feat: add support for backup-vault changes

Author: sgtoj

fixtures/samples.json

@@ -440,5 +440,54 @@
       "creationDate": "2020-06-24T23:18:15.318Z",
       "state": "CREATED"
     }
+  },
+  {
+  "version": "0",
+  "id": "d415609e-5f35-d9a2-76d1-613683e4e024",
+  "detail-type": "Backup Vault State Change",
+  "source": "aws.backup",
+  "account": "1112233445566",
+  "time": "2020-06-24T23:18:19Z",
+  "region": "us-west-2",
+  "resources": [
+    "arn:aws:backup:us-west-2:1112233445566:backup-vault:d8864642-155c-4283-a168-a04f40e12c97"
+  ],
+  "detail": {
+    "backupVaultName": "d8864642-155c-4283-a168-a04f40e12c97",
+    "state": "CREATED"
+  }
+},
+  {
+  "version": "0",
+  "id": "1a2b3cd4-5e6f-7g8h-9i0j-123456k7l890",
+  "detail-type": "Backup Vault State Change",
+  "source": "aws.backup",
+  "account": "1112233445566",
+  "time": "2020-06-24T23:18:19Z",
+  "region": "us-west-2",
+  "resources": [
+    "arn:aws:backup:us-west-2:1112233445566:backup-vault:nameOfTestBackup"
+  ],
+  "detail": {
+    "backupVaultName": "vaultName",
+    "state": "MODIFIED",
+    "isLocked": "true"
+  }
+},
+  {
+  "version": "0",
+  "id": "344bccc1-6d2e-da93-3adf-b3f82460294d",
+  "detail-type": "Backup Vault State Change",
+  "source": "aws.backup",
+  "account": "1112233445566",
+  "time": "2020-06-22T02:42:37Z",
+  "region": "us-west-2",
+  "resources": [
+    "arn:aws:backup:us-west-2:1112233445566:backup-vault:e8189629-1f8e-4ed2-af7d-b32415d04db1"
+  ],
+  "detail": {
+    "backupVaultName": "e8189629-1f8e-4ed2-af7d-b32415d04db1",
+    "state": "DELETED"
   }
+}
 ]

internal/app/app.go

@@ -29,6 +29,8 @@ func (a *App) ParseEvent(e awsEvent.CloudWatchEvent) (events.StateChangeEvent, e
 		return events.NewBackupJobStateChange(e.Detail)
 	case "Backup Plan State Change":
 		return events.NewBackupPlanStateChange(e.Detail)
+	case "Backup Vault State Change":
+		return events.NewBackupVaultStateChange(e.Detail)
 	case "Copy Job State Change":
 		return events.NewCopyJobStateChange(e.Detail)
 	case "Restore Job State Change":

internal/events/backup-plan.go

@@ -45,6 +45,6 @@ func NewBackupPlanStateChange(raw json.RawMessage) (*BackupPlanStateChange, erro
 	if err := json.Unmarshal(raw, &sce); err != nil {
 		return &BackupPlanStateChange{}, err
 	}
-	sce.StatusMessage = "Backup plan for AWS Backup service was changed. Please confirm it was intended."
+	sce.StatusMessage = "AWS Backup service backup plan was changed. Please confirm it was intended."
 	return &sce, nil
 }

internal/events/backup-vault.go

@@ -0,0 +1,54 @@
+package events
+
+import (
+	"encoding/json"
+	"fmt"
+
+	"github.com/slack-go/slack"
+)
+
+type BackupVaultStateChange struct {
+	StateChangeEvent
+	BackupVaultId string `json:"backupVaultId"`
+	State         string `json:"state"`
+	IsLocked      string `json:"isLocked"`
+	StatusMessage string `json:"statusMessage"`
+	Raw           string `json:"-"`
+}
+
+func (sce *BackupVaultStateChange) SlackMessage() (slack.MsgOption, slack.MsgOption) {
+	var blocks []slack.Block
+
+	header := slack.NewHeaderBlock(slack.NewTextBlockObject("plain_text", "Backup Vault Change", false, false))
+	blocks = append(blocks, header)
+
+	var details []*slack.TextBlockObject
+	details = append(details, slack.NewTextBlockObject("mrkdwn", fmt.Sprintf("*State*\n%s", sce.State), false, false))
+	details = append(details, slack.NewTextBlockObject("mrkdwn", fmt.Sprintf("*Locked*\n%s", sce.IsLocked), false, false))
+	blocks = append(blocks, slack.NewSectionBlock(nil, details, nil))
+
+	if sce.StatusMessage != "" {
+		desc := slack.NewSectionBlock(
+			slack.NewTextBlockObject("mrkdwn", fmt.Sprintf("```\n%s\n```", sce.StatusMessage), false, false),
+			nil, nil,
+		)
+		blocks = append(blocks, desc)
+	}
+	return slack.MsgOptionText(sce.StatusMessage, false), slack.MsgOptionBlocks(blocks...)
+}
+
+func (sce *BackupVaultStateChange) IsAlertable() bool {
+	return true
+}
+
+func NewBackupVaultStateChange(raw json.RawMessage) (*BackupVaultStateChange, error) {
+	var sce BackupVaultStateChange
+	if err := json.Unmarshal(raw, &sce); err != nil {
+		return &BackupVaultStateChange{}, err
+	}
+	if sce.IsLocked == "" {
+		sce.IsLocked = "false"
+	}
+	sce.StatusMessage = "AWS Backup service backup vault was changed. Please confirm it was intended."
+	return &sce, nil
+}