macie2

type AdministratorAccount struct {
	AccountID          string    `json:"accountId"`
	InvitationID       string    `json:"invitationId"`
	InvitedAt          time.Time `json:"invitedAt"`
	RelationshipStatus string    `json:"relationshipStatus"`
}

type AffectedS3Bucket struct {
	Arn  string `json:"arn,omitempty"`
	Name string `json:"name,omitempty"`
}

type AffectedS3Object struct {
	BucketArn string `json:"bucketArn,omitempty"`
	Key       string `json:"key,omitempty"`
	Path      string `json:"path,omitempty"`
}

type AllowListCriteria struct {
	Regex       *string      `json:"regex,omitempty"`
	S3WordsList *S3WordsList `json:"s3WordsList,omitempty"`
}

type AllowListDetail struct {
	CreatedAt   time.Time         `json:"createdAt"`
	UpdatedAt   time.Time         `json:"updatedAt"`
	Tags        map[string]string `json:"tags,omitempty"`
	Criteria    AllowListCriteria `json:"criteria"`
	Status      AllowListStatus   `json:"status"`
	Arn         string            `json:"arn"`
	Description string            `json:"description,omitempty"`
	ID          string            `json:"id"`
	Name        string            `json:"name"`
}

type AllowListStatus struct {
	Code        string `json:"code"`
	Description string `json:"description,omitempty"`
}

type AllowListSummary struct {
	CreatedAt   time.Time `json:"createdAt"`
	UpdatedAt   time.Time `json:"updatedAt"`
	Arn         string    `json:"arn"`
	Description string    `json:"description,omitempty"`
	ID          string    `json:"id"`
	Name        string    `json:"name"`
}

type AutoDiscoveryAccount struct {
	AccountID string `json:"accountId"`
	Email     string `json:"email,omitempty"`
	Status    string `json:"status"`
}

type AutoDiscoveryAccountUpdate struct {
	AccountID string `json:"accountId"`
	Status    string `json:"status"`
}

type AutoDiscoveryConfig struct {
	AutoEnableOrganizationMembers string `json:"autoEnableOrganizationMembers,omitempty"`
	Status                        string `json:"status"`
}

type BucketCriterion struct {
	Prefix *string
	Gt     *int64
	Gte    *int64
	Lt     *int64
	Lte    *int64
	Eq     []string
	Neq    []string
}

type BucketSortCriteria struct {
	AttributeName string
	OrderBy       string
}

type ClassificationDetails struct {
	Result     *ClassificationResult `json:"result,omitempty"`
	JobArn     string                `json:"jobArn,omitempty"`
	JobID      string                `json:"jobId,omitempty"`
	OriginType string                `json:"originType,omitempty"`
}

type ClassificationExportConfig struct {
	S3Destination *ClassificationExportS3Dest `json:"s3Destination,omitempty"`
}

type ClassificationExportS3Dest struct {
	BucketName string `json:"bucketName"`
	KeyPrefix  string `json:"keyPrefix,omitempty"`
	KmsKeyArn  string `json:"kmsKeyArn,omitempty"`
}

type ClassificationJob struct {
	Tags                          map[string]string      `json:"tags,omitempty"`
	S3JobDefinition               map[string]any         `json:"s3JobDefinition,omitempty"`
	ScheduleFrequency             map[string]any         `json:"scheduleFrequency,omitempty"`
	LastRunTime                   *time.Time             `json:"lastRunTime,omitempty"`
	LastRunErrorStatus            *JobLastRunErrorStatus `json:"lastRunErrorStatus,omitempty"`
	Statistics                    *JobStatistics         `json:"statistics,omitempty"`
	UserPausedDetails             *JobUserPausedDetails  `json:"userPausedDetails,omitempty"`
	CreatedAt                     time.Time              `json:"createdAt"`
	Arn                           string                 `json:"jobArn"`
	ClientToken                   string                 `json:"clientToken,omitempty"`
	Description                   string                 `json:"description,omitempty"`
	JobID                         string                 `json:"jobId"`
	JobStatus                     string                 `json:"jobStatus"`
	JobType                       string                 `json:"jobType"`
	ManagedDataIdentifierSelector string                 `json:"managedDataIdentifierSelector,omitempty"`
	Name                          string                 `json:"name"`
	AllowListIDs                  []string               `json:"allowListIds,omitempty"`
	CustomDataIdentifierIDs       []string               `json:"customDataIdentifierIds,omitempty"`
	ManagedDataIdentifierIDs      []string               `json:"managedDataIdentifierIds,omitempty"`
	SamplingPercentage            int32                  `json:"samplingPercentage"`
	InitialRun                    bool                   `json:"initialRun"`
}

type ClassificationJobSummary struct {
	BucketCriteria     any                    `json:"bucketCriteria,omitempty"`
	BucketDefinitions  any                    `json:"bucketDefinitions,omitempty"`
	LastRunErrorStatus *JobLastRunErrorStatus `json:"lastRunErrorStatus,omitempty"`
	UserPausedDetails  *JobUserPausedDetails  `json:"userPausedDetails,omitempty"`
	CreatedAt          time.Time              `json:"createdAt"`
	JobID              string                 `json:"jobId"`
	JobStatus          string                 `json:"jobStatus"`
	JobType            string                 `json:"jobType"`
	Name               string                 `json:"name"`
}

type ClassificationResult struct {
	Status         *ClassificationResultStatus `json:"status,omitempty"`
	MimeType       string                      `json:"mimeType,omitempty"`
	SizeClassified int64                       `json:"sizeClassified,omitempty"`
}

type ClassificationResultStatus struct {
	Code   string `json:"code,omitempty"`
	Reason string `json:"reason,omitempty"`
}

type ClassificationScope struct {
	Tags      map[string]string      `json:"tags,omitempty"`
	S3        *ClassificationScopeS3 `json:"s3,omitempty"`
	CreatedAt time.Time              `json:"createdAt"`
	UpdatedAt time.Time              `json:"updatedAt"`
	ID        string                 `json:"id"`
	Name      string                 `json:"name"`
}

type ClassificationScopeS3 struct {
	Excludes *ClassificationScopeS3Exclusion `json:"excludes"`
}

type ClassificationScopeS3Exclusion struct {
	BucketNames []string `json:"bucketNames"`
}

type ClassificationScopeS3ExclusionUpdate struct {
	Operation   string   `json:"operation"`
	BucketNames []string `json:"bucketNames"`
}

type ClassificationScopeS3Update struct {
	Excludes *ClassificationScopeS3ExclusionUpdate `json:"excludes,omitempty"`
}

type ClassificationScopeSummary struct {
	ID   string `json:"id"`
	Name string `json:"name"`
}

type CustomDataIdentifier struct {
	CreatedAt            time.Time         `json:"createdAt"`
	Tags                 map[string]string `json:"tags,omitempty"`
	Arn                  string            `json:"arn"`
	Description          string            `json:"description,omitempty"`
	ID                   string            `json:"id"`
	Name                 string            `json:"name"`
	Regex                string            `json:"regex"`
	IgnoreWords          []string          `json:"ignoreWords,omitempty"`
	Keywords             []string          `json:"keywords,omitempty"`
	SeverityLevels       []SeverityLevel   `json:"severityLevels,omitempty"`
	MaximumMatchDistance int32             `json:"maximumMatchDistance"`
	// Deleted reflects real GetCustomDataIdentifierOutput/
	// BatchGetCustomDataIdentifierSummary soft-delete semantics: Amazon Macie
	// never hard-deletes a custom data identifier, so Get/BatchGet keep
	// returning it (with deleted:true) after DeleteCustomDataIdentifier.
	Deleted bool `json:"deleted"`
}

type CustomDataIdentifierSummary struct {
	Arn         string    `json:"arn"`
	CreatedAt   time.Time `json:"createdAt"`
	Description string    `json:"description,omitempty"`
	ID          string    `json:"id"`
	Name        string    `json:"name"`
}

type Finding struct {
	CreatedAt             time.Time              `json:"createdAt"`
	UpdatedAt             time.Time              `json:"updatedAt"`
	ClassificationDetails *ClassificationDetails `json:"classificationDetails,omitempty"`
	ResourcesAffected     *ResourcesAffected     `json:"resourcesAffected,omitempty"`
	PolicyDetails         *PolicyDetails         `json:"policyDetails,omitempty"`
	AccountID             string                 `json:"accountId"`
	Category              string                 `json:"category"`
	Description           string                 `json:"description"`
	ID                    string                 `json:"id"`
	Partition             string                 `json:"partition,omitempty"`
	Region                string                 `json:"region"`
	SchemaVersion         string                 `json:"schemaVersion,omitempty"`
	Title                 string                 `json:"title"`
	Type                  string                 `json:"type"`
	Severity              Severity               `json:"severity"`
	Count                 int64                  `json:"count"`
	Archived              bool                   `json:"archived"`
	Sample                bool                   `json:"sample"`
}

type FindingAction struct {
	ActionType string `json:"actionType,omitempty"`
}

type FindingActor struct {
	UserIdentity *UserIdentity `json:"userIdentity,omitempty"`
}

type FindingSortCriteria struct {
	AttributeName string
	OrderBy       string
}

type FindingStatisticsGroup struct {
	GroupKey string `json:"groupKey"`
	Count    int64  `json:"count"`
}

type FindingType string

type FindingsFilterDetail struct {
	FindingCriteria map[string]any    `json:"findingCriteria,omitempty"`
	Tags            map[string]string `json:"tags,omitempty"`
	Action          string            `json:"action"`
	Arn             string            `json:"arn"`
	Description     string            `json:"description,omitempty"`
	ID              string            `json:"id"`
	Name            string            `json:"name"`
	Position        int32             `json:"position"`
}

type FindingsFilterListItem struct {
	Tags   map[string]string `json:"tags,omitempty"`
	Action string            `json:"action"`
	Arn    string            `json:"arn"`
	ID     string            `json:"id"`
	Name   string            `json:"name"`
}

type FindingsFilterSummary struct {
	Tags        map[string]string `json:"tags,omitempty"`
	Action      string            `json:"action"`
	Arn         string            `json:"arn"`
	Description string            `json:"description,omitempty"`
	ID          string            `json:"id"`
	Name        string            `json:"name"`
	Position    int32             `json:"position"`
}

type FindingsPublicationConfig struct {
	SecurityHubConfiguration *SecurityHubConfig `json:"securityHubConfiguration,omitempty"`
	ClientToken              string             `json:"clientToken,omitempty"`
}

type Handler struct {
	Backend StorageBackend
	// contains filtered or unexported fields
}

type InMemoryBackend struct {
	// contains filtered or unexported fields
}

type Invitation struct {
	AccountID          string    `json:"accountId"`
	InvitationID       string    `json:"invitationId"`
	InvitedAt          time.Time `json:"invitedAt"`
	RelationshipStatus string    `json:"relationshipStatus"`
}

type JobLastRunErrorStatus struct {
	Code string `json:"code,omitempty"`
}

type JobStatistics struct {
	ApproximateNumberOfObjectsToProcess float64 `json:"approximateNumberOfObjectsToProcess"`
	NumberOfRuns                        float64 `json:"numberOfRuns"`
}

type JobUserPausedDetails struct {
	JobExpiresAt                        *time.Time `json:"jobExpiresAt,omitempty"`
	JobPausedAt                         *time.Time `json:"jobPausedAt,omitempty"`
	JobImminentExpirationHealthEventArn string     `json:"jobImminentExpirationHealthEventArn,omitempty"`
}

type ListJobsSortCriteria struct {
	AttributeName string
	OrderBy       string
}

type ManagedDataIdentifier struct {
	Category string `json:"category"`
	ID       string `json:"id"`
}

type Member struct {
	Tags                   map[string]string `json:"tags,omitempty"`
	InvitedAt              time.Time         `json:"invitedAt"`
	UpdatedAt              time.Time         `json:"updatedAt"`
	Arn                    string            `json:"arn"`
	AccountID              string            `json:"accountId"`
	AdministratorAccountID string            `json:"administratorAccountId,omitempty"`
	Email                  string            `json:"email"`
	MasteredBy             string            `json:"masterAccountId,omitempty"`
	RelationshipStatus     string            `json:"relationshipStatus"`
}

type OrgAdminAccount struct {
	AccountID string `json:"accountId"`
	Status    string `json:"status"`
}

type OrgConfig struct {
	AutoEnable             bool `json:"autoEnable"`
	MaxAccountLimitReached bool `json:"maxAccountLimitReached"`
}

type PolicyDetails struct {
	Action *FindingAction `json:"action,omitempty"`
	Actor  *FindingActor  `json:"actor,omitempty"`
}

type Provider struct{}

type ResourceProfile struct {
	Statistics                 *ResourceStatistics `json:"statistics,omitempty"`
	ResourceArn                string              `json:"resourceArn"`
	SensitivityScore           int32               `json:"sensitivityScore"`
	SensitivityScoreOverridden bool                `json:"sensitivityScoreOverridden"`
}

type ResourceProfileArtifact struct {
	Arn       string `json:"arn"`
	Type      string `json:"type,omitempty"`
	Sensitive bool   `json:"sensitive"`
}

type ResourceProfileDetection struct {
	Arn        string `json:"arn,omitempty"`
	ID         string `json:"id,omitempty"`
	Name       string `json:"name,omitempty"`
	Type       string `json:"type,omitempty"`
	Count      int64  `json:"count"`
	Suppressed bool   `json:"suppressed"`
}

type ResourceStatistics struct {
	LastRunErroredAt                   *time.Time `json:"lastRunErroredAt,omitempty"`
	LastRunAt                          *time.Time `json:"lastRunAt,omitempty"`
	TotalBytesClassified               int64      `json:"totalBytesClassified"`
	TotalDetections                    int64      `json:"totalDetections"`
	TotalDetectionsSuppressed          int64      `json:"totalDetectionsSuppressed"`
	TotalItemsClassified               int64      `json:"totalItemsClassified"`
	TotalItemsSkipped                  int64      `json:"totalItemsSkipped"`
	TotalItemsSkippedInvalidEncryption int64      `json:"totalItemsSkippedInvalidEncryption"`
	TotalItemsSkippedInvalidKms        int64      `json:"totalItemsSkippedInvalidKms"`
	TotalItemsSkippedPermissionDenied  int64      `json:"totalItemsSkippedPermissionDenied"`
}

type ResourcesAffected struct {
	S3Bucket *AffectedS3Bucket `json:"s3Bucket,omitempty"`
	S3Object *AffectedS3Object `json:"s3Object,omitempty"`
}

type RetrievalConfiguration struct {
	RetrievalMode string `json:"retrievalMode"`
	ExternalID    string `json:"externalId,omitempty"`
	RoleName      string `json:"roleName,omitempty"`
}

type RevealConfiguration struct {
	KmsKeyID string `json:"kmsKeyId,omitempty"`
	Status   string `json:"status"`
}

type S3BucketMetadata struct {
	AccountID               string           `json:"accountId"`
	BucketArn               string           `json:"bucketArn"`
	BucketName              string           `json:"bucketName"`
	Region                  string           `json:"region"`
	PublicAccess            string           `json:"publicAccess"`
	EncryptionType          string           `json:"encryptionType"`
	SharedAccess            string           `json:"sharedAccess"`
	Tags                    []map[string]any `json:"tags,omitempty"`
	ClassifiableObjectCount int64            `json:"classifiableObjectCount"`
	ClassifiableSizeInBytes int64            `json:"classifiableSizeInBytes"`
	ObjectCount             int64            `json:"objectCount"`
	SizeInBytes             int64            `json:"sizeInBytes"`
}

type S3WordsList struct {
	BucketName string `json:"bucketName"`
	ObjectKey  string `json:"objectKey"`
}

type SearchResourcesBucketCriteria struct {
	Includes *SearchResourcesCriteriaBlock
	Excludes *SearchResourcesCriteriaBlock
}

type SearchResourcesCriteriaBlock struct {
	And []SearchResourcesCriterion
}

type SearchResourcesCriterion struct {
	SimpleCriterion *SearchResourcesSimpleCriterion
	TagCriterion    *SearchResourcesTagCriterion
}

type SearchResourcesSimpleCriterion struct {
	Comparator string
	Key        string
	Values     []string
}

type SearchResourcesSortCriteria struct {
	AttributeName string
	OrderBy       string
}

type SearchResourcesTagCriterion struct {
	Comparator string
	TagValues  []SearchResourcesTagCriterionPair
}

type SearchResourcesTagCriterionPair struct {
	Key   string
	Value string
}

type SecurityHubConfig struct {
	PublishClassificationFindings bool `json:"publishClassificationFindings"`
	PublishPolicyFindings         bool `json:"publishPolicyFindings"`
}

type SensitivityInspectionTemplate struct {
	Excludes    map[string]any `json:"excludes,omitempty"`
	Includes    map[string]any `json:"includes,omitempty"`
	ID          string         `json:"sensitivityInspectionTemplateId"`
	Name        string         `json:"name"`
	Description string         `json:"description,omitempty"`
}

type SensitivityInspectionTemplateSummary struct {
	ID   string `json:"id"`
	Name string `json:"name"`
}

type Session struct {
	CreatedAt                  time.Time `json:"createdAt"`
	UpdatedAt                  time.Time `json:"updatedAt"`
	FindingPublishingFrequency string    `json:"findingPublishingFrequency"`
	ServiceRole                string    `json:"serviceRole"`
	Status                     string    `json:"status"`
	Enabled                    bool      `json:"-"`
}

type Severity struct {
	Description string `json:"description"`
	Score       int64  `json:"score"`
}

type SeverityLevel struct {
	Severity             string `json:"severity"`
	OccurrencesThreshold int64  `json:"occurrencesThreshold"`
}

type StorageBackend interface {
	// PaginationSecret is the HMAC secret signing this backend's page tokens.
	PaginationSecret() string

	// Session management
	GetSession() *Session
	EnableMacie(clientToken, frequency, status string) error
	DisableMacie() error
	UpdateMacieSession(frequency, status string) error

	// Classification job operations
	CreateClassificationJob(
		name, description, jobType, clientToken string,
		s3JobDefinition, scheduleFrequency map[string]any,
		allowListIDs, customDataIdentifierIDs, managedDataIdentifierIDs []string,
		managedDataIdentifierSelector string,
		tags map[string]string,
		samplingPercentage int32,
		initialRun bool,
	) (id, jobArn string, err error)
	DescribeClassificationJob(jobID string) (*ClassificationJob, error)
	ListClassificationJobs(
		filterCriteria map[string]any,
		sortBy *ListJobsSortCriteria,
		maxResults int,
		nextToken string,
	) ([]*ClassificationJobSummary, string, error)
	UpdateClassificationJob(jobID, status string) error

	// Member operations
	CreateMember(accountID, email string, tags map[string]string) error
	GetMember(accountID string) (*Member, error)
	DeleteMember(accountID string) error
	ListMembers(onlyAssociated bool, limit int, token string) ([]*Member, string, error)
	DisassociateMember(accountID string) error
	UpdateMemberSession(accountID, status string) error

	// Invitation operations
	CreateInvitations(
		accountIDs []string,
		message string,
		disableEmail bool,
	) ([]UnprocessedAccount, error)
	AcceptInvitation(administratorAccountID, invitationID string) error
	DeclineInvitations(accountIDs []string) ([]UnprocessedAccount, error)
	DeleteInvitations(accountIDs []string) ([]UnprocessedAccount, error)
	GetInvitationsCount() (int64, error)
	ListInvitations() ([]*Invitation, error)

	// Administrator / master account operations
	GetAdministratorAccount() (*AdministratorAccount, error)
	GetMasterAccount() (*AdministratorAccount, error)
	DisassociateFromAdministratorAccount() error
	DisassociateFromMasterAccount() error

	// Organization admin operations
	EnableOrganizationAdminAccount(accountID string) error
	DisableOrganizationAdminAccount(accountID string) error
	ListOrganizationAdminAccounts() ([]*OrgAdminAccount, error)

	// Organization configuration
	DescribeOrganizationConfiguration() (*OrgConfig, error)
	UpdateOrganizationConfiguration(autoEnable bool) error

	// Automated discovery operations
	GetAutomatedDiscoveryConfiguration() (*AutoDiscoveryConfig, error)
	UpdateAutomatedDiscoveryConfiguration(autoEnableMembers, status string) error
	ListAutomatedDiscoveryAccounts() ([]*AutoDiscoveryAccount, error)
	BatchUpdateAutomatedDiscoveryAccounts(updates []AutoDiscoveryAccountUpdate) error

	// Bucket operations
	DescribeBuckets(
		criteria map[string]BucketCriterion, sortBy *BucketSortCriteria, token string, limit int,
	) ([]map[string]any, string, error)
	GetBucketStatistics(accountID string) (map[string]any, error)

	// Batch custom data identifier
	BatchGetCustomDataIdentifiers(ids []string) ([]*CustomDataIdentifier, error)

	// Classification export configuration
	GetClassificationExportConfiguration() (*ClassificationExportConfig, error)
	PutClassificationExportConfiguration(cfg *ClassificationExportConfig) error

	// Classification scope operations
	GetClassificationScope(scopeID string) (*ClassificationScope, error)
	ListClassificationScopes() ([]*ClassificationScopeSummary, error)
	UpdateClassificationScope(scopeID string, s3 *ClassificationScopeS3Update) error

	// Findings publication configuration
	GetFindingsPublicationConfiguration() (*FindingsPublicationConfig, error)
	PutFindingsPublicationConfiguration(cfg *FindingsPublicationConfig) error

	// Resource profile operations
	GetResourceProfile(resourceARN string) (*ResourceProfile, error)
	UpdateResourceProfile(resourceARN string, sensitivityScore int32) error
	ListResourceProfileArtifacts(resourceARN string) ([]ResourceProfileArtifact, error)
	ListResourceProfileDetections(resourceARN string) ([]ResourceProfileDetection, error)
	UpdateResourceProfileDetections(
		resourceARN string,
		suppressDataIdentifiers []map[string]any,
	) error

	// Reveal configuration
	GetRevealConfiguration() (*RevealConfiguration, error)
	UpdateRevealConfiguration(kmsKeyID, status string) error
	GetRetrievalConfiguration() *RetrievalConfiguration
	UpdateRetrievalConfiguration(mode, roleName string) (*RetrievalConfiguration, error)

	// Sensitive data occurrences
	GetSensitiveDataOccurrences(findingID string) (map[string]any, error)
	GetSensitiveDataOccurrencesAvailability(findingID string) (string, []string, error)

	// Sensitivity inspection template operations
	GetSensitivityInspectionTemplate(templateID string) (*SensitivityInspectionTemplate, error)
	ListSensitivityInspectionTemplates() ([]*SensitivityInspectionTemplateSummary, error)
	UpdateSensitivityInspectionTemplate(
		templateID, name string,
		description *string,
		excludes, includes map[string]any,
	) error

	// Usage operations
	GetUsageStatistics(
		filterBy []map[string]any,
		maxResults int,
		nextToken, sortBy string,
	) ([]UsageRecord, string, error)
	GetUsageTotals(timeRange string) ([]UsageTotal, error)

	// Managed data identifiers
	ListManagedDataIdentifiers() ([]ManagedDataIdentifier, error)

	// Search resources
	SearchResources(
		bucketCriteria *SearchResourcesBucketCriteria,
		sortBy *SearchResourcesSortCriteria,
		maxResults int,
		nextToken string,
	) ([]map[string]any, string, error)

	// Allow list operations
	CreateAllowList(
		name, description string,
		criteria AllowListCriteria,
		tags map[string]string,
	) (*AllowListSummary, error)
	GetAllowList(id string) (*AllowListDetail, error)
	UpdateAllowList(
		id, name, description string,
		criteria AllowListCriteria,
	) (*AllowListSummary, error)
	DeleteAllowList(id string, ignoreJobChecks bool) error
	ListAllowLists(limit int, token string) ([]*AllowListSummary, string, error)

	// Custom data identifier operations
	CreateCustomDataIdentifier(
		name, description, regex string,
		ignoreWords, keywords []string,
		severityLevels []SeverityLevel,
		maxMatchDistance *int32,
		tags map[string]string,
	) (string, error)
	GetCustomDataIdentifier(id string) (*CustomDataIdentifier, error)
	DeleteCustomDataIdentifier(id string) error
	ListCustomDataIdentifiers(limit int, token string) ([]*CustomDataIdentifierSummary, string, error)
	TestCustomDataIdentifier(
		regex string,
		ignoreWords, keywords []string,
		maxMatchDistance *int32,
		sampleText string,
	) (int32, error)

	// Findings filter operations
	CreateFindingsFilter(
		name, description, action string,
		position *int32,
		criteria map[string]any,
		tags map[string]string,
	) (*FindingsFilterSummary, error)
	GetFindingsFilter(id string) (*FindingsFilterDetail, error)
	UpdateFindingsFilter(
		id, name, action string,
		description *string,
		position *int32,
		criteria map[string]any,
	) (*FindingsFilterSummary, error)
	DeleteFindingsFilter(id string) error
	ListFindingsFilters(limit int, token string) ([]*FindingsFilterSummary, string, error)

	// Finding operations
	GetFindings(findingIDs []string, sortBy *FindingSortCriteria) ([]*Finding, error)
	ListFindings(
		criteria map[string]any,
		sortBy *FindingSortCriteria,
		maxResults int,
		nextToken string,
	) ([]string, string, error)
	CreateSampleFindings(findingTypes []string) error
	GetFindingStatistics(
		groupBy string, criteria map[string]any, sortBy *FindingSortCriteria, size int,
	) ([]FindingStatisticsGroup, error)

	// Tag operations
	TagResource(resourceARN string, tags map[string]string) error
	UntagResource(resourceARN string, tagKeys []string) error
	ListTagsForResource(resourceARN string) (map[string]string, error)

	// Lifecycle
	AccountID() string
	Region() string
	Reset()
	Snapshot(ctx context.Context) []byte
	Restore(ctx context.Context, data []byte) error
}

type TaggedEntry struct {
	Tags map[string]string
	ARN  string
}

type UnprocessedAccount struct {
	AccountID    string `json:"accountId"`
	ErrorCode    string `json:"errorCode"`
	ErrorMessage string `json:"errorMessage"`
}

type UsageByAccount struct {
	Currency      string         `json:"currency,omitempty"`
	EstimatedCost string         `json:"estimatedCost,omitempty"`
	ServiceLimit  map[string]any `json:"serviceLimit,omitempty"`
	Type          string         `json:"type,omitempty"`
}

type UsageRecord struct {
	AccountID                            string           `json:"accountId"`
	AutomatedDiscoveryFreeTrialStartDate *time.Time       `json:"automatedDiscoveryFreeTrialStartDate,omitempty"`
	FreeTrialStartDate                   *time.Time       `json:"freeTrialStartDate,omitempty"`
	Usage                                []UsageByAccount `json:"usage,omitempty"`
}

type UsageTotal struct {
	Currency      string `json:"currency,omitempty"`
	EstimatedCost string `json:"estimatedCost,omitempty"`
	Type          string `json:"type,omitempty"`
}

type UserIdentity struct {
	Type        string `json:"type,omitempty"`
	UserName    string `json:"userName,omitempty"`
	PrincipalID string `json:"principalId,omitempty"`
}