WORKSPACES-WEB

docs.aws.amazon.com

AssociateBrowserSettings

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.browserSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateDataProtectionSettings

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.dataProtectionSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateIpAccessSettings

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.ipAccessSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateNetworkSettings

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.networkSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateSessionLogger

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.sessionLoggerArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateTrustStore

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.trustStoreArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateUserAccessLoggingSettings

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.userAccessLoggingSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

AssociateUserSettings

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.userSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateBrowserSettings

valid {
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.customerManagedKey == STRING
    input.Body.additionalEncryptionContext.STRING == STRING
    input.Body.browserPolicy == STRING
    input.Body.clientToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateDataProtectionSettings

enum_RedactionPlaceHolderType := [ "CustomText" ]

valid {
    input.Body.displayName == STRING
    input.Body.description == STRING
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.customerManagedKey == STRING
    input.Body.additionalEncryptionContext.STRING == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].builtInPatternId == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.patternName == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.patternRegex == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.patternDescription == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.keywordRegex == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].redactionPlaceHolder.redactionPlaceHolderType == enum_RedactionPlaceHolderType[_]
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].redactionPlaceHolder.redactionPlaceHolderText == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].enforcedUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].exemptUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].confidenceLevel == INTEGER
    input.Body.inlineRedactionConfiguration.globalEnforcedUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.globalExemptUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.globalConfidenceLevel == INTEGER
    input.Body.clientToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateIdentityProvider

enum_IdentityProviderType := [ "SAML", "Facebook", "Google", "LoginWithAmazon", "SignInWithApple", "OIDC" ]

valid {
    input.Body.portalArn == STRING
    input.Body.identityProviderName == STRING
    input.Body.identityProviderType == enum_IdentityProviderType[_]
    input.Body.identityProviderDetails.STRING == STRING
    input.Body.clientToken == STRING
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateIpAccessSettings

valid {
    input.Body.displayName == STRING
    input.Body.description == STRING
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.customerManagedKey == STRING
    input.Body.additionalEncryptionContext.STRING == STRING
    input.Body.ipRules[_].ipRange == STRING
    input.Body.ipRules[_].description == STRING
    input.Body.clientToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateNetworkSettings

valid {
    input.Body.vpcId == STRING
    input.Body.subnetIds[_] == STRING
    input.Body.securityGroupIds[_] == STRING
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.clientToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreatePortal

enum_AuthenticationType := [ "Standard", "IAM_Identity_Center" ]
enum_InstanceType := [ "standard.regular", "standard.large", "standard.xlarge" ]

valid {
    input.Body.displayName == STRING
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.customerManagedKey == STRING
    input.Body.additionalEncryptionContext.STRING == STRING
    input.Body.clientToken == STRING
    input.Body.authenticationType == enum_AuthenticationType[_]
    input.Body.instanceType == enum_InstanceType[_]
    input.Body.maxConcurrentSessions == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateSessionLogger

enum_Event := [ "WebsiteInteract", "FileDownloadFromSecureBrowserToRemoteDisk", "FileTransferFromRemoteToLocalDisk", "FileTransferFromLocalToRemoteDisk", "FileUploadFromRemoteDiskToSecureBrowser", "ContentPasteToWebsite", "ContentTransferFromLocalToRemoteClipboard", "ContentCopyFromWebsite", "UrlLoad", "TabOpen", "TabClose", "PrintJobSubmit", "SessionConnect", "SessionStart", "SessionDisconnect", "SessionEnd" ]
enum_FolderStructure := [ "Flat", "NestedByDate" ]
enum_LogFileFormat := [ "JSONLines", "Json" ]

valid {
    input.Body.eventFilter.all == {}
    input.Body.eventFilter.include[_] == enum_Event[_]
    input.Body.logConfiguration.s3.bucket == STRING
    input.Body.logConfiguration.s3.keyPrefix == STRING
    input.Body.logConfiguration.s3.bucketOwner == STRING
    input.Body.logConfiguration.s3.logFileFormat == enum_LogFileFormat[_]
    input.Body.logConfiguration.s3.folderStructure == enum_FolderStructure[_]
    input.Body.displayName == STRING
    input.Body.customerManagedKey == STRING
    input.Body.additionalEncryptionContext.STRING == STRING
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.clientToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateTrustStore

valid {
    input.Body.certificateList[_] == BLOB
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.clientToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateUserAccessLoggingSettings

valid {
    input.Body.kinesisStreamArn == STRING
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.clientToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

CreateUserSettings

enum_EnabledType := [ "Disabled", "Enabled" ]
enum_MaxDisplayResolution := [ "size4096X2160", "size3840X2160", "size3440X1440", "size2560X1440", "size1920X1080", "size1280X720", "size1024X768", "size800X600" ]
enum_ToolbarItem := [ "Windows", "DualMonitor", "FullScreen", "Webcam", "Microphone" ]
enum_ToolbarType := [ "Floating", "Docked" ]
enum_VisualMode := [ "Dark", "Light" ]

valid {
    input.Body.copyAllowed == enum_EnabledType[_]
    input.Body.pasteAllowed == enum_EnabledType[_]
    input.Body.downloadAllowed == enum_EnabledType[_]
    input.Body.uploadAllowed == enum_EnabledType[_]
    input.Body.printAllowed == enum_EnabledType[_]
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.disconnectTimeoutInMinutes == INTEGER
    input.Body.idleDisconnectTimeoutInMinutes == INTEGER
    input.Body.clientToken == STRING
    input.Body.cookieSynchronizationConfiguration.allowlist[_].domain == STRING
    input.Body.cookieSynchronizationConfiguration.allowlist[_].name == STRING
    input.Body.cookieSynchronizationConfiguration.allowlist[_].path == STRING
    input.Body.cookieSynchronizationConfiguration.blocklist[_].domain == STRING
    input.Body.cookieSynchronizationConfiguration.blocklist[_].name == STRING
    input.Body.cookieSynchronizationConfiguration.blocklist[_].path == STRING
    input.Body.customerManagedKey == STRING
    input.Body.additionalEncryptionContext.STRING == STRING
    input.Body.deepLinkAllowed == enum_EnabledType[_]
    input.Body.toolbarConfiguration.toolbarType == enum_ToolbarType[_]
    input.Body.toolbarConfiguration.visualMode == enum_VisualMode[_]
    input.Body.toolbarConfiguration.hiddenToolbarItems[_] == enum_ToolbarItem[_]
    input.Body.toolbarConfiguration.maxDisplayResolution == enum_MaxDisplayResolution[_]
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteBrowserSettings

valid {
    input.ReqMap.browserSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteDataProtectionSettings

valid {
    input.ReqMap.dataProtectionSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteIdentityProvider

valid {
    input.ReqMap.identityProviderArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteIpAccessSettings

valid {
    input.ReqMap.ipAccessSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteNetworkSettings

valid {
    input.ReqMap.networkSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeletePortal

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteSessionLogger

valid {
    input.ReqMap.sessionLoggerArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteTrustStore

valid {
    input.ReqMap.trustStoreArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteUserAccessLoggingSettings

valid {
    input.ReqMap.userAccessLoggingSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DeleteUserSettings

valid {
    input.ReqMap.userSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateBrowserSettings

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateDataProtectionSettings

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateIpAccessSettings

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateNetworkSettings

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateSessionLogger

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateTrustStore

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateUserAccessLoggingSettings

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

DisassociateUserSettings

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ExpireSession

valid {
    input.ReqMap.portalId == STRING
    input.ReqMap.sessionId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetBrowserSettings

valid {
    input.ReqMap.browserSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetDataProtectionSettings

valid {
    input.ReqMap.dataProtectionSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetIdentityProvider

valid {
    input.ReqMap.identityProviderArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetIpAccessSettings

valid {
    input.ReqMap.ipAccessSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetNetworkSettings

valid {
    input.ReqMap.networkSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetPortal

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetPortalServiceProviderMetadata

valid {
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetSession

valid {
    input.ReqMap.portalId == STRING
    input.ReqMap.sessionId == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetSessionLogger

valid {
    input.ReqMap.sessionLoggerArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetTrustStore

valid {
    input.ReqMap.trustStoreArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetTrustStoreCertificate

valid {
    input.ReqMap.trustStoreArn == STRING
    input.Qs.thumbprint == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetUserAccessLoggingSettings

valid {
    input.ReqMap.userAccessLoggingSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

GetUserSettings

valid {
    input.ReqMap.userSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListBrowserSettings

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListDataProtectionSettings

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListIdentityProviders

valid {
    input.ReqMap.portalArn == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListIpAccessSettings

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListNetworkSettings

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListPortals

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListSessionLoggers

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListSessions

enum_SessionSortBy := [ "StartTimeAscending", "StartTimeDescending" ]
enum_SessionStatus := [ "Active", "Terminated" ]

valid {
    input.ReqMap.portalId == STRING
    input.Qs.username == STRING
    input.Qs.sessionId == STRING
    input.Qs.sortBy == enum_SessionSortBy[_]
    input.Qs.status == enum_SessionStatus[_]
    input.Qs.maxResults == INTEGER
    input.Qs.nextToken == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTagsForResource

valid {
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTrustStoreCertificates

valid {
    input.ReqMap.trustStoreArn == STRING
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListTrustStores

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListUserAccessLoggingSettings

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

ListUserSettings

valid {
    input.Qs.nextToken == STRING
    input.Qs.maxResults == INTEGER
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

TagResource

valid {
    input.Body.tags[_].Key == STRING
    input.Body.tags[_].Value == STRING
    input.Body.clientToken == STRING
    input.ReqMap.resourceArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UntagResource

valid {
    input.ReqMap.resourceArn == STRING
    input.Qs.tagKeys[_] == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateBrowserSettings

valid {
    input.Body.browserPolicy == STRING
    input.Body.clientToken == STRING
    input.ReqMap.browserSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateDataProtectionSettings

enum_RedactionPlaceHolderType := [ "CustomText" ]

valid {
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].builtInPatternId == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.patternName == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.patternRegex == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.patternDescription == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].customPattern.keywordRegex == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].redactionPlaceHolder.redactionPlaceHolderType == enum_RedactionPlaceHolderType[_]
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].redactionPlaceHolder.redactionPlaceHolderText == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].enforcedUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].exemptUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.inlineRedactionPatterns[_].confidenceLevel == INTEGER
    input.Body.inlineRedactionConfiguration.globalEnforcedUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.globalExemptUrls[_] == STRING
    input.Body.inlineRedactionConfiguration.globalConfidenceLevel == INTEGER
    input.Body.displayName == STRING
    input.Body.description == STRING
    input.Body.clientToken == STRING
    input.ReqMap.dataProtectionSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateIdentityProvider

enum_IdentityProviderType := [ "SAML", "Facebook", "Google", "LoginWithAmazon", "SignInWithApple", "OIDC" ]

valid {
    input.Body.identityProviderName == STRING
    input.Body.identityProviderType == enum_IdentityProviderType[_]
    input.Body.identityProviderDetails.STRING == STRING
    input.Body.clientToken == STRING
    input.ReqMap.identityProviderArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateIpAccessSettings

valid {
    input.Body.displayName == STRING
    input.Body.description == STRING
    input.Body.ipRules[_].ipRange == STRING
    input.Body.ipRules[_].description == STRING
    input.Body.clientToken == STRING
    input.ReqMap.ipAccessSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateNetworkSettings

valid {
    input.Body.vpcId == STRING
    input.Body.subnetIds[_] == STRING
    input.Body.securityGroupIds[_] == STRING
    input.Body.clientToken == STRING
    input.ReqMap.networkSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdatePortal

enum_AuthenticationType := [ "Standard", "IAM_Identity_Center" ]
enum_InstanceType := [ "standard.regular", "standard.large", "standard.xlarge" ]

valid {
    input.Body.displayName == STRING
    input.Body.authenticationType == enum_AuthenticationType[_]
    input.Body.instanceType == enum_InstanceType[_]
    input.Body.maxConcurrentSessions == INTEGER
    input.ReqMap.portalArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateSessionLogger

enum_Event := [ "WebsiteInteract", "FileDownloadFromSecureBrowserToRemoteDisk", "FileTransferFromRemoteToLocalDisk", "FileTransferFromLocalToRemoteDisk", "FileUploadFromRemoteDiskToSecureBrowser", "ContentPasteToWebsite", "ContentTransferFromLocalToRemoteClipboard", "ContentCopyFromWebsite", "UrlLoad", "TabOpen", "TabClose", "PrintJobSubmit", "SessionConnect", "SessionStart", "SessionDisconnect", "SessionEnd" ]
enum_FolderStructure := [ "Flat", "NestedByDate" ]
enum_LogFileFormat := [ "JSONLines", "Json" ]

valid {
    input.Body.eventFilter.all == {}
    input.Body.eventFilter.include[_] == enum_Event[_]
    input.Body.logConfiguration.s3.bucket == STRING
    input.Body.logConfiguration.s3.keyPrefix == STRING
    input.Body.logConfiguration.s3.bucketOwner == STRING
    input.Body.logConfiguration.s3.logFileFormat == enum_LogFileFormat[_]
    input.Body.logConfiguration.s3.folderStructure == enum_FolderStructure[_]
    input.Body.displayName == STRING
    input.ReqMap.sessionLoggerArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateTrustStore

valid {
    input.Body.certificatesToAdd[_] == BLOB
    input.Body.certificatesToDelete[_] == STRING
    input.Body.clientToken == STRING
    input.ReqMap.trustStoreArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateUserAccessLoggingSettings

valid {
    input.Body.kinesisStreamArn == STRING
    input.Body.clientToken == STRING
    input.ReqMap.userAccessLoggingSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

UpdateUserSettings

enum_EnabledType := [ "Disabled", "Enabled" ]
enum_MaxDisplayResolution := [ "size4096X2160", "size3840X2160", "size3440X1440", "size2560X1440", "size1920X1080", "size1280X720", "size1024X768", "size800X600" ]
enum_ToolbarItem := [ "Windows", "DualMonitor", "FullScreen", "Webcam", "Microphone" ]
enum_ToolbarType := [ "Floating", "Docked" ]
enum_VisualMode := [ "Dark", "Light" ]

valid {
    input.Body.copyAllowed == enum_EnabledType[_]
    input.Body.pasteAllowed == enum_EnabledType[_]
    input.Body.downloadAllowed == enum_EnabledType[_]
    input.Body.uploadAllowed == enum_EnabledType[_]
    input.Body.printAllowed == enum_EnabledType[_]
    input.Body.disconnectTimeoutInMinutes == INTEGER
    input.Body.idleDisconnectTimeoutInMinutes == INTEGER
    input.Body.clientToken == STRING
    input.Body.cookieSynchronizationConfiguration.allowlist[_].domain == STRING
    input.Body.cookieSynchronizationConfiguration.allowlist[_].name == STRING
    input.Body.cookieSynchronizationConfiguration.allowlist[_].path == STRING
    input.Body.cookieSynchronizationConfiguration.blocklist[_].domain == STRING
    input.Body.cookieSynchronizationConfiguration.blocklist[_].name == STRING
    input.Body.cookieSynchronizationConfiguration.blocklist[_].path == STRING
    input.Body.deepLinkAllowed == enum_EnabledType[_]
    input.Body.toolbarConfiguration.toolbarType == enum_ToolbarType[_]
    input.Body.toolbarConfiguration.visualMode == enum_VisualMode[_]
    input.Body.toolbarConfiguration.hiddenToolbarItems[_] == enum_ToolbarItem[_]
    input.Body.toolbarConfiguration.maxDisplayResolution == enum_MaxDisplayResolution[_]
    input.ReqMap.userSettingsArn == STRING
    input.ProviderMetadata.Account == STRING
    input.ProviderMetadata.AccessKeyId == STRING
    input.ProviderMetadata.Region == STRING
}

Updated 9 days ago