waf_traffic_log

type CaptchaResponse struct {
	ResponseCode   *int    `json:"responseCode,omitempty"`
	SolveTimestamp *int64  `json:"solveTimestamp,omitempty"`
	FailureReason  *string `json:"failureReason,omitempty"`
}

type CustomValue struct {
	Key   *string `json:"key"`
	Name  *string `json:"name"`
	Value *string `json:"value"`
}

type Header struct {
	Name  string `json:"name,omitempty"`
	Value string `json:"value,omitempty"`
}

type HttpRequest struct {
	ClientIp    *string   `json:"clientIp,omitempty"`
	Country     *string   `json:"country,omitempty"`
	Headers     *[]Header `json:"headers,omitempty" parquet:"type=JSON"`
	Uri         *string   `json:"uri,omitempty"`
	Args        *string   `json:"args,omitempty"`
	HttpVersion *string   `json:"httpVersion,omitempty"`
	HttpMethod  *string   `json:"httpMethod,omitempty"`
	RequestId   *string   `json:"requestId,omitempty"`
}

type Labels struct {
	Name *string `json:"labels,omitempty"`
}

type NonTerminatingRuleMatch struct {
	RuleID           *string           `json:"ruleId"`
	Action           *string           `json:"action"`
	RuleMatchDetails []RuleMatchDetail `json:"ruleMatchDetails,omitempty"`
	CaptchaResponse  CaptchaResponse   `json:"captchaResponse,omitempty"`
}

type RateBasedRule struct {
	RateBasedRuleID     *interface{}  `json:"rateBasedRuleId"` // Assuming ID could be a string or number
	RateBasedRuleName   *string       `json:"rateBasedRuleName"`
	LimitKey            *string       `json:"limitKey"`
	MaxRateAllowed      *int          `json:"maxRateAllowed"`
	EvaluationWindowSec *int32        `json:"evaluationWindowSec"`
	CustomValues        []CustomValue `json:"customValues" parquet:"type=JSON"`
}

type Rule struct {
	RuleID           *string           `json:"ruleId"`
	Action           *string           `json:"action"`
	RuleMatchDetails []RuleMatchDetail `json:"ruleMatchDetails,omitempty"`
	CaptchaResponse  CaptchaResponse   `json:"captchaResponse,omitempty"`
}

type RuleGroup struct {
	RuleGroupID                 string                    `json:"ruleGroupId"`
	TerminatingRule             *Rule                     `json:"terminatingRule,omitempty"` // Can be null
	NonTerminatingMatchingRules []NonTerminatingRuleMatch `json:"nonTerminatingMatchingRules"`
	ExcludedRules               []Rule                    `json:"excludedRules,omitempty"` // Can be null
}

type RuleMatchDetail struct {
	ConditionType    *string  `json:"conditionType"`
	SensitivityLevel *string  `json:"sensitivityLevel"`
	Location         *string  `json:"location"`
	MatchedData      []string `json:"matchedData"`
}

type TerminatingRuleMatch struct {
	ConditionType    *string  `json:"conditionType"`
	SensitivityLevel *string  `json:"sensitivityLevel"`
	Location         *string  `json:"location"`
	MatchedData      []string `json:"matchedData"`
}

type WafMapper struct {
}

type WafTrafficLog struct {
	schema.CommonFields

	Action                      *string                   `json:"action"`
	CaptchaResponse             *CaptchaResponse          `json:"captchaResponse,omitempty" parquet:"name=captcha_response"`
	FormatVersion               *int32                    `json:"formatVersion" parquet:"name=format_version"`
	HttpRequest                 *HttpRequest              `json:"httpRequest,omitempty" parquet:"name=http_request"`
	HttpSourceId                *string                   `json:"httpSourceId,omitempty" parquet:"name=http_source_id"`
	HttpSourceName              *string                   `json:"httpSourceName,omitempty" parquet:"name=http_source_name"`
	Labels                      []Labels                  `json:"labels,omitempty" parquet:"type=JSON"`
	NonTerminatingMatchingRules []NonTerminatingRuleMatch `json:"nonTerminatingMatchingRules,omitempty" parquet:"name=non_terminating_matching_rules, type=JSON"`
	RateBasedRuleList           []RateBasedRule           `json:"rateBasedRuleList,omitempty" parquet:"name=rate_based_rule_list, type=JSON"`
	RequestHeadersInserted      []Header                  `json:"requestHeadersInserted,omitempty" parquet:"name=request_headers_inserted, type=JSON"`
	RuleGroupList               []RuleGroup               `json:"ruleGroupList,omitempty" parquet:"name=rule_group_list, type=JSON"`
	TerminatingRuleId           *string                   `json:"terminatingRuleId,omitempty" parquet:"name=terminating_rule_id"`
	TerminatingRuleMatchDetails []TerminatingRuleMatch    `json:"terminatingRuleMatchDetails,omitempty" parquet:"name=terminating_rule_match_details, type=JSON"`
	TerminatingRuleType         *string                   `json:"terminatingRuleType,omitempty" parquet:"name=terminating_rule_type"`
	Timestamp                   *time.Time                `json:"timestamp"`
	WebAclId                    *string                   `json:"webAclId" parquet:"name=web_acl_id"`
}

type WafTrafficLogTable struct{}