[Amazon Security Lake] Improve the handling of ocsf.resource for serverless environment

[moxarth-rathod]

Proposed commit message

amazon_security_lake: improve ocsf.resource handling in the event data stream for serverless

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

Related issues

• Closes [Serverless observability] [amazon_security_lake] Failing test daily: pipeline test: test-findings.log in amazon_security_lake.event #16032
• Closes [Serverless observability] [amazon_security_lake] Failing test daily: pipeline test: test-resources-data.log in amazon_security_lake.event #16033
• Closes [Serverless security] [amazon_security_lake] Failing test daily: pipeline test: test-findings.log in amazon_security_lake.event #16045
• Closes [Serverless security] [amazon_security_lake] Failing test daily: pipeline test: test-resources-data.log in amazon_security_lake.event #16046

[elasticmachine]

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

[moxarth-rathod]

The previous method of adding the resource object inside the resources array showed different behavior in the serverless environment compared to the local environment. Even after appending [] to resources, it was still treated as a map, which caused the issue of the data field not being found. Since the issue is already covered by existing logs, no additional tests are required.

Serverless environment with the elastic-package is used to test this issue.

[elastic-vault-github-plugin-prod]

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: deb954c

History

• 💚 Build #35084 succeeded 4143453

cc @moxarth-rathod