security

type AWSComplianceStatus struct {
	Framework          ComplianceFramework        `json:"framework"`
	AWSCompliant       bool                       `json:"aws_compliant"`
	ArtifactReportID   string                     `json:"artifact_report_id,omitempty"`
	LastUpdated        time.Time                  `json:"last_updated"`
	ComplianceScope    []string                   `json:"compliance_scope"`
	RequiredSCPs       []string                   `json:"required_scps"`
	ImplementedSCPs    []string                   `json:"implemented_scps"`
	GapAnalysis        []ComplianceGap            `json:"gap_analysis"`
	AWSServices        []AWSServiceCompliance     `json:"aws_services"`
	RecommendedActions []ComplianceRecommendation `json:"recommended_actions"`
}

type AWSComplianceValidator struct {
	// contains filtered or unexported fields
}

type AWSServiceCompliance struct {
	ServiceName         string                 `json:"service_name"`
	ComplianceStatus    string                 `json:"compliance_status"`
	CertifiedRegions    []string               `json:"certified_regions"`
	RequiredFeatures    []string               `json:"required_features"`
	ConfigurationNeeded map[string]interface{} `json:"configuration_needed"`
}

type AccessConfig struct {
	Strategy   AccessStrategy
	UserIP     string
	SubnetCIDR string
	BindIP     string
	Message    string
}

type AccessInfo struct {
	Strategy     AccessStrategy
	UserIP       string
	SubnetCIDR   string
	BindIP       string
	Message      string
	Instructions []string
}

type AccessManager struct {
	// contains filtered or unexported fields
}

type AccessStrategy int

type ComplianceFramework string

type ComplianceGap struct {
	Control           string `json:"control"`
	AWSImplementation string `json:"aws_implementation"`
	PrismGap          string `json:"prism_gap"`
	Severity          string `json:"severity"`
	Remediation       string `json:"remediation"`
}

type ComplianceRecommendation struct {
	Priority       string `json:"priority"`
	Action         string `json:"action"`
	AWSService     string `json:"aws_service,omitempty"`
	SCPRequired    string `json:"scp_required,omitempty"`
	Impact         string `json:"impact"`
	Implementation string `json:"implementation"`
}

type EC2ClientInterface interface {
	AuthorizeSecurityGroupIngress(ctx context.Context, params *ec2.AuthorizeSecurityGroupIngressInput, optFns ...func(*ec2.Options)) (*ec2.AuthorizeSecurityGroupIngressOutput, error)
	RevokeSecurityGroupIngress(ctx context.Context, params *ec2.RevokeSecurityGroupIngressInput, optFns ...func(*ec2.Options)) (*ec2.RevokeSecurityGroupIngressOutput, error)
}

type SecurityConfig struct {
	// Audit logging configuration
	AuditLogEnabled  bool `json:"audit_log_enabled"`
	LogRetentionDays int  `json:"log_retention_days"`

	// Monitoring configuration
	MonitoringEnabled bool          `json:"monitoring_enabled"`
	MonitorInterval   time.Duration `json:"monitor_interval"`
	AlertThreshold    string        `json:"alert_threshold"` // LOW, MEDIUM, HIGH, CRITICAL

	// Registry security configuration
	RegistrySecurityEnabled bool   `json:"registry_security_enabled"`
	RegistryURL             string `json:"registry_url"`

	// Correlation analysis configuration
	CorrelationEnabled bool          `json:"correlation_enabled"`
	AnalysisInterval   time.Duration `json:"analysis_interval"`

	// Health check configuration
	HealthCheckEnabled  bool          `json:"health_check_enabled"`
	HealthCheckInterval time.Duration `json:"health_check_interval"`
}

type SecurityConfigValidator struct {
	// contains filtered or unexported fields
}

type SecurityGroupUpdater struct {
	// contains filtered or unexported fields
}

type SecurityLevel string

type SecurityManager struct {
	// contains filtered or unexported fields
}

type SecurityStatus struct {
	Enabled         bool                           `json:"enabled"`
	Running         bool                           `json:"running"`
	LastHealthCheck time.Time                      `json:"last_health_check"`
	Dashboard       *security.SecurityDashboard    `json:"dashboard,omitempty"`
	Correlations    []security.SecurityCorrelation `json:"recent_correlations,omitempty"`
	SystemHealth    *security.SystemHealthStatus   `json:"system_health,omitempty"`
	KeychainInfo    *security.KeychainInfo         `json:"keychain_info,omitempty"`
	Configuration   SecurityConfig                 `json:"configuration"`
}

type SecurityValidationResult struct {
	Valid           bool                       `json:"valid"`
	Score           int                        `json:"score"` // 0-100 security score
	Level           SecurityLevel              `json:"level"`
	Issues          []ValidationIssue          `json:"issues"`
	Warnings        []ValidationWarning        `json:"warnings"`
	Recommendations []ValidationRecommendation `json:"recommendations"`
	Summary         string                     `json:"summary"`
}

type ValidationIssue struct {
	Component  string `json:"component"`
	Issue      string `json:"issue"`
	Severity   string `json:"severity"`
	Impact     string `json:"impact"`
	Resolution string `json:"resolution"`
}

type ValidationRecommendation struct {
	Component      string `json:"component"`
	Recommendation string `json:"recommendation"`
	Priority       string `json:"priority"`
	Benefit        string `json:"benefit"`
}

type ValidationResult struct {
	Strategy              AccessStrategy
	DirectAccessAvailable bool
	AccessibleIPs         map[string]bool
	PortsChecked          []int
	Message               string
	Timestamp             time.Time
}

type ValidationWarning struct {
	Component      string `json:"component"`
	Warning        string `json:"warning"`
	Recommendation string `json:"recommendation"`
}