template_model/
value_patterns.rs

1//! Regexes for well-known AWS resource value formats (identifiers, record
2//! values, names) shared by the schema validator and the rule engines.
3
4/// Regex for the `AWS::IAM::Role.Arn` schema *format* check: the partition must be
5/// `aws`-prefixed and the role name is unrestricted (`.+`), so a role name containing a space or
6/// other legal-but-unusual character is accepted here.
7pub const IAM_ROLE_ARN_PATTERN: &str = r"^arn:aws[a-zA-Z-]*:iam::\d{12}:role/.+$";
8
9/// Regex for an IAM role name with an optional path. Paths use printable ASCII and the role name
10/// uses the IAM role-name character set with its 64-character limit.
11pub const IAM_ROLE_NAME_PATTERN: &str = r"^(/[!-~]+/)?[a-zA-Z0-9_+=,.@-]{1,64}$";
12
13/// Regex for a valid EC2 Security Group name. The class mirrors the character set the service
14/// accepts; the `+` requires at least one character.
15pub const SECURITY_GROUP_NAME_PATTERN: &str = r"^[a-zA-Z0-9 \._\-:/()#,@\[\]+=&;\{\}!\$\*]+$";
16
17/// Regex for a Route53 `MX` record value: a preference `0`–`65535`, a single whitespace, then the
18/// mail-exchange host. The bounded-preference alternation enforces the 16-bit range (an unbounded
19/// `\d+` would wrongly accept `70000`), and the single `\s` rejects the double-space form the
20/// service rejects.
21pub const MX_RECORD_PATTERN: &str =
22    r"^(0|[1-9][0-9]{0,3}|[1-5][0-9]{4}|6[0-4][0-9]{3}|65[0-4][0-9]{2}|655[0-2][0-9]|6553[0-5])\s\S+$";
23
24/// Regex for a Route53 `CAA` record value: a flag `0` or `128`, a tag, and a quoted value, each
25/// separated by a single whitespace. The single `\s` (not `\s+`) matches the service's own
26/// single-separator requirement.
27pub const CAA_RECORD_PATTERN: &str = r#"^(0|128)\s([a-zA-Z0-9]+)\s(".+")$"#;
28
29/// Regex recognizing a hardcoded EC2 Availability Zone name (e.g. `us-east-1a`, `us-gov-west-1a`,
30/// `us-iso-east-1a`). The repeated `(-[a-z]+)+` segment matches partition-qualified zones
31/// (GovCloud/ISO) a single-segment pattern would miss.
32pub const AVAILABILITY_ZONE_PATTERN: &str = r"^[a-z]{2}(-[a-z]+)+-[0-9][a-z]$";
33
34/// Regex for an EC2 AMI identifier: `ami-` followed by an 8- or 17-character hex id. The two fixed
35/// lengths (not a `{8,17}` range) reflect the only id widths EC2 issues, so a 9–16 character string
36/// is not mistaken for an AMI id.
37pub const AMI_ID_PATTERN: &str = r"^ami-([0-9a-f]{8}|[0-9a-f]{17})$";
template_model/value_patterns.rs

template_model/
value_patterns.rs
