Skip to content

Get Violation Details

fms_get_violation_details R Documentation

Retrieves violations for a resource based on the specified Firewall Manager policy and Amazon Web Services account

Description

Retrieves violations for a resource based on the specified Firewall Manager policy and Amazon Web Services account.

Usage

fms_get_violation_details(PolicyId, MemberAccount, ResourceId,
  ResourceType)

Arguments

PolicyId

[required] The ID of the Firewall Manager policy that you want the details for. You can get violation details for the following policy types:

  • DNS Firewall

  • Imported Network Firewall

  • Network Firewall

  • Security group content audit

  • Network ACL

  • Third-party firewall

MemberAccount

[required] The Amazon Web Services account ID that you want the details for.

ResourceId

[required] The ID of the resource that has violations.

ResourceType

[required] The resource type. This is in the format shown in the Amazon Web Services Resource Types Reference. Supported resource types are: ⁠AWS::EC2::Instance⁠, ⁠AWS::EC2::NetworkInterface⁠, ⁠AWS::EC2::SecurityGroup⁠, ⁠AWS::NetworkFirewall::FirewallPolicy⁠, and ⁠AWS::EC2::Subnet⁠.

Value

A list with the following syntax: 

list(
  ViolationDetail = list(
    PolicyId = "string",
    MemberAccount = "string",
    ResourceId = "string",
    ResourceType = "string",
    ResourceViolations = list(
      list(
        AwsVPCSecurityGroupViolation = list(
          ViolationTarget = "string",
          ViolationTargetDescription = "string",
          PartialMatches = list(
            list(
              Reference = "string",
              TargetViolationReasons = list(
                "string"
              )
            )
          ),
          PossibleSecurityGroupRemediationActions = list(
            list(
              RemediationActionType = "REMOVE"|"MODIFY",
              Description = "string",
              RemediationResult = list(
                IPV4Range = "string",
                IPV6Range = "string",
                PrefixListId = "string",
                Protocol = "string",
                FromPort = 123,
                ToPort = 123
              ),
              IsDefaultAction = TRUE|FALSE
            )
          )
        ),
        AwsEc2NetworkInterfaceViolation = list(
          ViolationTarget = "string",
          ViolatingSecurityGroups = list(
            "string"
          )
        ),
        AwsEc2InstanceViolation = list(
          ViolationTarget = "string",
          AwsEc2NetworkInterfaceViolations = list(
            list(
              ViolationTarget = "string",
              ViolatingSecurityGroups = list(
                "string"
              )
            )
          )
        ),
        NetworkFirewallMissingFirewallViolation = list(
          ViolationTarget = "string",
          VPC = "string",
          AvailabilityZone = "string",
          TargetViolationReason = "string"
        ),
        NetworkFirewallMissingSubnetViolation = list(
          ViolationTarget = "string",
          VPC = "string",
          AvailabilityZone = "string",
          TargetViolationReason = "string"
        ),
        NetworkFirewallMissingExpectedRTViolation = list(
          ViolationTarget = "string",
          VPC = "string",
          AvailabilityZone = "string",
          CurrentRouteTable = "string",
          ExpectedRouteTable = "string"
        ),
        NetworkFirewallPolicyModifiedViolation = list(
          ViolationTarget = "string",
          CurrentPolicyDescription = list(
            StatelessRuleGroups = list(
              list(
                RuleGroupName = "string",
                ResourceId = "string",
                Priority = 123
              )
            ),
            StatelessDefaultActions = list(
              "string"
            ),
            StatelessFragmentDefaultActions = list(
              "string"
            ),
            StatelessCustomActions = list(
              "string"
            ),
            StatefulRuleGroups = list(
              list(
                RuleGroupName = "string",
                ResourceId = "string",
                Priority = 123,
                Override = list(
                  Action = "DROP_TO_ALERT"
                )
              )
            ),
            StatefulDefaultActions = list(
              "string"
            ),
            StatefulEngineOptions = list(
              RuleOrder = "STRICT_ORDER"|"DEFAULT_ACTION_ORDER",
              StreamExceptionPolicy = "DROP"|"CONTINUE"|"REJECT"|"FMS_IGNORE"
            )
          ),
          ExpectedPolicyDescription = list(
            StatelessRuleGroups = list(
              list(
                RuleGroupName = "string",
                ResourceId = "string",
                Priority = 123
              )
            ),
            StatelessDefaultActions = list(
              "string"
            ),
            StatelessFragmentDefaultActions = list(
              "string"
            ),
            StatelessCustomActions = list(
              "string"
            ),
            StatefulRuleGroups = list(
              list(
                RuleGroupName = "string",
                ResourceId = "string",
                Priority = 123,
                Override = list(
                  Action = "DROP_TO_ALERT"
                )
              )
            ),
            StatefulDefaultActions = list(
              "string"
            ),
            StatefulEngineOptions = list(
              RuleOrder = "STRICT_ORDER"|"DEFAULT_ACTION_ORDER",
              StreamExceptionPolicy = "DROP"|"CONTINUE"|"REJECT"|"FMS_IGNORE"
            )
          )
        ),
        NetworkFirewallInternetTrafficNotInspectedViolation = list(
          SubnetId = "string",
          SubnetAvailabilityZone = "string",
          RouteTableId = "string",
          ViolatingRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          IsRouteTableUsedInDifferentAZ = TRUE|FALSE,
          CurrentFirewallSubnetRouteTable = "string",
          ExpectedFirewallEndpoint = "string",
          FirewallSubnetId = "string",
          ExpectedFirewallSubnetRoutes = list(
            list(
              IpV4Cidr = "string",
              PrefixListId = "string",
              IpV6Cidr = "string",
              ContributingSubnets = list(
                "string"
              ),
              AllowedTargets = list(
                "string"
              ),
              RouteTableId = "string"
            )
          ),
          ActualFirewallSubnetRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          InternetGatewayId = "string",
          CurrentInternetGatewayRouteTable = "string",
          ExpectedInternetGatewayRoutes = list(
            list(
              IpV4Cidr = "string",
              PrefixListId = "string",
              IpV6Cidr = "string",
              ContributingSubnets = list(
                "string"
              ),
              AllowedTargets = list(
                "string"
              ),
              RouteTableId = "string"
            )
          ),
          ActualInternetGatewayRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          VpcId = "string"
        ),
        NetworkFirewallInvalidRouteConfigurationViolation = list(
          AffectedSubnets = list(
            "string"
          ),
          RouteTableId = "string",
          IsRouteTableUsedInDifferentAZ = TRUE|FALSE,
          ViolatingRoute = list(
            DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
            TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
            Destination = "string",
            Target = "string"
          ),
          CurrentFirewallSubnetRouteTable = "string",
          ExpectedFirewallEndpoint = "string",
          ActualFirewallEndpoint = "string",
          ExpectedFirewallSubnetId = "string",
          ActualFirewallSubnetId = "string",
          ExpectedFirewallSubnetRoutes = list(
            list(
              IpV4Cidr = "string",
              PrefixListId = "string",
              IpV6Cidr = "string",
              ContributingSubnets = list(
                "string"
              ),
              AllowedTargets = list(
                "string"
              ),
              RouteTableId = "string"
            )
          ),
          ActualFirewallSubnetRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          InternetGatewayId = "string",
          CurrentInternetGatewayRouteTable = "string",
          ExpectedInternetGatewayRoutes = list(
            list(
              IpV4Cidr = "string",
              PrefixListId = "string",
              IpV6Cidr = "string",
              ContributingSubnets = list(
                "string"
              ),
              AllowedTargets = list(
                "string"
              ),
              RouteTableId = "string"
            )
          ),
          ActualInternetGatewayRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          VpcId = "string"
        ),
        NetworkFirewallBlackHoleRouteDetectedViolation = list(
          ViolationTarget = "string",
          RouteTableId = "string",
          VpcId = "string",
          ViolatingRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          )
        ),
        NetworkFirewallUnexpectedFirewallRoutesViolation = list(
          FirewallSubnetId = "string",
          ViolatingRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          RouteTableId = "string",
          FirewallEndpoint = "string",
          VpcId = "string"
        ),
        NetworkFirewallUnexpectedGatewayRoutesViolation = list(
          GatewayId = "string",
          ViolatingRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          RouteTableId = "string",
          VpcId = "string"
        ),
        NetworkFirewallMissingExpectedRoutesViolation = list(
          ViolationTarget = "string",
          ExpectedRoutes = list(
            list(
              IpV4Cidr = "string",
              PrefixListId = "string",
              IpV6Cidr = "string",
              ContributingSubnets = list(
                "string"
              ),
              AllowedTargets = list(
                "string"
              ),
              RouteTableId = "string"
            )
          ),
          VpcId = "string"
        ),
        DnsRuleGroupPriorityConflictViolation = list(
          ViolationTarget = "string",
          ViolationTargetDescription = "string",
          ConflictingPriority = 123,
          ConflictingPolicyId = "string",
          UnavailablePriorities = list(
            123
          )
        ),
        DnsDuplicateRuleGroupViolation = list(
          ViolationTarget = "string",
          ViolationTargetDescription = "string"
        ),
        DnsRuleGroupLimitExceededViolation = list(
          ViolationTarget = "string",
          ViolationTargetDescription = "string",
          NumberOfRuleGroupsAlreadyAssociated = 123
        ),
        FirewallSubnetIsOutOfScopeViolation = list(
          FirewallSubnetId = "string",
          VpcId = "string",
          SubnetAvailabilityZone = "string",
          SubnetAvailabilityZoneId = "string",
          VpcEndpointId = "string"
        ),
        RouteHasOutOfScopeEndpointViolation = list(
          SubnetId = "string",
          VpcId = "string",
          RouteTableId = "string",
          ViolatingRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          SubnetAvailabilityZone = "string",
          SubnetAvailabilityZoneId = "string",
          CurrentFirewallSubnetRouteTable = "string",
          FirewallSubnetId = "string",
          FirewallSubnetRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          ),
          InternetGatewayId = "string",
          CurrentInternetGatewayRouteTable = "string",
          InternetGatewayRoutes = list(
            list(
              DestinationType = "IPV4"|"IPV6"|"PREFIX_LIST",
              TargetType = "GATEWAY"|"CARRIER_GATEWAY"|"INSTANCE"|"LOCAL_GATEWAY"|"NAT_GATEWAY"|"NETWORK_INTERFACE"|"VPC_ENDPOINT"|"VPC_PEERING_CONNECTION"|"EGRESS_ONLY_INTERNET_GATEWAY"|"TRANSIT_GATEWAY",
              Destination = "string",
              Target = "string"
            )
          )
        ),
        ThirdPartyFirewallMissingFirewallViolation = list(
          ViolationTarget = "string",
          VPC = "string",
          AvailabilityZone = "string",
          TargetViolationReason = "string"
        ),
        ThirdPartyFirewallMissingSubnetViolation = list(
          ViolationTarget = "string",
          VPC = "string",
          AvailabilityZone = "string",
          TargetViolationReason = "string"
        ),
        ThirdPartyFirewallMissingExpectedRouteTableViolation = list(
          ViolationTarget = "string",
          VPC = "string",
          AvailabilityZone = "string",
          CurrentRouteTable = "string",
          ExpectedRouteTable = "string"
        ),
        FirewallSubnetMissingVPCEndpointViolation = list(
          FirewallSubnetId = "string",
          VpcId = "string",
          SubnetAvailabilityZone = "string",
          SubnetAvailabilityZoneId = "string"
        ),
        InvalidNetworkAclEntriesViolation = list(
          Vpc = "string",
          Subnet = "string",
          SubnetAvailabilityZone = "string",
          CurrentAssociatedNetworkAcl = "string",
          EntryViolations = list(
            list(
              ExpectedEntry = list(
                EntryDetail = list(
                  IcmpTypeCode = list(
                    Code = 123,
                    Type = 123
                  ),
                  Protocol = "string",
                  PortRange = list(
                    From = 123,
                    To = 123
                  ),
                  CidrBlock = "string",
                  Ipv6CidrBlock = "string",
                  RuleAction = "allow"|"deny",
                  Egress = TRUE|FALSE
                ),
                EntryRuleNumber = 123,
                EntryType = "FMS_MANAGED_FIRST_ENTRY"|"FMS_MANAGED_LAST_ENTRY"|"CUSTOM_ENTRY"
              ),
              ExpectedEvaluationOrder = "string",
              ActualEvaluationOrder = "string",
              EntryAtExpectedEvaluationOrder = list(
                EntryDetail = list(
                  IcmpTypeCode = list(
                    Code = 123,
                    Type = 123
                  ),
                  Protocol = "string",
                  PortRange = list(
                    From = 123,
                    To = 123
                  ),
                  CidrBlock = "string",
                  Ipv6CidrBlock = "string",
                  RuleAction = "allow"|"deny",
                  Egress = TRUE|FALSE
                ),
                EntryRuleNumber = 123,
                EntryType = "FMS_MANAGED_FIRST_ENTRY"|"FMS_MANAGED_LAST_ENTRY"|"CUSTOM_ENTRY"
              ),
              EntriesWithConflicts = list(
                list(
                  EntryDetail = list(
                    IcmpTypeCode = list(
                      Code = 123,
                      Type = 123
                    ),
                    Protocol = "string",
                    PortRange = list(
                      From = 123,
                      To = 123
                    ),
                    CidrBlock = "string",
                    Ipv6CidrBlock = "string",
                    RuleAction = "allow"|"deny",
                    Egress = TRUE|FALSE
                  ),
                  EntryRuleNumber = 123,
                  EntryType = "FMS_MANAGED_FIRST_ENTRY"|"FMS_MANAGED_LAST_ENTRY"|"CUSTOM_ENTRY"
                )
              ),
              EntryViolationReasons = list(
                "MISSING_EXPECTED_ENTRY"|"INCORRECT_ENTRY_ORDER"|"ENTRY_CONFLICT"
              )
            )
          )
        ),
        PossibleRemediationActions = list(
          Description = "string",
          Actions = list(
            list(
              Description = "string",
              OrderedRemediationActions = list(
                list(
                  RemediationAction = list(
                    Description = "string",
                    EC2CreateRouteAction = list(
                      Description = "string",
                      DestinationCidrBlock = "string",
                      DestinationPrefixListId = "string",
                      DestinationIpv6CidrBlock = "string",
                      VpcEndpointId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      GatewayId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      RouteTableId = list(
                        ResourceId = "string",
                        Description = "string"
                      )
                    ),
                    EC2ReplaceRouteAction = list(
                      Description = "string",
                      DestinationCidrBlock = "string",
                      DestinationPrefixListId = "string",
                      DestinationIpv6CidrBlock = "string",
                      GatewayId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      RouteTableId = list(
                        ResourceId = "string",
                        Description = "string"
                      )
                    ),
                    EC2DeleteRouteAction = list(
                      Description = "string",
                      DestinationCidrBlock = "string",
                      DestinationPrefixListId = "string",
                      DestinationIpv6CidrBlock = "string",
                      RouteTableId = list(
                        ResourceId = "string",
                        Description = "string"
                      )
                    ),
                    EC2CopyRouteTableAction = list(
                      Description = "string",
                      VpcId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      RouteTableId = list(
                        ResourceId = "string",
                        Description = "string"
                      )
                    ),
                    EC2ReplaceRouteTableAssociationAction = list(
                      Description = "string",
                      AssociationId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      RouteTableId = list(
                        ResourceId = "string",
                        Description = "string"
                      )
                    ),
                    EC2AssociateRouteTableAction = list(
                      Description = "string",
                      RouteTableId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      SubnetId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      GatewayId = list(
                        ResourceId = "string",
                        Description = "string"
                      )
                    ),
                    EC2CreateRouteTableAction = list(
                      Description = "string",
                      VpcId = list(
                        ResourceId = "string",
                        Description = "string"
                      )
                    ),
                    FMSPolicyUpdateFirewallCreationConfigAction = list(
                      Description = "string",
                      FirewallCreationConfig = "string"
                    ),
                    CreateNetworkAclAction = list(
                      Description = "string",
                      Vpc = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      FMSCanRemediate = TRUE|FALSE
                    ),
                    ReplaceNetworkAclAssociationAction = list(
                      Description = "string",
                      AssociationId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      NetworkAclId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      FMSCanRemediate = TRUE|FALSE
                    ),
                    CreateNetworkAclEntriesAction = list(
                      Description = "string",
                      NetworkAclId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      NetworkAclEntriesToBeCreated = list(
                        list(
                          EntryDetail = list(
                            IcmpTypeCode = list(
                              Code = 123,
                              Type = 123
                            ),
                            Protocol = "string",
                            PortRange = list(
                              From = 123,
                              To = 123
                            ),
                            CidrBlock = "string",
                            Ipv6CidrBlock = "string",
                            RuleAction = "allow"|"deny",
                            Egress = TRUE|FALSE
                          ),
                          EntryRuleNumber = 123,
                          EntryType = "FMS_MANAGED_FIRST_ENTRY"|"FMS_MANAGED_LAST_ENTRY"|"CUSTOM_ENTRY"
                        )
                      ),
                      FMSCanRemediate = TRUE|FALSE
                    ),
                    DeleteNetworkAclEntriesAction = list(
                      Description = "string",
                      NetworkAclId = list(
                        ResourceId = "string",
                        Description = "string"
                      ),
                      NetworkAclEntriesToBeDeleted = list(
                        list(
                          EntryDetail = list(
                            IcmpTypeCode = list(
                              Code = 123,
                              Type = 123
                            ),
                            Protocol = "string",
                            PortRange = list(
                              From = 123,
                              To = 123
                            ),
                            CidrBlock = "string",
                            Ipv6CidrBlock = "string",
                            RuleAction = "allow"|"deny",
                            Egress = TRUE|FALSE
                          ),
                          EntryRuleNumber = 123,
                          EntryType = "FMS_MANAGED_FIRST_ENTRY"|"FMS_MANAGED_LAST_ENTRY"|"CUSTOM_ENTRY"
                        )
                      ),
                      FMSCanRemediate = TRUE|FALSE
                    )
                  ),
                  Order = 123
                )
              ),
              IsDefaultAction = TRUE|FALSE
            )
          )
        )
      )
    ),
    ResourceTags = list(
      list(
        Key = "string",
        Value = "string"
      )
    ),
    ResourceDescription = "string"
  )
)

Request syntax

svc$get_violation_details(
  PolicyId = "string",
  MemberAccount = "string",
  ResourceId = "string",
  ResourceType = "string"
)