target = "aws-kms-key-arn.txt#section-2.5"

# 2.5.  A valid AWS KMS ARN
#
#  An AWS KMS Key ARN is a string in the form:
# 
#  arn:partition:service:region:account:resource-type/resource-id
# 
#  A valid AWS KMS ARN is a string with 5 ":" that MUST delimit the following 6 parts:
# 
#  1.  It MUST start with string "arn"
# 
#  2.  The partition MUST be a non-empty
# 
#  3.  The service MUST be the string "kms"
# 
#  4.  The region MUST be a non-empty string
# 
#  5.  The account MUST be a non-empty string
# 
#  6.  The resource section MUST be non-empty. It MUST be split by a
#      single "/", with any any additional "/" included in the resource id
# 
#      1.  The resource type MUST be either "alias" or "key"
# 
#      2.  The resource id MUST be a non-empty string
# 
# 

[[spec]]
level = "MUST"
quote = '''
A valid AWS KMS ARN is a string with 5 ":" that MUST delimit the following 6 parts:
'''

[[spec]]
level = "MUST"
quote = '''
It MUST start with string "arn"
'''

[[spec]]
level = "MUST"
quote = '''
The partition MUST be a non-empty
'''

[[spec]]
level = "MUST"
quote = '''
The service MUST be the string "kms"
'''

[[spec]]
level = "MUST"
quote = '''
The region MUST be a non-empty string
'''

[[spec]]
level = "MUST"
quote = '''
The account MUST be a non-empty string
'''

[[spec]]
level = "MUST"
quote = '''
The resource section MUST be non-empty.
'''

[[spec]]
level = "MUST"
quote = '''
It MUST be split by a
single "/", with any any additional "/" included in the resource id
'''

[[spec]]
level = "MUST"
quote = '''
The resource type MUST be either "alias" or "key"
'''

[[spec]]
level = "MUST"
quote = '''
The resource id MUST be a non-empty string
'''