---
updatedAt: 2025-11-12T01:08:55.000Z
agentTools:
  projectIndex: https://public.docs.kivera.io/llms.txt
---

# VPC-LATTICE

<Embed url="https://docs.aws.amazon.com/" title="AWS documentation" provider="docs.aws.amazon.com" href="https://docs.aws.amazon.com/" />

# BatchUpdateRule

```erlang
valid {
    input.Body.rules[_].ruleIdentifier == STRING
    input.Body.rules[_].match.httpMatch.method == STRING
    input.Body.rules[_].match.httpMatch.pathMatch.match.exact == STRING
    input.Body.rules[_].match.httpMatch.pathMatch.match.prefix == STRING
    input.Body.rules[_].match.httpMatch.pathMatch.caseSensitive == BOOLEAN
    input.Body.rules[_].match.httpMatch.headerMatches[_].name == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].match.exact == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].match.prefix == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].match.contains == STRING
    input.Body.rules[_].match.httpMatch.headerMatches[_].caseSensitive == BOOLEAN
    input.Body.rules[_].priority == INTEGER
    input.Body.rules[_].action.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.rules[_].action.forward.targetGroups[_].weight == INTEGER
    input.Body.rules[_].action.fixedResponse.statusCode == INTEGER
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateAccessLogSubscription

```erlang
enum_ServiceNetworkLogType := [ "SERVICE", "RESOURCE" ]

valid {
    input.Body.clientToken == STRING
    input.Body.resourceIdentifier == STRING
    input.Body.destinationArn == STRING
    input.Body.serviceNetworkLogType == enum_ServiceNetworkLogType[_]
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateListener

```erlang
enum_ListenerProtocol := [ "HTTP", "HTTPS", "TLS_PASSTHROUGH" ]

valid {
    input.Body.name == STRING
    input.Body.protocol == enum_ListenerProtocol[_]
    input.Body.port == INTEGER
    input.Body.defaultAction.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.defaultAction.forward.targetGroups[_].weight == INTEGER
    input.Body.defaultAction.fixedResponse.statusCode == INTEGER
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateResourceConfiguration

```erlang
enum_ProtocolType := [ "TCP" ]
enum_ResourceConfigurationIpAddressType := [ "IPV4", "IPV6", "DUALSTACK" ]
enum_ResourceConfigurationType := [ "GROUP", "CHILD", "SINGLE", "ARN" ]

valid {
    input.Body.name == STRING
    input.Body.type == enum_ResourceConfigurationType[_]
    input.Body.portRanges[_] == STRING
    input.Body.protocol == enum_ProtocolType[_]
    input.Body.resourceGatewayIdentifier == STRING
    input.Body.resourceConfigurationGroupIdentifier == STRING
    input.Body.resourceConfigurationDefinition.dnsResource.domainName == STRING
    input.Body.resourceConfigurationDefinition.dnsResource.ipAddressType == enum_ResourceConfigurationIpAddressType[_]
    input.Body.resourceConfigurationDefinition.ipResource.ipAddress == STRING
    input.Body.resourceConfigurationDefinition.arnResource.arn == STRING
    input.Body.allowAssociationToShareableServiceNetwork == BOOLEAN
    input.Body.customDomainName == STRING
    input.Body.groupDomain == STRING
    input.Body.domainVerificationIdentifier == STRING
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateResourceGateway

```erlang
enum_ResourceGatewayIpAddressType := [ "IPV4", "IPV6", "DUALSTACK" ]

valid {
    input.Body.clientToken == STRING
    input.Body.name == STRING
    input.Body.vpcIdentifier == STRING
    input.Body.subnetIds[_] == STRING
    input.Body.securityGroupIds[_] == STRING
    input.Body.ipAddressType == enum_ResourceGatewayIpAddressType[_]
    input.Body.ipv4AddressesPerEni == INTEGER
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateRule

```erlang
valid {
    input.Body.name == STRING
    input.Body.match.httpMatch.method == STRING
    input.Body.match.httpMatch.pathMatch.match.exact == STRING
    input.Body.match.httpMatch.pathMatch.match.prefix == STRING
    input.Body.match.httpMatch.pathMatch.caseSensitive == BOOLEAN
    input.Body.match.httpMatch.headerMatches[_].name == STRING
    input.Body.match.httpMatch.headerMatches[_].match.exact == STRING
    input.Body.match.httpMatch.headerMatches[_].match.prefix == STRING
    input.Body.match.httpMatch.headerMatches[_].match.contains == STRING
    input.Body.match.httpMatch.headerMatches[_].caseSensitive == BOOLEAN
    input.Body.priority == INTEGER
    input.Body.action.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.action.forward.targetGroups[_].weight == INTEGER
    input.Body.action.fixedResponse.statusCode == INTEGER
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateService

```erlang
enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.clientToken == STRING
    input.Body.name == STRING
    input.Body.tags.STRING == STRING
    input.Body.customDomainName == STRING
    input.Body.certificateArn == STRING
    input.Body.authType == enum_AuthType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateServiceNetwork

```erlang
enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.clientToken == STRING
    input.Body.name == STRING
    input.Body.authType == enum_AuthType[_]
    input.Body.tags.STRING == STRING
    input.Body.sharingConfig.enabled == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateServiceNetworkResourceAssociation

```erlang
valid {
    input.Body.clientToken == STRING
    input.Body.resourceConfigurationIdentifier == STRING
    input.Body.serviceNetworkIdentifier == STRING
    input.Body.privateDnsEnabled == BOOLEAN
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateServiceNetworkServiceAssociation

```erlang
valid {
    input.Body.clientToken == STRING
    input.Body.serviceIdentifier == STRING
    input.Body.serviceNetworkIdentifier == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateServiceNetworkVpcAssociation

```erlang
enum_PrivateDnsPreference := [ "VERIFIED_DOMAINS_ONLY", "ALL_DOMAINS", "VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS", "SPECIFIED_DOMAINS_ONLY" ]

valid {
    input.Body.clientToken == STRING
    input.Body.serviceNetworkIdentifier == STRING
    input.Body.vpcIdentifier == STRING
    input.Body.privateDnsEnabled == BOOLEAN
    input.Body.securityGroupIds[_] == STRING
    input.Body.tags.STRING == STRING
    input.Body.dnsOptions.privateDnsPreference == enum_PrivateDnsPreference[_]
    input.Body.dnsOptions.privateDnsSpecifiedDomains[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# CreateTargetGroup

```erlang
enum_HealthCheckProtocolVersion := [ "HTTP1", "HTTP2" ]
enum_IpAddressType := [ "IPV4", "IPV6" ]
enum_LambdaEventStructureVersion := [ "V1", "V2" ]
enum_TargetGroupProtocol := [ "HTTP", "HTTPS", "TCP" ]
enum_TargetGroupProtocolVersion := [ "HTTP1", "HTTP2", "GRPC" ]
enum_TargetGroupType := [ "IP", "LAMBDA", "INSTANCE", "ALB" ]

valid {
    input.Body.name == STRING
    input.Body.type == enum_TargetGroupType[_]
    input.Body.config.port == INTEGER
    input.Body.config.protocol == enum_TargetGroupProtocol[_]
    input.Body.config.protocolVersion == enum_TargetGroupProtocolVersion[_]
    input.Body.config.ipAddressType == enum_IpAddressType[_]
    input.Body.config.vpcIdentifier == STRING
    input.Body.config.healthCheck.enabled == BOOLEAN
    input.Body.config.healthCheck.protocol == enum_TargetGroupProtocol[_]
    input.Body.config.healthCheck.protocolVersion == enum_HealthCheckProtocolVersion[_]
    input.Body.config.healthCheck.port == INTEGER
    input.Body.config.healthCheck.path == STRING
    input.Body.config.healthCheck.healthCheckIntervalSeconds == INTEGER
    input.Body.config.healthCheck.healthCheckTimeoutSeconds == INTEGER
    input.Body.config.healthCheck.healthyThresholdCount == INTEGER
    input.Body.config.healthCheck.unhealthyThresholdCount == INTEGER
    input.Body.config.healthCheck.matcher.httpCode == STRING
    input.Body.config.lambdaEventStructureVersion == enum_LambdaEventStructureVersion[_]
    input.Body.clientToken == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteAccessLogSubscription

```erlang
valid {
    input.ReqMap.accessLogSubscriptionIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteAuthPolicy

```erlang
valid {
    input.ReqMap.resourceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteDomainVerification

```erlang
valid {
    input.ReqMap.domainVerificationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteListener

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteResourceConfiguration

```erlang
valid {
    input.ReqMap.resourceConfigurationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteResourceEndpointAssociation

```erlang
valid {
    input.ReqMap.resourceEndpointAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteResourceGateway

```erlang
valid {
    input.ReqMap.resourceGatewayIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteResourcePolicy

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteRule

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ReqMap.ruleIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteService

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteServiceNetwork

```erlang
valid {
    input.ReqMap.serviceNetworkIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteServiceNetworkResourceAssociation

```erlang
valid {
    input.ReqMap.serviceNetworkResourceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteServiceNetworkServiceAssociation

```erlang
valid {
    input.ReqMap.serviceNetworkServiceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteServiceNetworkVpcAssociation

```erlang
valid {
    input.ReqMap.serviceNetworkVpcAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeleteTargetGroup

```erlang
valid {
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# DeregisterTargets

```erlang
valid {
    input.Body.targets[_].id == STRING
    input.Body.targets[_].port == INTEGER
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetAccessLogSubscription

```erlang
valid {
    input.ReqMap.accessLogSubscriptionIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetAuthPolicy

```erlang
valid {
    input.ReqMap.resourceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetDomainVerification

```erlang
valid {
    input.ReqMap.domainVerificationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetListener

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetResourceConfiguration

```erlang
valid {
    input.ReqMap.resourceConfigurationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetResourceGateway

```erlang
valid {
    input.ReqMap.resourceGatewayIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetResourcePolicy

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetRule

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ReqMap.ruleIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetService

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetServiceNetwork

```erlang
valid {
    input.ReqMap.serviceNetworkIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetServiceNetworkResourceAssociation

```erlang
valid {
    input.ReqMap.serviceNetworkResourceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetServiceNetworkServiceAssociation

```erlang
valid {
    input.ReqMap.serviceNetworkServiceAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetServiceNetworkVpcAssociation

```erlang
valid {
    input.ReqMap.serviceNetworkVpcAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# GetTargetGroup

```erlang
valid {
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListAccessLogSubscriptions

```erlang
valid {
    input.Qs.resourceIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListDomainVerifications

```erlang
valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListListeners

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListResourceConfigurations

```erlang
valid {
    input.Qs.resourceGatewayIdentifier == STRING
    input.Qs.resourceConfigurationGroupIdentifier == STRING
    input.Qs.domainVerificationIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListResourceEndpointAssociations

```erlang
valid {
    input.Qs.resourceConfigurationIdentifier == STRING
    input.Qs.resourceEndpointAssociationIdentifier == STRING
    input.Qs.vpcEndpointId == STRING
    input.Qs.vpcEndpointOwner == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListResourceGateways

```erlang
valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListRules

```erlang
valid {
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListServiceNetworkResourceAssociations

```erlang
valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.resourceConfigurationIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.Qs.includeChildren == BOOLEAN
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListServiceNetworkServiceAssociations

```erlang
valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.serviceIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListServiceNetworkVpcAssociations

```erlang
valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.vpcIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListServiceNetworkVpcEndpointAssociations

```erlang
valid {
    input.Qs.serviceNetworkIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListServiceNetworks

```erlang
valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListServices

```erlang
valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListTagsForResource

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListTargetGroups

```erlang
enum_TargetGroupType := [ "IP", "LAMBDA", "INSTANCE", "ALB" ]

valid {
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.Qs.vpcIdentifier == STRING
    input.Qs.targetGroupType == enum_TargetGroupType[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# ListTargets

```erlang
valid {
    input.Body.targets[_].id == STRING
    input.Body.targets[_].port == INTEGER
    input.ReqMap.targetGroupIdentifier == STRING
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# PutAuthPolicy

```erlang
valid {
    input.Body.policy == STRING
    input.ReqMap.resourceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# PutResourcePolicy

```erlang
valid {
    input.Body.policy == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# RegisterTargets

```erlang
valid {
    input.Body.targets[_].id == STRING
    input.Body.targets[_].port == INTEGER
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# StartDomainVerification

```erlang
valid {
    input.Body.clientToken == STRING
    input.Body.domainName == STRING
    input.Body.tags.STRING == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# TagResource

```erlang
valid {
    input.Body.tags.STRING == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UntagResource

```erlang
valid {
    input.ReqMap.resourceArn == STRING
    input.Qs.tagKeys[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateAccessLogSubscription

```erlang
valid {
    input.Body.destinationArn == STRING
    input.ReqMap.accessLogSubscriptionIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateListener

```erlang
valid {
    input.Body.defaultAction.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.defaultAction.forward.targetGroups[_].weight == INTEGER
    input.Body.defaultAction.fixedResponse.statusCode == INTEGER
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateResourceConfiguration

```erlang
enum_ResourceConfigurationIpAddressType := [ "IPV4", "IPV6", "DUALSTACK" ]

valid {
    input.Body.resourceConfigurationDefinition.dnsResource.domainName == STRING
    input.Body.resourceConfigurationDefinition.dnsResource.ipAddressType == enum_ResourceConfigurationIpAddressType[_]
    input.Body.resourceConfigurationDefinition.ipResource.ipAddress == STRING
    input.Body.resourceConfigurationDefinition.arnResource.arn == STRING
    input.Body.allowAssociationToShareableServiceNetwork == BOOLEAN
    input.Body.portRanges[_] == STRING
    input.ReqMap.resourceConfigurationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateResourceGateway

```erlang
valid {
    input.Body.securityGroupIds[_] == STRING
    input.ReqMap.resourceGatewayIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateRule

```erlang
valid {
    input.Body.match.httpMatch.method == STRING
    input.Body.match.httpMatch.pathMatch.match.exact == STRING
    input.Body.match.httpMatch.pathMatch.match.prefix == STRING
    input.Body.match.httpMatch.pathMatch.caseSensitive == BOOLEAN
    input.Body.match.httpMatch.headerMatches[_].name == STRING
    input.Body.match.httpMatch.headerMatches[_].match.exact == STRING
    input.Body.match.httpMatch.headerMatches[_].match.prefix == STRING
    input.Body.match.httpMatch.headerMatches[_].match.contains == STRING
    input.Body.match.httpMatch.headerMatches[_].caseSensitive == BOOLEAN
    input.Body.priority == INTEGER
    input.Body.action.forward.targetGroups[_].targetGroupIdentifier == STRING
    input.Body.action.forward.targetGroups[_].weight == INTEGER
    input.Body.action.fixedResponse.statusCode == INTEGER
    input.ReqMap.serviceIdentifier == STRING
    input.ReqMap.listenerIdentifier == STRING
    input.ReqMap.ruleIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateService

```erlang
enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.certificateArn == STRING
    input.Body.authType == enum_AuthType[_]
    input.ReqMap.serviceIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateServiceNetwork

```erlang
enum_AuthType := [ "NONE", "AWS_IAM" ]

valid {
    input.Body.authType == enum_AuthType[_]
    input.ReqMap.serviceNetworkIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateServiceNetworkVpcAssociation

```erlang
valid {
    input.Body.securityGroupIds[_] == STRING
    input.ReqMap.serviceNetworkVpcAssociationIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```

# UpdateTargetGroup

```erlang
enum_HealthCheckProtocolVersion := [ "HTTP1", "HTTP2" ]
enum_TargetGroupProtocol := [ "HTTP", "HTTPS", "TCP" ]

valid {
    input.Body.healthCheck.enabled == BOOLEAN
    input.Body.healthCheck.protocol == enum_TargetGroupProtocol[_]
    input.Body.healthCheck.protocolVersion == enum_HealthCheckProtocolVersion[_]
    input.Body.healthCheck.port == INTEGER
    input.Body.healthCheck.path == STRING
    input.Body.healthCheck.healthCheckIntervalSeconds == INTEGER
    input.Body.healthCheck.healthCheckTimeoutSeconds == INTEGER
    input.Body.healthCheck.healthyThresholdCount == INTEGER
    input.Body.healthCheck.unhealthyThresholdCount == INTEGER
    input.Body.healthCheck.matcher.httpCode == STRING
    input.ReqMap.targetGroupIdentifier == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}
```