createCase

import aws.sdk.kotlin.services.securityir.model.AwsRegion
import aws.sdk.kotlin.services.securityir.model.EngagementType
import aws.sdk.kotlin.services.securityir.model.ImpactedAwsRegion
import aws.sdk.kotlin.services.securityir.model.ResolverType
import aws.sdk.kotlin.services.securityir.model.ThreatActorIp
import aws.sdk.kotlin.services.securityir.model.Watcher

fun main() { 
   //sampleStart 
   // Invoke CreateCase
securityIrClient.createCase {
    resolverType = ResolverType.fromValue("Self")
    title = "My sample case"
    description = "Case description"
    reportedIncidentStartDate = "2023-03-27T15:32:01.789Z"
    engagementType = EngagementType.fromValue("Investigation")
    watchers = listOf<Watcher>(
        Watcher {
            email = "alice@example.com"
            name = "Alice"
            jobTitle = "CEO"
        },
        Watcher {
            email = "bob@example.com"
            name = "Bob"
            jobTitle = "CFO"
        }            
    )
    impactedAccounts = listOf<String>(
        "000000000000",
        "111111111111"
    )
    impactedServices = listOf<String>(
        "Amazon EC2",
        "Amazon EKS"
    )
    impactedAwsRegions = listOf<ImpactedAwsRegion>(
        ImpactedAwsRegion {
            region = AwsRegion.fromValue("ap-southeast-1")
        }            
    )
    threatActorIpAddresses = listOf<ThreatActorIp>(
        ThreatActorIp {
            ipAddress = "192.168.192.168"
            userAgent = "Browser"
        }            
    )
} 
   //sampleEnd
}