ir.json

{
  "$schema": "https://raw.githubusercontent.com/hashicorp/terraform-plugin-codegen-spec/main/spec/v0.1/schema.json",
  "version": "0.1",
  "provider": {
    "name": "alz",
    "schema": {
      "markdown_description": "ALZ provider to generate archetype data for use with the ALZ Terraform module.",
      "description": "ALZ provider to generate archetype data for use with the ALZ Terraform module.",
      "attributes": [
        {
          "name": "library_overwrite_enabled",
          "bool": {
            "optional_required": "optional",
            "description": "Whether to allow overwriting of the library by other lib directories. Default is `false`."
          }
        },
        {
          "name": "role_definitions_use_supplied_names_enabled",
          "bool": {
            "optional_required": "optional",
            "description": "Whether to allow using the Name and RoleName supplied in the library directly for a predictable ID. Default behaviour is to update them to unique values per management group. Default is `false`."
          }
        },
        {
          "name": "skip_provider_registration",
          "bool": {
            "optional_required": "optional",
            "description": "Should the provider skip registering all of the resource providers that it supports, if they're not already registered? Default is `false`. If not specified, value will be attempted to be read from the `ARM_SKIP_PROVIDER_REGISTRATION` environment variable."
          }
        },
        {
          "name": "suppress_warning_policy_role_assignments",
          "bool": {
            "optional_required": "optional",
            "description": "Should the provider omit the warning if it cannot create the full list of policy role assignments? Default is `false`. If not specified, value will be attempted to be read from the `ALZ_PROVIDER_SUPPRESS_WARNING_POLICY_ROLE_ASSIGNMENTS` environment variable."
          }
        },
        {
          "name": "library_fetch_dependencies",
          "bool": {
            "optional_required": "optional",
            "description": "Whether to automatically fetch dependencies for the library. This option reads the `alz_library_metadata.json` file in any supplied library and will recursively download dependent libraries. Default is `true`."
          }
        },
        {
          "name": "cache_file_name",
          "string": {
            "optional_required": "optional",
            "description": "Path to a gzipped cache file (must end in `.gz`) containing built-in policy and policy set definitions. When set, the provider will load the cache from this file (if it exists) so that built-in definitions do not need to be fetched from Azure. Use `cache_file_save_enabled` to (re)write the cache file after the provider has been configured. Caches should be regularly updated to ensure no miscalculation for the policy role assignments, as new minor or patch versions of built-in policy definitions may be released.",
            "validators": [
              {
                "custom": {
                  "imports": [
                    {
                      "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                    },
                    {
                      "path": "regexp"
                    }
                  ],
                  "schema_definition": "stringvalidator.RegexMatches(regexp.MustCompile(`\\.gz$`), \"cache_file_name must end with .gz\")"
                }
              }
            ]
          }
        },
        {
          "name": "cache_file_save_enabled",
          "bool": {
            "optional_required": "optional",
            "description": "Whether to (re)write the cache file specified by `cache_file_name` after the provider has been configured. When `true`, the built-in policy and policy set definitions loaded into the AlzLib will be exported and saved to the file. Defaults to `false`. Has no effect when `cache_file_name` is not set."
          }
        },
        {
          "name": "library_references",
          "list_nested": {
            "optional_required": "required",
            "description": "A list of references to the [ALZ library](https://aka.ms/alz/library) to use. Each reference should either contain the `path` (e.g. `platform/alz`) and the `ref` (e.g. `2024.03.5`), or a `custom_url` to be supplied to go-getter.",
            "nested_object": {
              "attributes": [
                {
                  "name": "path",
                  "string": {
                    "optional_required": "optional",
                    "description": "The path in the ALZ Library, e.g. `platform/alz`. Also requires `ref`. Conflicts with `custom_url`.",
                    "validators": [
                      {
                        "custom": {
                          "imports": [
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                            }
                          ],
                          "schema_definition": "stringvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"custom_url\"))"
                        }
                      },
                      {
                        "custom": {
                          "imports": [
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                            }
                          ],
                          "schema_definition": "stringvalidator.AlsoRequires(path.MatchRelative().AtParent().AtName(\"ref\"))"
                        }
                      }
                    ]
                  }
                },
                {
                  "name": "ref",
                  "string": {
                    "optional_required": "optional",
                    "description": "This is the version of the library to use, e.g. `2024.07.5`. Also requires `path`. Conflicts with `custom_url`.",
                    "validators": [
                      {
                        "custom": {
                          "imports": [
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                            }
                          ],
                          "schema_definition": "stringvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"custom_url\"))"
                        }
                      },
                      {
                        "custom": {
                          "imports": [
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                            }
                          ],
                          "schema_definition": "stringvalidator.AlsoRequires(path.MatchRelative().AtParent().AtName(\"path\"))"
                        }
                      }
                    ]
                  }
                },
                {
                  "name": "custom_url",
                  "string": {
                    "optional_required": "optional",
                    "description": "A custom path/URL to the library to use. Conflicts with `path` and `ref`. For supported protocols, see [go-getter](https://pkg.go.dev/github.com/hashicorp/go-getter/v2). Value is marked sensitive as may contain secrets.",
                    "sensitive": true,
                    "validators": [
                      {
                        "custom": {
                          "imports": [
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                            },
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework/path"
                            }
                          ],
                          "schema_definition": "stringvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"path\"))"
                        }
                      },
                      {
                        "custom": {
                          "imports": [
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                            },
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework/path"
                            }
                          ],
                          "schema_definition": "stringvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"ref\"))"
                        }
                      }
                    ]
                  }
                }
              ]
            },
            "validators": [
              {
                "custom": {
                  "imports": [
                    {
                      "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                    }
                  ],
                  "schema_definition": "listvalidator.UniqueValues()"
                }
              },
              {
                "custom": {
                  "imports": [
                    {
                      "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                    }
                  ],
                  "schema_definition": "listvalidator.SizeAtLeast(1)"
                }
              }
            ]
          }
        },
        {
          "name": "non_compliance_message_substitution_settings",
          "single_nested": {
            "description": "Global settings for non-compliance message placeholder substitutions. These control how placeholders in non-compliance messages are resolved based on the enforcement mode of policy assignments.",
            "optional_required": "optional",
            "attributes": [
              {
                "name": "enforcement_mode_placeholder",
                "string": {
                  "description": "The placeholder string in the default message that will be replaced based on the enforcement mode. Defaults to `{enforcementMode}`.",
                  "optional_required": "optional"
                }
              },
              {
                "name": "enforced_replacement",
                "string": {
                  "description": "The replacement string to use for the enforcement mode placeholder when the policy assignment is enforced. Defaults to `must`.",
                  "optional_required": "optional"
                }
              },
              {
                "name": "not_enforced_replacement",
                "string": {
                  "description": "The replacement string to use for the enforcement mode placeholder when the policy assignment is not enforced. Defaults to `should`.",
                  "optional_required": "optional"
                }
              }
            ]
          }
        }
      ]
    }
  },
  "datasources": [
    {
      "name": "metadata",
      "schema": {
        "markdown_description": "The metadata data source provides metadata information from ALZ library.",
        "attributes": [
          {
            "name": "id",
            "string": {
              "description": "A computed value representing the unique identifier for the architecture. Mandatory for acceptance testing.",
              "computed_optional_required": "computed"
            }
          },
          {
            "name": "alz_library_references",
            "list": {
              "computed_optional_required": "computed",
              "element_type": {
                "string": {}
              },
              "description": "A list of all loaded ALZ library references."
            }
          }
        ]
      }
    },
    {
      "name": "architecture",
      "schema": {
        "markdown_description": "The architecture data source provides the information required to deploy an ALZ management group hierarchy, including policy and additional role assignment detail.",
        "description": "The architecture data source provides the information required to deploy an ALZ management group hierarchy, including policy and additional role assignment detail.",
        "attributes": [
          {
            "name": "name",
            "string": {
              "description": "The name of the architecture to deploy.",
              "computed_optional_required": "required",
              "validators": [
                {
                  "custom": {
                    "imports": [
                      {
                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                      }
                    ],
                    "schema_definition": "stringvalidator.LengthAtLeast(1)"
                  }
                }
              ]
            }
          },
          {
            "name": "id",
            "string": {
              "description": "A computed value representing the unique identifier for the architecture. Mandatory for acceptance testing.",
              "computed_optional_required": "computed"
            }
          },
          {
            "name": "root_management_group_id",
            "string": {
              "description": "The root management group id under which to deploy the architecture.",
              "computed_optional_required": "required",
              "validators": [
                {
                  "custom": {
                    "imports": [
                      {
                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                      }
                    ],
                    "schema_definition": "stringvalidator.LengthAtLeast(1)"
                  }
                }
              ]
            }
          },
          {
            "name": "location",
            "string": {
              "description": "The Azure region used as a default for resources.",
              "computed_optional_required": "required",
              "validators": [
                {
                  "custom": {
                    "imports": [
                      {
                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                      }
                    ],
                    "schema_definition": "stringvalidator.LengthAtLeast(1)"
                  }
                }
              ]
            }
          },
          {
            "name": "default_non_compliance_message_settings",
            "single_nested": {
              "description": "Settings for controlling default non-compliance messages on policy assignments. When configured, a default non-compliance message will be applied to policy assignments.",
              "computed_optional_required": "optional",
              "attributes": [
                {
                  "name": "default_message",
                  "string": {
                    "description": "The default non-compliance message to apply to policy assignments. Supports placeholder substitution configured in the provider's `non_compliance_message_substitution_settings` block.",
                    "computed_optional_required": "required"
                  }
                },
                {
                  "name": "merge_mode",
                  "string": {
                    "description": "Controls behavior when a policy assignment already has a default non-compliance message (one without a `policyDefinitionReferenceId`). `replace` (default) removes the existing default message and adds the configured default. `prefer_existing` keeps the existing default message if present, only adding the configured default when none exists. Policy-specific messages (with `policyDefinitionReferenceId`) are always preserved. Assignments with no messages always receive the default if a default message is supplied.",
                    "computed_optional_required": "optional",
                    "validators": [
                      {
                        "custom": {
                          "imports": [
                            {
                              "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                            }
                          ],
                          "schema_definition": "stringvalidator.OneOf(\"replace\", \"prefer_existing\")"
                        }
                      }
                    ]
                  }
                }
              ]
            }
          },
          {
            "name": "policy_assignments_to_modify",
            "map_nested": {
              "computed_optional_required": "optional",
              "description": "A mested map of policy assignments to modify. The key is the management group id, and the value is an object with a single attribute, `policy_assignments`. This is another map.",
              "nested_object": {
                "attributes": [
                  {
                    "name": "policy_assignments",
                    "map_nested": {
                      "description": "A map of policy assignments to modify. The key is the policy assignment name, and the value is an object containing the modifications to make.",
                      "computed_optional_required": "optional",
                      "nested_object": {
                        "attributes": [
                          {
                            "name": "enforcement_mode",
                            "string": {
                              "computed_optional_required": "optional",
                              "description": "The enforcement mode for the policy assignment. Valid values are `Default` and `DoNotEnforce`.",
                              "validators": [
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                                      }
                                    ],
                                    "schema_definition": "stringvalidator.OneOf(\"Default\", \"DoNotEnforce\")"
                                  }
                                }
                              ]
                            }
                          },
                          {
                            "name": "identity",
                            "string": {
                              "description": "The identity type. Must be one of `SystemAssigned` or `UserAssigned`.",
                              "computed_optional_required": "optional",
                              "validators": [
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                                      }
                                    ],
                                    "schema_definition": "stringvalidator.OneOf(\"SystemAssigned\", \"UserAssigned\")"
                                  }
                                }
                              ]
                            }
                          },
                          {
                            "name": "identity_ids",
                            "set": {
                              "computed_optional_required": "optional",
                              "element_type": {
                                "string": {}
                              },
                              "description": "A set of zero or one identity ids to assign to the policy assignment. Required if `identity` is `UserAssigned`. **Do not** pass in computed values, instead construct the resource id yourself.",
                              "validators": [
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                      },
                                      {
                                        "path": "github.com/Azure/terraform-provider-alz/internal/alzvalidators"
                                      }
                                    ],
                                    "schema_definition": "setvalidator.ValueStringsAre(alzvalidators.ArmResourceIdTypeNamespace(\"Microsoft.ManagedIdentity\", \"userAssignedIdentities\"))"
                                  }
                                },
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                      },
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework/path"
                                      }
                                    ],
                                    "schema_definition": "setvalidator.AlsoRequires(path.MatchRelative().AtParent().AtName(\"identity\"))"
                                  }
                                },
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                      }
                                    ],
                                    "schema_definition": "setvalidator.SizeBetween(0, 1)"
                                  }
                                }
                              ]
                            }
                          },
                          {
                            "name": "non_compliance_messages",
                            "set_nested": {
                              "description": "The non-compliance messages to use for the policy assignment.",
                              "computed_optional_required": "optional",
                              "nested_object": {
                                "attributes": [
                                  {
                                    "name": "message",
                                    "string": {
                                      "description": "The non-compliance message to use for the policy assignment.",
                                      "computed_optional_required": "required"
                                    }
                                  },
                                  {
                                    "name": "policy_definition_reference_id",
                                    "string": {
                                      "description": "The policy definition reference id (not the resource id) to use for the non compliance message. This references the definition within the policy set.",
                                      "computed_optional_required": "optional"
                                    }
                                  }
                                ]
                              }
                            }
                          },
                          {
                            "name": "not_scopes",
                            "list": {
                              "computed_optional_required": "optional",
                              "element_type": {
                                "string": {}
                              },
                              "description": "A list of scopes to exclude from the policy assignment. Each element must be a valid ARM resource id. If specified here the not scopes will replace any existing not scopes on the policy assignment.",
                              "validators": [
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                                      }
                                    ],
                                    "schema_definition": "listvalidator.UniqueValues()"
                                  }
                                },
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                                      },
                                      {
                                        "path": "github.com/Azure/terraform-provider-alz/internal/alzvalidators"
                                      }
                                    ],
                                    "schema_definition": "listvalidator.ValueStringsAre(alzvalidators.ArmResourceId())"
                                  }
                                }
                              ]
                            }
                          },
                          {
                            "name": "overrides",
                            "list_nested": {
                              "validators": [
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                                      }
                                    ],
                                    "schema_definition": "listvalidator.SizeAtMost(10)"
                                  }
                                },
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                                      }
                                    ],
                                    "schema_definition": "listvalidator.UniqueValues()"
                                  }
                                }
                              ],
                              "description": "The overrides for this policy assignment. There are a maximum of 10 overrides allowed per assignment. If specified here the overrides will replace the existing overrides.",
                              "computed_optional_required": "optional",
                              "nested_object": {
                                "attributes": [
                                  {
                                    "name": "kind",
                                    "string": {
                                      "description": "The property the assignment will override. The supported kind is `policyEffect`.",
                                      "computed_optional_required": "required",
                                      "validators": [
                                        {
                                          "custom": {
                                            "imports": [
                                              {
                                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                                              }
                                            ],
                                            "schema_definition": "stringvalidator.OneOf(\"policyEffect\")"
                                          }
                                        }
                                      ]
                                    }
                                  },
                                  {
                                    "name": "value",
                                    "string": {
                                      "description": "The new value which will override the existing value. The supported values are: `addToNetworkGroup`, `append`, `audit`, `auditIfNotExists`, `deny`, `denyAction`, `deployIfNotExists`, `disabled`, `manual`, `modify`, `mutate`. <https://learn.microsoft.com/azure/governance/policy/concepts/effects>",
                                      "computed_optional_required": "required",
                                      "validators": [
                                        {
                                          "custom": {
                                            "imports": [
                                              {
                                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                                              }
                                            ],
                                            "schema_definition": "stringvalidator.OneOf(\"addToNetworkGroup\", \"append\", \"audit\", \"auditIfNotExists\", \"deny\", \"denyAction\", \"deployIfNotExists\", \"disabled\", \"manual\", \"modify\", \"mutate\")"
                                          }
                                        }
                                      ]
                                    }
                                  },
                                  {
                                    "name": "override_selectors",
                                    "list_nested": {
                                      "description": "The selectors to use for the override.",
                                      "computed_optional_required": "optional",
                                      "nested_object": {
                                        "attributes": [
                                          {
                                            "name": "kind",
                                            "string": {
                                              "computed_optional_required": "required",
                                              "description": "The property of a selector that describes what characteristic will narrow down the scope of the override. Allowed value for kind: `policyEffect` is: `policyDefinitionReferenceId`.",
                                              "validators": [
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                                                      }
                                                    ],
                                                    "schema_definition": "stringvalidator.OneOf(\"policyDefinitionReferenceId\")"
                                                  }
                                                }
                                              ]
                                            }
                                          },
                                          {
                                            "name": "in",
                                            "set": {
                                              "description": "The list of values that the selector will match. Conflicts with `not_in`.",
                                              "computed_optional_required": "optional",
                                              "element_type": {
                                                "string": {}
                                              },
                                              "validators": [
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.SizeAtMost(50)"
                                                  }
                                                },
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      },
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework/path"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"not_in\"))"
                                                  }
                                                }
                                              ]
                                            }
                                          },
                                          {
                                            "name": "not_in",
                                            "set": {
                                              "description": "The list of values that the selector will not match. Conflicts with `in`.",
                                              "computed_optional_required": "optional",
                                              "element_type": {
                                                "string": {}
                                              },
                                              "validators": [
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.SizeAtMost(50)"
                                                  }
                                                },
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      },
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework/path"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"not_in\"))"
                                                  }
                                                }
                                              ]
                                            }
                                          }
                                        ]
                                      }
                                    }
                                  }
                                ]
                              }
                            }
                          },
                          {
                            "name": "resource_selectors",
                            "list_nested": {
                              "validators": [
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                                      }
                                    ],
                                    "schema_definition": "listvalidator.SizeAtMost(10)"
                                  }
                                },
                                {
                                  "custom": {
                                    "imports": [
                                      {
                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/listvalidator"
                                      }
                                    ],
                                    "schema_definition": "listvalidator.UniqueValues()"
                                  }
                                }
                              ],
                              "description": "The resource selectors to use for the policy assignment. A maximum of 10 resource selectors are allowed per assignment. If specified here the resource selectors will replace any existing resource selectors.",
                              "computed_optional_required": "optional",
                              "nested_object": {
                                "attributes": [
                                  {
                                    "name": "name",
                                    "string": {
                                      "description": "The name of the resource selector. The name must be unique within the assignment.",
                                      "computed_optional_required": "required",
                                      "validators": [
                                        {
                                          "custom": {
                                            "imports": [
                                              {
                                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                                              }
                                            ],
                                            "schema_definition": "stringvalidator.LengthAtLeast(1)"
                                          }
                                        }
                                      ]
                                    }
                                  },
                                  {
                                    "name": "resource_selector_selectors",
                                    "list_nested": {
                                      "description": "The selectors to use for the resource selector.",
                                      "computed_optional_required": "optional",
                                      "nested_object": {
                                        "attributes": [
                                          {
                                            "name": "kind",
                                            "string": {
                                              "description": "The property of a selector that describes what characteristic will narrow down the set of evaluated resources. Each kind can only be used once in a single resource selector. Allowed values are: `resourceLocation`, `resourceType`, `resourceWithoutLocation`. `resourceWithoutLocation` cannot be used in the same resource selector as `resourceLocation`.",
                                              "computed_optional_required": "required",
                                              "validators": [
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                                                      }
                                                    ],
                                                    "schema_definition": "stringvalidator.OneOf(\"resourceLocation\", \"resourceType\", \"resourceWithoutLocation\")"
                                                  }
                                                }
                                              ]
                                            }
                                          },
                                          {
                                            "name": "in",
                                            "set": {
                                              "description": "The list of values that the selector will match. Conflicts with `not_in`.",
                                              "computed_optional_required": "optional",
                                              "element_type": {
                                                "string": {}
                                              },
                                              "validators": [
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.SizeAtMost(50)"
                                                  }
                                                },
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      },
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework/path"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"not_in\"))"
                                                  }
                                                }
                                              ]
                                            }
                                          },
                                          {
                                            "name": "not_in",
                                            "set": {
                                              "description": "The list of values that the selector will not match. Conflicts with `in`.",
                                              "computed_optional_required": "optional",
                                              "element_type": {
                                                "string": {}
                                              },
                                              "validators": [
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.SizeAtMost(50)"
                                                  }
                                                },
                                                {
                                                  "custom": {
                                                    "imports": [
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework-validators/setvalidator"
                                                      },
                                                      {
                                                        "path": "github.com/hashicorp/terraform-plugin-framework/path"
                                                      }
                                                    ],
                                                    "schema_definition": "setvalidator.ConflictsWith(path.MatchRelative().AtParent().AtName(\"not_in\"))"
                                                  }
                                                }
                                              ]
                                            }
                                          }
                                        ]
                                      }
                                    }
                                  }
                                ]
                              }
                            }
                          },
                          {
                            "name": "parameters",
                            "map": {
                              "description": "The parameters to use for the policy assignment. The map key is the parameter name and the value is an JSON object containing a single `value` attribute with the values to apply. This to mitigate issues with the Terraform type system. E.g. `{ defaultName = jsonencode({ value = \"value\"}) }`",
                              "computed_optional_required": "optional",
                              "element_type": {
                                "string": {
                                  "custom_type": {
                                    "import": {
                                      "path": "github.com/hashicorp/terraform-plugin-framework-jsontypes/jsontypes"
                                    },
                                    "type": "jsontypes.NormalizedType{}",
                                    "value_type": "jsontypes.Normalized"
                                  }
                                }
                              }
                            }
                          }
                        ]
                      }
                    }
                  }
                ]
              }
            }
          },
          {
            "name": "management_groups",
            "list_nested": {
              "description": "This is a list of objects pertaining to the tier of management groups to be deployed (relative to the supplied root management group id). Use the `level` attribute to specify the tier of management groups to deploy.",
              "computed_optional_required": "computed",
              "nested_object": {
                "attributes": [
                  {
                    "name": "id",
                    "string": {
                      "description": "The id of the management group. This the last segment of the resource id.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "parent_id",
                    "string": {
                      "description": "The parent management group id.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "display_name",
                    "string": {
                      "description": "The display name of the management group.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "level",
                    "number": {
                      "description": "The level of the management group in the hierarchy, relative to the supplied root management group. The level starts at zero.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "exists",
                    "bool": {
                      "description": "Whether the management group already exists or not. Used to determine if the management group should be created or just have policy/role resources created within.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "policy_assignments",
                    "map": {
                      "description": "The policy assignments to apply to the management group. The key is the policy assignment name, and the value is the policy assignment JSON as a string.",
                      "element_type": {
                        "string": {}
                      },
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "policy_definitions",
                    "map": {
                      "description": "The policy definitions to apply to the management group. The key is the policy definition name, and the value is the policy definition JSON as a string.",
                      "element_type": {
                        "string": {}
                      },
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "policy_set_definitions",
                    "map": {
                      "description": "The policy set definitions to apply to the management group. The key is the policy set definition name, and the value is the policy set definition JSON as a string.",
                      "element_type": {
                        "string": {}
                      },
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "role_definitions",
                    "map": {
                      "description": "The role definitions to apply to the management group. The key is the role definition name, and the value is the role definition JSON as a string.",
                      "element_type": {
                        "string": {}
                      },
                      "computed_optional_required": "computed"
                    }
                  }
                ]
              }
            }
          },
          {
            "name": "policy_role_assignments",
            "set_nested": {
              "computed_optional_required": "computed",
              "description": "A set of role assignments that need to be created for the policies that have been assigned in the hierarchy. Since we will likely be using system assigned identities, we don't know the principal ID until after the deployment. Therefore this data can be used to create the role assignments after the deployment.",
              "nested_object": {
                "attributes": [
                  {
                    "name": "role_definition_id",
                    "string": {
                      "description": "The role definition id to assign.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "scope",
                    "string": {
                      "description": "The scope of the assignment.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "policy_assignment_name",
                    "string": {
                      "description": "The name of the policy assignment to enable retrieval of the identity id.",
                      "computed_optional_required": "computed"
                    }
                  },
                  {
                    "name": "management_group_id",
                    "string": {
                      "description": "The id of the management group where the policy assignment will be created.",
                      "computed_optional_required": "computed"
                    }
                  }
                ]
              }
            }
          },
          {
            "name": "policy_default_values",
            "map": {
              "computed_optional_required": "optional",
              "description": "A map of default values to apply to policy assignments. The key is the default name as defined in the library, and the value is an JSON object containing a single `value` attribute with the values to apply. This to mitigate issues with the Terraform type system. E.g. `{ defaultName = jsonencode({ value = \"value\"}) }`",
              "element_type": {
                "string": {
                  "custom_type": {
                    "import": {
                      "path": "github.com/hashicorp/terraform-plugin-framework-jsontypes/jsontypes"
                    },
                    "type": "jsontypes.NormalizedType{}",
                    "value_type": "jsontypes.Normalized"
                  }
                }
              }
            }
          },
          {
            "name": "override_policy_definition_parameter_assign_permissions_set",
            "set_nested": {
              "computed_optional_required": "optional",
              "description": "This list of objects allows you to set the [`assignPermissions` metadata property](https://learn.microsoft.com/azure/governance/policy/concepts/definition-structure-parameters#parameter-properties) of the supplied definition and parameter names. This allows you to correct policies that haven't been authored correctly and means that the provider can generate the correct policy role assignments.",
              "nested_object": {
                "attributes": [
                  {
                    "name": "definition_name",
                    "string": {
                      "computed_optional_required": "required",
                      "description": "The name of the policy definition to override.",
                      "validators": [
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.LengthAtLeast(1)"
                          }
                        },
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.AlsoRequires(path.MatchRelative().AtParent().AtName(\"parameter_name\"))"
                          }
                        }
                      ]
                    }
                  },
                  {
                    "name": "parameter_name",
                    "string": {
                      "computed_optional_required": "required",
                      "description": "The name of the parameter to override.",
                      "validators": [
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.LengthAtLeast(1)"
                          }
                        },
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.AlsoRequires(path.MatchRelative().AtParent().AtName(\"definition_name\"))"
                          }
                        }
                      ]
                    }
                  }
                ]
              }
            }
          },
          {
            "name": "override_policy_definition_parameter_assign_permissions_unset",
            "set_nested": {
              "computed_optional_required": "optional",
              "description": "This list of objects allows you to unset set the [`assignPermissions` metadata property](https://learn.microsoft.com/azure/governance/policy/concepts/definition-structure-parameters#parameter-properties) of the supplied definition and parameter names. This allows you to correct policies that haven't been authored correctly, or prevent permissions being assigned for policies that are disabled in a policy set. The provider can then generate the correct policy role assignments.",
              "nested_object": {
                "attributes": [
                  {
                    "name": "definition_name",
                    "string": {
                      "computed_optional_required": "required",
                      "description": "The name of the policy definition to override.",
                      "validators": [
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.LengthAtLeast(1)"
                          }
                        },
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.AlsoRequires(path.MatchRelative().AtParent().AtName(\"parameter_name\"))"
                          }
                        }
                      ]
                    }
                  },
                  {
                    "name": "parameter_name",
                    "string": {
                      "computed_optional_required": "required",
                      "description": "The name of the parameter to override.",
                      "validators": [
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.LengthAtLeast(1)"
                          }
                        },
                        {
                          "custom": {
                            "imports": [
                              {
                                "path": "github.com/hashicorp/terraform-plugin-framework-validators/stringvalidator"
                              }
                            ],
                            "schema_definition": "stringvalidator.AlsoRequires(path.MatchRelative().AtParent().AtName(\"definition_name\"))"
                          }
                        }
                      ]
                    }
                  }
                ]
              }
            }
          }
        ],
        "blocks": [
          {
            "name": "timeouts",
            "single_nested": {
              "attributes": [
                {
                  "name": "read",
                  "string": {
                    "description": "A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as \"30s\" or \"2h45m\". Valid time units are \"s\" (seconds), \"m\" (minutes), \"h\" (hours).",
                    "computed_optional_required": "optional"
                  }
                }
              ],
              "custom_type": {
                "import": {
                  "path": "github.com/hashicorp/terraform-plugin-framework-timeouts/datasource/timeouts"
                },
                "type": "timeouts.Type{ObjectType: types.ObjectType{AttrTypes: map[string]attr.Type{\"read\": types.StringType}}}",
                "value_type": "timeouts.Value"
              }
            }
          }
        ]
      }
    }
  ],
  "resources": []
}