Disarming a manual alarm control panel in automation with a code

Configuration
7

The data: key is for additional information that a service my support. The entity id is not additional data. It always needs to be specified but you can do that inside the data if you wish to. So both of these are correct:

alarm_disarm:
  sequence:
    service: alarm_control_panel.alarm_disarm
    data:
      code: !secret alarm_code
      entity_id: alarm_control_panel.house

alarm_disarm:
  sequence:
    service: alarm_control_panel.alarm_disarm
    entity_id: alarm_control_panel.house
    data:
      code: !secret alarm_code

But this is not:

alarm_disarm:
  sequence:
    service: alarm_control_panel.alarm_disarm
    entity_id: alarm_control_panel.house
    data:
      entity_id: alarm_control_panel.house
      code: !secret alarm_code