [ "TCP" ]
enum_ResourceConfigurationIpAddressType := [ "IPV4", "IPV6", "DUALSTACK" ]
enum_ResourceConfigurationType := [ "GROUP", "CHILD", "SINGLE", "ARN" ]

valid {
    input.Body.name == STRING
    input.Body.type == enum_ResourceConfigurationType[_]
    input.Body.portRanges[_] == STRING
    input.Body.protocol == enum_ProtocolType[_]
    input.Body.resourceGatewayIdentifier == STRING
    input.Body.resourceConfigurationGroupIdentifier == STRING
    input.Body.resourceConfigurationDefinition.dnsResource.domainName == STRING
    input.Body.resourceConfigurationDefinition.dnsResource.ipAddressType == enum_ResourceConfigurationIpAddressType[_]
    input.Body.resourceConfigurationDefinition.ipResource.ipAddress == STRING
    input.Body.resourceConfigurationDefinition.arnResource.arn == STRING
    input.Body.allowAssociationToShareableServiceNetwork == BOOLEAN
    input.Body.customDomainName == STRING
    input.Body.groupDomain == STRING
    input.Body.domainVerificationIdentifier == STRING
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateResourceGateway

enum_ResourceGatewayIpAddressType := [ "IPV4", "IPV6", "DUALSTACK" ]

valid {
    input.Body.clientToken == STRING
    input.Body.name == STRING
    input.Body.vpcIdentifier == STRING
    input.Body.subnetIds[_] == STRING
    input.Body.securityGroupIds[_] == STRING
    input.Body.ipAddressType == enum_ResourceGatewayIpAddressType[_]
    input.Body.ipv4AddressesPerEni == INTEGER
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateRule

valid {
    input.Body.name == STRING
    input.Body.match.httpMatch.method == STRING
    input.Body.match.httpMatch.pathMatch.match.exact == STRING
    input.Body.match.httpMatch.pathMatch.match.prefix == STRING
    input.Body.match.httpMatch.pathMatch.caseSensitive == BOOLEAN
    input.Body.match.httpMatch.headerMatches[_].name == STRING
    input.Body.match.httpMatch.headerMatches[_].match.exact == STRING
    input.Body.match.httpMatch.headerMatches[_].match.prefix == STRING
    input.Body.match.httpMatch.headerMatches[_].match.contains == STRING
    input.Body.match.httpMatch.headerMatches[_].caseSensitive == BOOLEAN
    input.Body.priority == INTEGER
    input.Body.action.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.action.forward.targetGroups[_].weight == INTEGER
    input.Body.action.fixedResponse.statusCode == INTEGER
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateService

enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.clientToken == STRING
    input.Body.name == STRING
    input.Body.tags.STRING == STRING
    input.Body.customDomainName == STRING
    input.Body.certificateArn == STRING
    input.Body.authType == enum_AuthType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateServiceNetwork

enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.clientToken == STRING
    input.Body.name == STRING
    input.Body.authType == enum_AuthType[_]
    input.Body.tags.STRING == STRING
    input.Body.sharingConfig.enabled == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateServiceNetworkResourceAssociation

valid {
    input.Body.clientToken == STRING
    input.Body.resourceConfigurationIdentifier == STRING
    input.Body.serviceNetworkIdentifier == STRING
    input.Body.privateDnsEnabled == BOOLEAN
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateServiceNetworkServiceAssociation

valid {
    input.Body.clientToken == STRING
    input.Body.serviceIdentifier == STRING
    input.Body.serviceNetworkIdentifier == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateServiceNetworkVpcAssociation

enum_PrivateDnsPreference := [ "VERIFIED_DOMAINS_ONLY", "ALL_DOMAINS", "VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS", "SPECIFIED_DOMAINS_ONLY" ]

valid {
    input.Body.clientToken == STRING
    input.Body.serviceNetworkIdentifier == STRING
    input.Body.vpcIdentifier == STRING
    input.Body.privateDnsEnabled == BOOLEAN
    input.Body.securityGroupIds[_] == STRING
    input.Body.tags.STRING == STRING
    input.Body.dnsOptions.privateDnsPreference == enum_PrivateDnsPreference[_]
    input.Body.dnsOptions.privateDnsSpecifiedDomains[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateTargetGroup

enum_HealthCheckProtocolVersion := [ "HTTP1", "HTTP2" ]
enum_IpAddressType := [ "IPV4", "IPV6" ]
enum_LambdaEventStructureVersion := [ "V1", "V2" ]
enum_TargetGroupProtocol := [ "HTTP", "HTTPS", "TCP" ]
enum_TargetGroupProtocolVersion := [ "HTTP1", "HTTP2", "GRPC" ]
enum_TargetGroupType := [ "IP", "LAMBDA", "INSTANCE", "ALB" ]

valid {
    input.Body.name == STRING
    input.Body.type == enum_TargetGroupType[_]
    input.Body.config.port == INTEGER
    input.Body.config.protocol == enum_TargetGroupProtocol[_]
    input.Body.config.protocolVersion == enum_TargetGroupProtocolVersion[_]
    input.Body.config.ipAddressType == enum_IpAddressType[_]
    input.Body.config.vpcIdentifier == STRING
    input.Body.config.healthCheck.enabled == BOOLEAN
    input.Body.config.healthCheck.protocol == enum_TargetGroupProtocol[_]
    input.Body.config.healthCheck.protocolVersion == enum_HealthCheckProtocolVersion[_]
    input.Body.config.healthCheck.port == INTEGER
    input.Body.config.healthCheck.path == STRING
    input.Body.config.healthCheck.healthCheckIntervalSeconds == INTEGER
    input.Body.config.healthCheck.healthCheckTimeoutSeconds == INTEGER
    input.Body.config.healthCheck.healthyThresholdCount == INTEGER
    input.Body.config.healthCheck.unhealthyThresholdCount == INTEGER
    input.Body.config.healthCheck.matcher.httpCode == STRING
    input.Body.config.lambdaEventStructureVersion == enum_LambdaEventStructureVersion[_]
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteAccessLogSubscription

valid {
    input.ReqMap.accessLogSubscriptionIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteAuthPolicy

valid {
    input.ReqMap.resourceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteDomainVerification

valid {
    input.ReqMap.domainVerificationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteListener

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteResourceConfiguration

valid {
    input.ReqMap.resourceConfigurationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteResourceEndpointAssociation

valid {
    input.ReqMap.resourceEndpointAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteResourceGateway

valid {
    input.ReqMap.resourceGatewayIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteResourcePolicy

valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteRule

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ReqMap.ruleIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteService

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteServiceNetwork

valid {
    input.ReqMap.serviceNetworkIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteServiceNetworkResourceAssociation

valid {
    input.ReqMap.serviceNetworkResourceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteServiceNetworkServiceAssociation

valid {
    input.ReqMap.serviceNetworkServiceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteServiceNetworkVpcAssociation

valid {
    input.ReqMap.serviceNetworkVpcAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteTargetGroup

valid {
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeregisterTargets

valid {
    input.Body.targets[_].id == STRING
    input.Body.targets[_].port == INTEGER
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetAccessLogSubscription

valid {
    input.ReqMap.accessLogSubscriptionIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetAuthPolicy

valid {
    input.ReqMap.resourceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetDomainVerification

valid {
    input.ReqMap.domainVerificationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetListener

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetResourceConfiguration

valid {
    input.ReqMap.resourceConfigurationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetResourceGateway

valid {
    input.ReqMap.resourceGatewayIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetResourcePolicy

valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetRule

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ReqMap.ruleIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetService

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetServiceNetwork

valid {
    input.ReqMap.serviceNetworkIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetServiceNetworkResourceAssociation

valid {
    input.ReqMap.serviceNetworkResourceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetServiceNetworkServiceAssociation

valid {
    input.ReqMap.serviceNetworkServiceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetServiceNetworkVpcAssociation

valid {
    input.ReqMap.serviceNetworkVpcAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetTargetGroup

valid {
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListAccessLogSubscriptions

valid {
    input.Qs.resourceIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListDomainVerifications

valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListListeners

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListResourceConfigurations

valid {
    input.Qs.resourceGatewayIdentifier == STRING
    input.Qs.resourceConfigurationGroupIdentifier == STRING
    input.Qs.domainVerificationIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListResourceEndpointAssociations

valid {
    input.Qs.resourceConfigurationIdentifier == STRING
    input.Qs.resourceEndpointAssociationIdentifier == STRING
    input.Qs.vpcEndpointId == STRING
    input.Qs.vpcEndpointOwner == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListResourceGateways

valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListRules

valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListServiceNetworkResourceAssociations

valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.resourceConfigurationIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.Qs.includeChildren == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListServiceNetworkServiceAssociations

valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.serviceIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListServiceNetworkVpcAssociations

valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.vpcIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListServiceNetworkVpcEndpointAssociations

valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListServiceNetworks

valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListServices

valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTagsForResource

valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTargetGroups

enum_TargetGroupType := [ "IP", "LAMBDA", "INSTANCE", "ALB" ]

valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.Qs.vpcIdentifier == STRING
    input.Qs.targetGroupType == enum_TargetGroupType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTargets

valid {
    input.Body.targets[_].id == STRING
    input.Body.targets[_].port == INTEGER
    input.ReqMap.targetGroupIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

PutAuthPolicy

valid {
    input.Body.policy == STRING
    input.ReqMap.resourceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

PutResourcePolicy

valid {
    input.Body.policy == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

RegisterTargets

valid {
    input.Body.targets[_].id == STRING
    input.Body.targets[_].port == INTEGER
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

StartDomainVerification

valid {
    input.Body.clientToken == STRING
    input.Body.domainName == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

TagResource

valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UntagResource

valid {
    input.ReqMap.resourceArn == STRING
    input.Qs.tagKeys[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateAccessLogSubscription

valid {
    input.Body.destinationArn == STRING
    input.ReqMap.accessLogSubscriptionIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateListener

valid {
    input.Body.defaultAction.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.defaultAction.forward.targetGroups[_].weight == INTEGER
    input.Body.defaultAction.fixedResponse.statusCode == INTEGER
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateResourceConfiguration

enum_ResourceConfigurationIpAddressType := [ "IPV4", "IPV6", "DUALSTACK" ]

valid {
    input.Body.resourceConfigurationDefinition.dnsResource.domainName == STRING
    input.Body.resourceConfigurationDefinition.dnsResource.ipAddressType == enum_ResourceConfigurationIpAddressType[_]
    input.Body.resourceConfigurationDefinition.ipResource.ipAddress == STRING
    input.Body.resourceConfigurationDefinition.arnResource.arn == STRING
    input.Body.allowAssociationToShareableServiceNetwork == BOOLEAN
    input.Body.portRanges[_] == STRING
    input.ReqMap.resourceConfigurationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateResourceGateway

valid {
    input.Body.securityGroupIds[_] == STRING
    input.ReqMap.resourceGatewayIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateRule

valid {
    input.Body.match.httpMatch.method == STRING
    input.Body.match.httpMatch.pathMatch.match.exact == STRING
    input.Body.match.httpMatch.pathMatch.match.prefix == STRING
    input.Body.match.httpMatch.pathMatch.caseSensitive == BOOLEAN
    input.Body.match.httpMatch.headerMatches[_].name == STRING
    input.Body.match.httpMatch.headerMatches[_].match.exact == STRING
    input.Body.match.httpMatch.headerMatches[_].match.prefix == STRING
    input.Body.match.httpMatch.headerMatches[_].match.contains == STRING
    input.Body.match.httpMatch.headerMatches[_].caseSensitive == BOOLEAN
    input.Body.priority == INTEGER
    input.Body.action.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.action.forward.targetGroups[_].weight == INTEGER
    input.Body.action.fixedResponse.statusCode == INTEGER
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ReqMap.ruleIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateService

enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.certificateArn == STRING
    input.Body.authType == enum_AuthType[_]
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateServiceNetwork

enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.authType == enum_AuthType[_]
    input.ReqMap.serviceNetworkIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateServiceNetworkVpcAssociation

valid {
    input.Body.securityGroupIds[_] == STRING
    input.ReqMap.serviceNetworkVpcAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateTargetGroup

enum_HealthCheckProtocolVersion := [ "HTTP1", "HTTP2" ]
enum_TargetGroupProtocol := [ "HTTP", "HTTPS", "TCP" ]

valid {
    input.Body.healthCheck.enabled == BOOLEAN
    input.Body.healthCheck.protocol == enum_TargetGroupProtocol[_]
    input.Body.healthCheck.protocolVersion == enum_HealthCheckProtocolVersion[_]
    input.Body.healthCheck.port == INTEGER
    input.Body.healthCheck.path == STRING
    input.Body.healthCheck.healthCheckIntervalSeconds == INTEGER
    input.Body.healthCheck.healthCheckTimeoutSeconds == INTEGER
    input.Body.healthCheck.healthyThresholdCount == INTEGER
    input.Body.healthCheck.unhealthyThresholdCount == INTEGER
    input.Body.healthCheck.matcher.httpCode == STRING
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

Updated 26 days ago