models

type Alert struct {
	ID                  string    `dynamodbav:"id,string"`
	TimePartition       string    `dynamodbav:"timePartition,string"`
	Severity            *string   `dynamodbav:"severity,string"`
	RuleDisplayName     *string   `dynamodbav:"ruleDisplayName,string"`
	FirstEventMatchTime time.Time `dynamodbav:"firstEventMatchTime,string"`
	LogTypes            []string  `dynamodbav:"logTypes,stringset"`
	// Alert Title - will be the Python-generated title or a default one if no Python-generated title is available.
	Title string `dynamodbav:"title,string"`
	AlertDedupEvent
	AlertPolicy
}

type AlertDedupEvent struct {
	RuleID              string    `dynamodbav:"ruleId"`
	RuleVersion         string    `dynamodbav:"ruleVersion"`
	DeduplicationString string    `dynamodbav:"dedup"`
	CreationTime        time.Time `dynamodbav:"creationTime"`
	UpdateTime          time.Time `dynamodbav:"updateTime"`
	EventCount          int64     `dynamodbav:"eventCount"`
	LogTypes            []string  `dynamodbav:"logTypes,stringset"`
	AlertContext        *string   `dynamodbav:"context,string"`
	Type                string    `dynamodbav:"type"`
	// Generated Fields
	GeneratedTitle        *string  `dynamodbav:"title,string"`
	GeneratedDescription  *string  `dynamodbav:"description,string"`
	GeneratedReference    *string  `dynamodbav:"reference"`
	GeneratedSeverity     *string  `dynamodbav:"severity"`
	GeneratedRunbook      *string  `dynamodbav:"runbook"`
	GeneratedDestinations []string `dynamodbav:"destinations,stringset"`
	AlertCount            int64    `dynamodbav:"-"` // There is no need to store this item in DDB
}

type AlertPolicy struct {
	PolicyID          string   `dynamodbav:"policyId,string"`
	PolicyDisplayName string   `dynamodbav:"policyDisplayName,string"`
	PolicyVersion     string   `dynamodbav:"policyVersion,string"`
	PolicySourceID    string   `dynamodbav:"policySourceId,string"`
	ResourceTypes     []string `dynamodbav:"resourceTypes,stringset"`
	ResourceID        string   `dynamodbav:"resourceId,string"` // This is the failing resource
}