analysis

type Config struct {
	AnalysisType              string              `yaml:"AnalysisType"`
	AutoRemediationID         string              `yaml:"AutoRemediationID"`
	AutoRemediationParameters map[string]string   `yaml:"AutoRemediationParameters"`
	DataModelID               string              `yaml:"DataModelID"`
	DedupPeriodMinutes        int                 `yaml:"DedupPeriodMinutes"`
	Description               string              `yaml:"Description"`
	DisplayName               string              `yaml:"DisplayName"`
	Enabled                   bool                `yaml:"Enabled"`
	Filename                  string              `yaml:"Filename"`
	GlobalID                  string              `yaml:"GlobalID"`
	LogTypes                  []string            `yaml:"LogTypes"`
	Mappings                  []Mapping           `yaml:"Mappings"`
	OutputIds                 []string            `yaml:"OutputIds"`
	PolicyID                  string              `yaml:"PolicyID"`
	Reference                 string              `yaml:"Reference"`
	Reports                   map[string][]string `yaml:"Reports"`
	ResourceTypes             []string            `yaml:"ResourceTypes"`
	RuleID                    string              `yaml:"RuleID"`
	Runbook                   string              `yaml:"Runbook"`
	Severity                  string              `yaml:"Severity"`
	Suppressions              []string            `yaml:"Suppressions"`
	Tags                      []string            `yaml:"Tags"`
	Tests                     []Test              `yaml:"Tests"`
	Threshold                 int                 `yaml:"Threshold"`
}

type Event struct {
	Data  interface{}       `json:"data"`
	ID    string            `json:"id"`
	Mocks map[string]string `json:"mocks"`
}

type Mapping struct {
	Path   string `yaml:"Path"`
	Method string `yaml:"Method"`
	Name   string `yaml:"Name"`
}

type PackConfig struct {
	AnalysisType   string         `yaml:"AnalysisType"`
	Description    string         `yaml:"Description"`
	PackDefinition PackDefinition `yaml:"PackDefinition"`
	DisplayName    string         `yaml:"DisplayName"`
	PackID         string         `yaml:"PackID"`
}

type PackDefinition struct {
	IDs []string `yaml:"IDs"`
}

type Policy struct {
	Body          string   `json:"body"`
	ID            string   `json:"id"`
	ResourceTypes []string `json:"resourceTypes"`
}

type PolicyEngineInput struct {
	Policies  []Policy   `json:"policies"`
	Resources []Resource `json:"resources"`
}

type PolicyEngineOutput struct {
	Resources []Result `json:"resources"`
}

type PolicyError struct {
	ID      string `json:"id"`      // policy ID which caused runtime error
	Message string `json:"message"` // error message
}

type Resource struct {
	Attributes interface{} `json:"attributes"`
	ID         string      `json:"id"`
	Type       string      `json:"type"`
}

type Result struct {
	ID      string        `json:"id"` // resourceID
	Errored []PolicyError `json:"errored"`
	Failed  []string      `json:"failed"` // set of non-compliant policy IDs
	Passed  []string      `json:"passed"` // set of compliant policy IDs
}

type Rule struct {
	Body     string   `json:"body"`
	ID       string   `json:"id"`
	LogTypes []string `json:"logTypes"`
}

type RuleResult struct {
	ID         string `json:"id"`
	RuleID     string `json:"ruleId"`
	RuleOutput bool   `json:"ruleOutput"`
	// Rule function outputs
	RuleError          string   `json:"ruleError"`
	TitleOutput        string   `json:"titleOutput"`
	TitleError         string   `json:"titleError"`
	DescriptionOutput  string   `json:"descriptionOutput"`
	DescriptionError   string   `json:"descriptionError"`
	ReferenceOutput    string   `json:"referenceOutput"`
	ReferenceError     string   `json:"referenceError"`
	SeverityOutput     string   `json:"severityOutput"`
	SeverityError      string   `json:"severityError"`
	RunbookOutput      string   `json:"runbookOutput"`
	RunbookError       string   `json:"runbookError"`
	DestinationsOutput []string `json:"destinationsOutput"`
	DestinationsError  string   `json:"destinationsError"`
	DedupOutput        string   `json:"dedupOutput"`
	DedupError         string   `json:"dedupError"`
	AlertContextOutput string   `json:"alertContextOutput"`
	AlertContextError  string   `json:"alertContextError"`
	// Indicates general error in the Python script (import error, syntax error, etc).
	GenericError string `json:"genericError"`
	// True if any error (generic or from rule functions) is included in the result.
	Errored bool `json:"errored"`
}

type RulesEngineInput struct {
	Rules  []Rule  `json:"rules"`
	Events []Event `json:"events"`
}

type RulesEngineOutput struct {
	Results []RuleResult `json:"results"`
}

type Test struct {
	ExpectedResult bool        `yaml:"ExpectedResult"`
	Log            interface{} `yaml:"Log"`
	LogType        string      `yaml:"LogType"`
	Name           string      `yaml:"Name"`
	Resource       interface{} `yaml:"Resource"`
	ResourceType   string      `yaml:"ResourceType"`
}