@ampsec/platform-client 17.4.0 → 18.0.0

package/build/src/dto/ampSetting.dto.d.ts

@@ -0,0 +1,13 @@
+import { BaseDto, BaseUpsertDto } from './base.dto';
+export type AmpSettingKey = string;
+export type AmpSettingUpsertDto = BaseUpsertDto & {
+    /** Tenant ID */
+    tid: string;
+    /** Connector ID */
+    cid?: string;
+    /** Setting key */
+    key: AmpSettingKey;
+    /** Setting value */
+    value?: unknown;
+};
+export type AmpSettingDto = BaseDto & AmpSettingUpsertDto;

package/build/src/dto/ampSetting.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ampSetting.dto.js.map

package/build/src/dto/ampSetting.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ampSetting.dto.js","sourceRoot":"","sources":["../../../src/dto/ampSetting.dto.ts"],"names":[],"mappings":""}

package/build/src/dto/enums/index.d.ts

@@ -6,4 +6,5 @@ export * from './findingKind';
 export * from './finding.severity';
 export * from './finding.status';
 export * from './jobExecution.status';
+export * from './riskContributor.type';
 export * from './saasComponentKind';

package/build/src/dto/enums/index.js

@@ -22,5 +22,6 @@ __exportStar(require("./findingKind"), exports);
 __exportStar(require("./finding.severity"), exports);
 __exportStar(require("./finding.status"), exports);
 __exportStar(require("./jobExecution.status"), exports);
+__exportStar(require("./riskContributor.type"), exports);
 __exportStar(require("./saasComponentKind"), exports);
 //# sourceMappingURL=index.js.map

package/build/src/dto/enums/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/dto/enums/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,iDAA+B;AAC/B,6CAA2B;AAC3B,qDAAmC;AACnC,gDAA8B;AAC9B,qDAAmC;AACnC,mDAAiC;AACjC,wDAAsC;AACtC,sDAAoC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/dto/enums/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,iDAA+B;AAC/B,6CAA2B;AAC3B,qDAAmC;AACnC,gDAA8B;AAC9B,qDAAmC;AACnC,mDAAiC;AACjC,wDAAsC;AACtC,yDAAuC;AACvC,sDAAoC"}

package/build/src/dto/enums/riskContributor.type.d.ts

@@ -0,0 +1,9 @@
+export declare enum RiskContributorType {
+    IS_EXECUTIVE = "IS_EXECUTIVE",
+    MFA = "MFA",
+    PRODUCTION_ACCESS = "PRODUCTION_ACCESS",
+    PRIVILEGED_ACCESS = "PRIVILEGED_ACCESS",
+    TOOLING = "TOOLING",
+    TRAINING = "TRAINING",
+    VULNERABILITY = "VULNERABILITY"
+}

package/build/src/dto/enums/riskContributor.type.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RiskContributorType = void 0;
+/* eslint-disable no-unused-vars */
+var RiskContributorType;
+(function (RiskContributorType) {
+    RiskContributorType["IS_EXECUTIVE"] = "IS_EXECUTIVE";
+    RiskContributorType["MFA"] = "MFA";
+    RiskContributorType["PRODUCTION_ACCESS"] = "PRODUCTION_ACCESS";
+    RiskContributorType["PRIVILEGED_ACCESS"] = "PRIVILEGED_ACCESS";
+    RiskContributorType["TOOLING"] = "TOOLING";
+    RiskContributorType["TRAINING"] = "TRAINING";
+    RiskContributorType["VULNERABILITY"] = "VULNERABILITY";
+})(RiskContributorType || (exports.RiskContributorType = RiskContributorType = {}));
+//# sourceMappingURL=riskContributor.type.js.map

package/build/src/dto/enums/riskContributor.type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"riskContributor.type.js","sourceRoot":"","sources":["../../../../src/dto/enums/riskContributor.type.ts"],"names":[],"mappings":";;;AAAA,mCAAmC;AACnC,IAAY,mBAQX;AARD,WAAY,mBAAmB;IAC7B,oDAA6B,CAAA;IAC7B,kCAAW,CAAA;IACX,8DAAuC,CAAA;IACvC,8DAAuC,CAAA;IACvC,0CAAmB,CAAA;IACnB,4CAAqB,CAAA;IACrB,sDAA+B,CAAA;AACjC,CAAC,EARW,mBAAmB,mCAAnB,mBAAmB,QAQ9B"}

package/build/src/dto/index.d.ts

@@ -16,5 +16,6 @@ export * from './riskContributors.dto';
 export * from './saasAssets.dto';
 export * from './saasComponents.dto';
 export * from './saasUsers.dto';
+export * from './ampSetting.dto';
 export * from './tenants.dto';
 export * from './users.dto';

package/build/src/dto/index.js

@@ -32,6 +32,7 @@ __exportStar(require("./riskContributors.dto"), exports);
 __exportStar(require("./saasAssets.dto"), exports);
 __exportStar(require("./saasComponents.dto"), exports);
 __exportStar(require("./saasUsers.dto"), exports);
+__exportStar(require("./ampSetting.dto"), exports);
 __exportStar(require("./tenants.dto"), exports);
 __exportStar(require("./users.dto"), exports);
 //# sourceMappingURL=index.js.map

package/build/src/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,6CAA2B;AAC3B,mDAAiC;AACjC,6CAA2B;AAC3B,0CAAwB;AACxB,kDAAgC;AAChC,iDAA+B;AAC/B,wCAAsB;AACtB,gDAA8B;AAC9B,6CAA2B;AAC3B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,yDAAuC;AACvC,mDAAiC;AACjC,uDAAqC;AACrC,kDAAgC;AAChC,gDAA8B;AAC9B,8CAA4B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/dto/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,+CAA6B;AAC7B,6CAA2B;AAC3B,mDAAiC;AACjC,6CAA2B;AAC3B,0CAAwB;AACxB,kDAAgC;AAChC,iDAA+B;AAC/B,wCAAsB;AACtB,gDAA8B;AAC9B,6CAA2B;AAC3B,6CAA2B;AAC3B,kDAAgC;AAChC,sDAAoC;AACpC,yDAAuC;AACvC,mDAAiC;AACjC,uDAAqC;AACrC,kDAAgC;AAChC,mDAAiC;AACjC,gDAA8B;AAC9B,8CAA4B"}

package/build/src/dto/platform/index.d.ts

@@ -9,6 +9,7 @@ export * from './platform.reportResults.dto';
 export * from './platform.saasAssets.dto';
 export * from './platform.saasComponents.dto';
 export * from './platform.saasUsers.dto';
+export * from './platform.ampSetting.dto';
 export * from './platform.tenants.dto';
 export * from './platform.users.dto';
 export * from './tenant.based.dto';

package/build/src/dto/platform/index.js

@@ -25,6 +25,7 @@ __exportStar(require("./platform.reportResults.dto"), exports);
 __exportStar(require("./platform.saasAssets.dto"), exports);
 __exportStar(require("./platform.saasComponents.dto"), exports);
 __exportStar(require("./platform.saasUsers.dto"), exports);
+__exportStar(require("./platform.ampSetting.dto"), exports);
 __exportStar(require("./platform.tenants.dto"), exports);
 __exportStar(require("./platform.users.dto"), exports);
 __exportStar(require("./tenant.based.dto"), exports);

package/build/src/dto/platform/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/dto/platform/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,wDAAsC;AACtC,4DAA0C;AAC1C,0DAAwC;AACxC,mEAAiD;AACjD,yDAAuC;AACvC,2DAAyC;AACzC,+DAA6C;AAC7C,4DAA0C;AAC1C,gEAA8C;AAC9C,2DAAyC;AACzC,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/dto/platform/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,wDAAsC;AACtC,wDAAsC;AACtC,4DAA0C;AAC1C,0DAAwC;AACxC,mEAAiD;AACjD,yDAAuC;AACvC,2DAAyC;AACzC,+DAA6C;AAC7C,4DAA0C;AAC1C,gEAA8C;AAC9C,2DAAyC;AACzC,4DAA0C;AAC1C,yDAAuC;AACvC,uDAAqC;AACrC,qDAAmC"}

package/build/src/dto/platform/platform.ampSetting.dto.d.ts

@@ -0,0 +1,4 @@
+import { AmpSettingDto, AmpSettingUpsertDto } from '../ampSetting.dto';
+import { TenantBased, UpsertTenantBased } from './tenant.based.dto';
+export type PlatformAmpSettingUpsertDto = AmpSettingUpsertDto & UpsertTenantBased;
+export type PlatformAmpSettingDto = AmpSettingDto & TenantBased;

package/build/src/dto/platform/platform.ampSetting.dto.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=platform.ampSetting.dto.js.map

package/build/src/dto/platform/platform.ampSetting.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.ampSetting.dto.js","sourceRoot":"","sources":["../../../../src/dto/platform/platform.ampSetting.dto.ts"],"names":[],"mappings":""}

package/build/src/dto/riskContributors.dto.d.ts

@@ -1,5 +1,8 @@
 import { BaseDto, BaseUpsertDto } from './base.dto';
+import { RiskContributorType } from './enums';
 export type RiskContributorUpsertDto = BaseUpsertDto & {
+    /** Type of risk contributor */
+    type: RiskContributorType;
     /** Short descriptor of the risk contributor, e.g. V, P, etc... */
     displayValue: string;
     /** Description of the risk contributor */

package/build/src/dto/users.dto.d.ts

@@ -1,6 +1,6 @@
 import { ChangeAwareDto, ChangeAwareUpsertDto } from './base.dto';
 import { MetricResults } from './reportResults.dto';
-import { RiskContributorDto } from './riskContributors.dto';
+import { RiskContributorUpsertDto } from './riskContributors.dto';
 export type UserUpsertDto = ChangeAwareUpsertDto & {
     /** Tenant ID */
     tid: string;
@@ -23,7 +23,7 @@ export type UserUpsertDto = ChangeAwareUpsertDto & {
     /** Employment start date used for calculating tenure */
     startDate?: string;
     /** Risk Contributors associated with the user */
-    riskContributors: RiskContributorDto[];
+    riskContributors: RiskContributorUpsertDto[];
     /** Metrics associated with the user */
     metrics?: MetricResults;
 };

package/build/src/services/AmpApi.d.ts

@@ -4,6 +4,7 @@ import { AmpDataService } from './data.service';
 import { AmpRestClientOptions, RestClient } from './rest';
 import { AmpReportService } from './reports.service';
 import { EnumService } from './rest/EnumService';
+import { AmpSettingsService } from './settings.service';
 export type AmpApiOptions = AmpRestClientOptions;
 /**
  * AMP API
@@ -29,6 +30,7 @@ export declare class AmpApi {
     readonly saasAssets: AmpDataService<SaasAssetDto>;
     readonly saasComponents: AmpDataService<SaasComponentDto>;
     readonly saasUsers: AmpDataService<SaasUserDto>;
+    readonly settings: AmpSettingsService;
     readonly tenants: AmpEntityService<TenantUpsertDto, TenantDto>;
     readonly users: AmpDataService<UserDto>;
     constructor(rest: RestClient);

package/build/src/services/AmpApi.js

@@ -7,6 +7,7 @@ const rest_1 = require("./rest");
 const constants_1 = require("./constants");
 const reports_service_1 = require("./reports.service");
 const EnumService_1 = require("./rest/EnumService");
+const settings_service_1 = require("./settings.service");
 /**
  * AMP API
  * This client is a wrapper around the AMP REST API meant to be used by
@@ -32,6 +33,7 @@ class AmpApi {
         this.saasAssets = new data_service_1.AmpDataServiceImpl(rest, constants_1.KIND.SAAS_ASSETS);
         this.saasComponents = new data_service_1.AmpDataServiceImpl(rest, constants_1.KIND.SAAS_COMPONENTS);
         this.saasUsers = new data_service_1.AmpDataServiceImpl(rest, constants_1.KIND.SAAS_USERS);
+        this.settings = new settings_service_1.AmpSettingsService(rest);
         this.tenants = new entity_service_1.AmpEntityServiceImpl(rest, constants_1.KIND.TENANTS);
         this.users = new data_service_1.AmpDataServiceImpl(rest, constants_1.KIND.USERS);
     }

package/build/src/services/AmpApi.js.map

@@ -1 +1 @@
-{"version":3,"file":"AmpApi.js","sourceRoot":"","sources":["../../../src/services/AmpApi.ts"],"names":[],"mappings":";;;AAgBA,qDAAwE;AACxE,iDAAkE;AAClE,iCAA0E;AAC1E,2CAAiC;AACjC,uDAAyE;AACzE,oDAAmE;AAInE;;;;;;;;;;;GAWG;AACH,MAAa,MAAM;IAejB,YAAY,IAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,qCAAoB,CAA2B,IAAI,EAAE,gBAAI,CAAC,MAAM,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK,GAAG,IAAI,iCAAkB,CAAW,IAAI,EAAE,gBAAI,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,GAAG,IAAI,qCAAoB,CAAmC,IAAI,EAAE,gBAAI,CAAC,UAAU,CAAC,CAAC;QACpG,IAAI,CAAC,KAAK,GAAG,IAAI,gCAAkB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,iCAAkB,CAAa,IAAI,EAAE,gBAAI,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,IAAI,iCAAkB,CAAc,IAAI,EAAE,gBAAI,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAkB,CAAkB,IAAI,EAAE,gBAAI,CAAC,cAAc,CAAC,CAAC;QACxF,IAAI,CAAC,OAAO,GAAG,IAAI,sCAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,iCAAkB,CAAe,IAAI,EAAE,gBAAI,CAAC,WAAW,CAAC,CAAC;QAC/E,IAAI,CAAC,cAAc,GAAG,IAAI,iCAAkB,CAAmB,IAAI,EAAE,gBAAI,CAAC,eAAe,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,GAAG,IAAI,iCAAkB,CAAc,IAAI,EAAE,gBAAI,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,GAAG,IAAI,qCAAoB,CAA6B,IAAI,EAAE,gBAAI,CAAC,OAAO,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK,GAAG,IAAI,iCAAkB,CAAU,IAAI,EAAE,gBAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAsB;QACpC,MAAM,IAAI,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAnCD,wBAmCC"}
+{"version":3,"file":"AmpApi.js","sourceRoot":"","sources":["../../../src/services/AmpApi.ts"],"names":[],"mappings":";;;AAgBA,qDAAwE;AACxE,iDAAkE;AAClE,iCAA0E;AAC1E,2CAAiC;AACjC,uDAAyE;AACzE,oDAAmE;AACnE,yDAAsD;AAItD;;;;;;;;;;;GAWG;AACH,MAAa,MAAM;IAgBjB,YAAY,IAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,qCAAoB,CAA2B,IAAI,EAAE,gBAAI,CAAC,MAAM,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK,GAAG,IAAI,iCAAkB,CAAW,IAAI,EAAE,gBAAI,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,GAAG,IAAI,qCAAoB,CAAmC,IAAI,EAAE,gBAAI,CAAC,UAAU,CAAC,CAAC;QACpG,IAAI,CAAC,KAAK,GAAG,IAAI,gCAAkB,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,iCAAkB,CAAa,IAAI,EAAE,gBAAI,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,IAAI,iCAAkB,CAAc,IAAI,EAAE,gBAAI,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,aAAa,GAAG,IAAI,iCAAkB,CAAkB,IAAI,EAAE,gBAAI,CAAC,cAAc,CAAC,CAAC;QACxF,IAAI,CAAC,OAAO,GAAG,IAAI,sCAAoB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,iCAAkB,CAAe,IAAI,EAAE,gBAAI,CAAC,WAAW,CAAC,CAAC;QAC/E,IAAI,CAAC,cAAc,GAAG,IAAI,iCAAkB,CAAmB,IAAI,EAAE,gBAAI,CAAC,eAAe,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,GAAG,IAAI,iCAAkB,CAAc,IAAI,EAAE,gBAAI,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,GAAG,IAAI,qCAAkB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,qCAAoB,CAA6B,IAAI,EAAE,gBAAI,CAAC,OAAO,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK,GAAG,IAAI,iCAAkB,CAAU,IAAI,EAAE,gBAAI,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAsB;QACpC,MAAM,IAAI,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AArCD,wBAqCC"}

package/build/src/services/AmpSdk.d.ts

@@ -4,6 +4,7 @@ import { AmpRestClientOptions, RestClient } from './rest';
 import { PlatformJobSpecDto, PlatformJobSpecUpsertDto } from '../dto/platform/platform.jobSpec.dto';
 import { PlatformJobExecutionStateDto, PlatformJobExecutionStateUpsertDto } from '../dto/platform/platform.jobExecutionState.dto';
 import { EnumService } from './rest/EnumService';
+import { AmpSettingsService } from './settings.service';
 export type AmpSdkOptions = AmpRestClientOptions;
 /**
  * AMP API
@@ -27,6 +28,7 @@ export declare class AmpSdkServices {
     readonly saasAssets: AmpSaaSEntityService<PlatformSaasAssetUpsertDto, PlatformSaasAssetDto>;
     readonly saasComponents: AmpSaaSEntityService<PlatformSaasComponentUpsertDto, PlatformSaasComponentDto>;
     readonly saasUsers: AmpSaaSEntityService<PlatformSaasUserUpsertDto, PlatformSaasUserDto>;
+    readonly settings: AmpSettingsService;
     readonly tenants: AmpEntityService<TenantUpsertDto, TenantDto>;
     readonly users: AmpGlobalEntityService<PlatformUserUpsertDto, PlatformUserDto>;
     constructor(rest: RestClient);

package/build/src/services/AmpSdk.js

@@ -5,6 +5,7 @@ const entity_service_1 = require("./entity.service");
 const rest_1 = require("./rest");
 const constants_1 = require("./constants");
 const EnumService_1 = require("./rest/EnumService");
+const settings_service_1 = require("./settings.service");
 /**
  * AMP API
  * This client is a wrapper around the AMP REST API meant to be used by
@@ -28,6 +29,7 @@ class AmpSdkServices {
         this.saasAssets = new entity_service_1.AmpSaaSEntityServiceImpl(rest, constants_1.KIND.SAAS_ASSETS, constants_1.TARGET_API_PLATFORM);
         this.saasComponents = new entity_service_1.AmpSaaSEntityServiceImpl(rest, constants_1.KIND.SAAS_COMPONENTS, constants_1.TARGET_API_PLATFORM);
         this.saasUsers = new entity_service_1.AmpSaaSEntityServiceImpl(rest, constants_1.KIND.SAAS_USERS, constants_1.TARGET_API_PLATFORM);
+        this.settings = new settings_service_1.AmpSettingsService(rest, constants_1.TARGET_API_PLATFORM);
         this.tenants = new entity_service_1.AmpEntityServiceImpl(rest, constants_1.KIND.TENANTS, constants_1.TARGET_API_PLATFORM);
         this.users = new entity_service_1.AmpGlobalEntityServiceImpl(rest, constants_1.KIND.USERS, constants_1.TARGET_API_PLATFORM);
     }

package/build/src/services/AmpSdk.js.map

@@ -1 +1 @@
-{"version":3,"file":"AmpSdk.js","sourceRoot":"","sources":["../../../src/services/AmpSdk.ts"],"names":[],"mappings":";;;AAwBA,qDAA4K;AAC5K,iCAA0E;AAC1E,2CAAsD;AAGtD,oDAAmE;AAInE;;;;;;;;GAQG;AACH,MAAa,cAAc;IAgBzB,YAAY,IAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,qCAAoB,CAA2C,IAAI,EAAE,gBAAI,CAAC,MAAM,EAAE,+BAAmB,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,GAAG,IAAI,2CAA0B,CAA2C,IAAI,EAAE,gBAAI,CAAC,MAAM,EAAE,+BAAmB,CAAC,CAAC;QAC9H,IAAI,CAAC,UAAU,GAAG,IAAI,qCAAoB,CAAmD,IAAI,EAAE,gBAAI,CAAC,UAAU,EAAE,+BAAmB,CAAC,CAAC;QACzI,IAAI,CAAC,KAAK,GAAG,IAAI,gCAAkB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,yCAAwB,CAA+C,IAAI,EAAE,gBAAI,CAAC,QAAQ,EAAE,+BAAmB,CAAC,CAAC;QACrI,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAmE,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAChK,IAAI,CAAC,IAAI,GAAG,IAAI,qCAAoB,CAA+C,IAAI,EAAE,gBAAI,CAAC,QAAQ,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,SAAS,GAAG,IAAI,qCAAoB,CAAyC,IAAI,EAAE,gBAAI,CAAC,SAAS,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,GAAG,IAAI,yCAAwB,CAAyD,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAC1J,IAAI,CAAC,UAAU,GAAG,IAAI,yCAAwB,CAAmD,IAAI,EAAE,gBAAI,CAAC,WAAW,EAAE,+BAAmB,CAAC,CAAC;QAC9I,IAAI,CAAC,cAAc,GAAG,IAAI,yCAAwB,CAA2D,IAAI,EAAE,gBAAI,CAAC,eAAe,EAAE,+BAAmB,CAAC,CAAC;QAC9J,IAAI,CAAC,SAAS,GAAG,IAAI,yCAAwB,CAAiD,IAAI,EAAE,gBAAI,CAAC,UAAU,EAAE,+BAAmB,CAAC,CAAC;QAC1I,IAAI,CAAC,OAAO,GAAG,IAAI,qCAAoB,CAA6B,IAAI,EAAE,gBAAI,CAAC,OAAO,EAAE,+BAAmB,CAAC,CAAC;QAC7G,IAAI,CAAC,KAAK,GAAG,IAAI,2CAA0B,CAAyC,IAAI,EAAE,gBAAI,CAAC,KAAK,EAAE,+BAAmB,CAAC,CAAC;IAC7H,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAsB;QACpC,MAAM,IAAI,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AArCD,wCAqCC"}
+{"version":3,"file":"AmpSdk.js","sourceRoot":"","sources":["../../../src/services/AmpSdk.ts"],"names":[],"mappings":";;;AAwBA,qDAA4K;AAC5K,iCAA0E;AAC1E,2CAAsD;AAGtD,oDAAmE;AACnE,yDAAsD;AAItD;;;;;;;;GAQG;AACH,MAAa,cAAc;IAiBzB,YAAY,IAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,qCAAoB,CAA2C,IAAI,EAAE,gBAAI,CAAC,MAAM,EAAE,+BAAmB,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,GAAG,IAAI,2CAA0B,CAA2C,IAAI,EAAE,gBAAI,CAAC,MAAM,EAAE,+BAAmB,CAAC,CAAC;QAC9H,IAAI,CAAC,UAAU,GAAG,IAAI,qCAAoB,CAAmD,IAAI,EAAE,gBAAI,CAAC,UAAU,EAAE,+BAAmB,CAAC,CAAC;QACzI,IAAI,CAAC,KAAK,GAAG,IAAI,gCAAkB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,yCAAwB,CAA+C,IAAI,EAAE,gBAAI,CAAC,QAAQ,EAAE,+BAAmB,CAAC,CAAC;QACrI,IAAI,CAAC,aAAa,GAAG,IAAI,qCAAoB,CAAmE,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAChK,IAAI,CAAC,IAAI,GAAG,IAAI,qCAAoB,CAA+C,IAAI,EAAE,gBAAI,CAAC,QAAQ,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,SAAS,GAAG,IAAI,qCAAoB,CAAyC,IAAI,EAAE,gBAAI,CAAC,SAAS,EAAE,+BAAmB,CAAC,CAAC;QAC7H,IAAI,CAAC,aAAa,GAAG,IAAI,yCAAwB,CAAyD,IAAI,EAAE,gBAAI,CAAC,cAAc,EAAE,+BAAmB,CAAC,CAAC;QAC1J,IAAI,CAAC,UAAU,GAAG,IAAI,yCAAwB,CAAmD,IAAI,EAAE,gBAAI,CAAC,WAAW,EAAE,+BAAmB,CAAC,CAAC;QAC9I,IAAI,CAAC,cAAc,GAAG,IAAI,yCAAwB,CAA2D,IAAI,EAAE,gBAAI,CAAC,eAAe,EAAE,+BAAmB,CAAC,CAAC;QAC9J,IAAI,CAAC,SAAS,GAAG,IAAI,yCAAwB,CAAiD,IAAI,EAAE,gBAAI,CAAC,UAAU,EAAE,+BAAmB,CAAC,CAAC;QAC1I,IAAI,CAAC,QAAQ,GAAG,IAAI,qCAAkB,CAAC,IAAI,EAAE,+BAAmB,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO,GAAG,IAAI,qCAAoB,CAA6B,IAAI,EAAE,gBAAI,CAAC,OAAO,EAAE,+BAAmB,CAAC,CAAC;QAC7G,IAAI,CAAC,KAAK,GAAG,IAAI,2CAA0B,CAAyC,IAAI,EAAE,gBAAI,CAAC,KAAK,EAAE,+BAAmB,CAAC,CAAC;IAC7H,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,OAAsB;QACpC,MAAM,IAAI,GAAG,IAAA,uBAAgB,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;CACF;AAvCD,wCAuCC"}

package/build/src/services/index.d.ts

@@ -4,3 +4,4 @@ export * from './constants';
 export * from './data.service';
 export * from './entity.service';
 export * from './rest';
+export * from './settings.service';

package/build/src/services/index.js

@@ -20,4 +20,5 @@ __exportStar(require("./constants"), exports);
 __exportStar(require("./data.service"), exports);
 __exportStar(require("./entity.service"), exports);
 __exportStar(require("./rest"), exports);
+__exportStar(require("./settings.service"), exports);
 //# sourceMappingURL=index.js.map

package/build/src/services/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,2CAAyB;AACzB,8CAA4B;AAC5B,iDAA+B;AAC/B,mDAAiC;AACjC,yCAAuB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,2CAAyB;AACzB,8CAA4B;AAC5B,iDAA+B;AAC/B,mDAAiC;AACjC,yCAAuB;AACvB,qDAAmC"}

package/build/src/services/settings.service.d.ts

@@ -0,0 +1,32 @@
+import { AmpSettingDto, AmpSettingUpsertDto, AmpSettingKey } from '../dto/ampSetting.dto';
+import { RestClient } from './rest';
+import { TargetApi } from './constants';
+export type TypedAmpSettingsKey<T> = {
+    id: AmpSettingKey;
+    defaultValue: T;
+};
+export type RawAmpSettingsMap = {
+    [key: AmpSettingKey]: unknown;
+};
+export type TenantSettingsMap = {
+    tenantSettings: RawAmpSettingsMap;
+    connectorSettings: {
+        [cid: string]: RawAmpSettingsMap;
+    };
+};
+export declare class AmpSettingsService {
+    protected readonly rest: RestClient;
+    protected readonly targetApi: string;
+    constructor(rest: RestClient, targetApi?: TargetApi);
+    getSettingsMap(tid?: string): Promise<AmpSettingsMap>;
+    create<T>(key: TypedAmpSettingsKey<T>, value: T, tid: string, cid?: string): Promise<AmpSettingDto>;
+    update(id: string, entity: AmpSettingUpsertDto): Promise<AmpSettingDto>;
+}
+export declare class AmpSettingsMap {
+    private readonly settings;
+    constructor(settings: TenantSettingsMap);
+    getGlobalSetting<T>(key: TypedAmpSettingsKey<T>): T;
+    getConnectorSetting<T>(cid: string, key: TypedAmpSettingsKey<T>): T;
+    getConnectorSettings(cid: string): RawAmpSettingsMap | undefined;
+    static asKey<T>(key: AmpSettingKey, defaultValue: T): TypedAmpSettingsKey<T>;
+}

package/build/src/services/settings.service.js

@@ -0,0 +1,98 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AmpSettingsMap = exports.AmpSettingsService = void 0;
+const lodash_1 = __importDefault(require("lodash"));
+class AmpSettingsService {
+    constructor(rest, targetApi = 'api') {
+        this.rest = rest;
+        this.targetApi = targetApi;
+    }
+    async getSettingsMap(tid) {
+        const page = await this.rest.call({
+            url: `/${this.targetApi}/v1/settings`,
+            method: 'GET',
+            params: { tid },
+        });
+        const settings = page.data;
+        const rawSettingsMap = {
+            tenantSettings: {},
+            connectorSettings: {},
+        };
+        settings.forEach(setting => {
+            if (setting.cid) {
+                if (!rawSettingsMap.connectorSettings[setting.cid]) {
+                    rawSettingsMap.connectorSettings[setting.cid] = {};
+                }
+                rawSettingsMap.connectorSettings[setting.cid][setting.key] = setting.value;
+            }
+            else {
+                rawSettingsMap.tenantSettings[setting.key] = setting.value;
+            }
+        });
+        return new AmpSettingsMap(rawSettingsMap);
+    }
+    async create(key, value, tid, cid) {
+        const page = await this.rest.call({
+            url: `/${this.targetApi}/v1/settings`,
+            method: 'POST',
+            data: {
+                tid,
+                cid,
+                key,
+                value,
+            },
+        });
+        const settings = page.data;
+        return settings[0];
+    }
+    async update(id, entity) {
+        const page = await this.rest.call({
+            url: `/${this.targetApi}/v1/settings/${id}`,
+            method: 'PUT',
+            data: entity,
+        });
+        const settings = page.data;
+        return settings[0];
+    }
+}
+exports.AmpSettingsService = AmpSettingsService;
+class AmpSettingsMap {
+    constructor(settings) {
+        this.settings = settings;
+    }
+    getGlobalSetting(key) {
+        const tenantVal = this.settings.tenantSettings[key.id];
+        if (tenantVal) {
+            return tenantVal;
+        }
+        return key.defaultValue;
+    }
+    getConnectorSetting(cid, key) {
+        const tenantVal = this.settings.tenantSettings[key.id];
+        const connectorVal = this.settings.connectorSettings[cid][key.id];
+        if (connectorVal) {
+            return connectorVal;
+        }
+        if (tenantVal) {
+            return tenantVal;
+        }
+        return key.defaultValue;
+    }
+    getConnectorSettings(cid) {
+        if (!this.settings.connectorSettings[cid]) {
+            return undefined;
+        }
+        return lodash_1.default.clone(this.settings.connectorSettings[cid]);
+    }
+    static asKey(key, defaultValue) {
+        return {
+            id: key,
+            defaultValue,
+        };
+    }
+}
+exports.AmpSettingsMap = AmpSettingsMap;
+//# sourceMappingURL=settings.service.js.map

package/build/src/services/settings.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.service.js","sourceRoot":"","sources":["../../../src/services/settings.service.ts"],"names":[],"mappings":";;;;;;AAAA,oDAAuB;AAmBvB,MAAa,kBAAkB;IAG7B,YAAY,IAAgB,EAAE,YAAuB,KAAK;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAAY;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,cAAc;YACrC,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,EAAC,GAAG,EAAC;SACd,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAuB,CAAC;QAC9C,MAAM,cAAc,GAAsB;YACxC,cAAc,EAAE,EAAE;YAClB,iBAAiB,EAAE,EAAE;SACtB,CAAC;QACF,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YACzB,IAAI,OAAO,CAAC,GAAG,EAAE;gBACf,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;oBAClD,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;iBACpD;gBACD,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;aAC5E;iBAAM;gBACL,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;aAC5D;QACH,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,cAAc,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,GAA2B,EAAE,KAAQ,EAAE,GAAW,EAAE,GAAY;QAC9E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,cAAc;YACrC,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,GAAG;gBACH,GAAG;gBACH,GAAG;gBACH,KAAK;aACN;SACF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAuB,CAAC;QAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,MAA2B;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAChC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,gBAAgB,EAAE,EAAE;YAC3C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAuB,CAAC;QAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;CACF;AAxDD,gDAwDC;AAED,MAAa,cAAc;IAGzB,YAAY,QAA2B;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,gBAAgB,CAAI,GAA2B;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,IAAI,SAAS,EAAE;YACb,OAAO,SAAc,CAAC;SACvB;QACD,OAAO,GAAG,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED,mBAAmB,CAAI,GAAW,EAAE,GAA2B;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,YAAY,EAAE;YAChB,OAAO,YAAiB,CAAC;SAC1B;QACD,IAAI,SAAS,EAAE;YACb,OAAO,SAAc,CAAC;SACvB;QACD,OAAO,GAAG,CAAC,YAAY,CAAC;IAC1B,CAAC;IAED,oBAAoB,CAAC,GAAW;QAC9B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE;YACzC,OAAO,SAAS,CAAC;SAClB;QACD,OAAO,gBAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,KAAK,CAAI,GAAkB,EAAE,YAAe;QACjD,OAAO;YACL,EAAE,EAAE,GAAG;YACP,YAAY;SACb,CAAC;IACJ,CAAC;CACF;AAxCD,wCAwCC"}

package/build/src/settings.d.ts

@@ -0,0 +1,9 @@
+export declare const NOTIFICATIONS_ENALBED: import("./services").TypedAmpSettingsKey<boolean>;
+/********************
+ *     PROVIDERS    *
+ ********************/
+export declare const SLACK_EXECUTIVE_GROUPS: import("./services").TypedAmpSettingsKey<string[]>;
+export declare const SLACK_PROD_ACCESS_GROUPS: import("./services").TypedAmpSettingsKey<string[]>;
+export declare const SLACK_PRIV_ACCESS_GROUPS: import("./services").TypedAmpSettingsKey<string[]>;
+export declare const SLACK_CONTACT_SECURITY_CHANNEL: import("./services").TypedAmpSettingsKey<string>;
+export declare const SLACK_CONTACT_SECURITY_TEMPLATE: import("./services").TypedAmpSettingsKey<string>;

package/build/src/settings.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SLACK_CONTACT_SECURITY_TEMPLATE = exports.SLACK_CONTACT_SECURITY_CHANNEL = exports.SLACK_PRIV_ACCESS_GROUPS = exports.SLACK_PROD_ACCESS_GROUPS = exports.SLACK_EXECUTIVE_GROUPS = exports.NOTIFICATIONS_ENALBED = void 0;
+const services_1 = require("./services");
+/*
+ * GLOBAL ONLY
+ * TODO:
+ */
+/*
+ * GLOBAL
+ * Note: these can be overridden by connector level settings
+ */
+exports.NOTIFICATIONS_ENALBED = services_1.AmpSettingsMap.asKey('notifications.enabled', false); // TODO: enble by default
+/********************
+ *     PROVIDERS    *
+ ********************/
+/*
+ * SLACK
+ */
+exports.SLACK_EXECUTIVE_GROUPS = services_1.AmpSettingsMap.asKey('slack.executive.groups', []);
+exports.SLACK_PROD_ACCESS_GROUPS = services_1.AmpSettingsMap.asKey('slack.prod_access.groups', []);
+exports.SLACK_PRIV_ACCESS_GROUPS = services_1.AmpSettingsMap.asKey('slack.priv_access.groups', []);
+exports.SLACK_CONTACT_SECURITY_CHANNEL = services_1.AmpSettingsMap.asKey('slack.contact_security.channel', '');
+// TODO: localization
+exports.SLACK_CONTACT_SECURITY_TEMPLATE = services_1.AmpSettingsMap.asKey('slack.contact_security.template', 'Thanks for getting in touch! We forwarded your message to our security team and they will get back to you shortly.');
+//# sourceMappingURL=settings.js.map

package/build/src/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/settings.ts"],"names":[],"mappings":";;;AAAA,yCAA0C;AAE1C;;;GAGG;AAEH;;;GAGG;AACU,QAAA,qBAAqB,GAAG,yBAAc,CAAC,KAAK,CAAU,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC,yBAAyB;AAE7H;;sBAEsB;AAEtB;;GAEG;AACU,QAAA,sBAAsB,GAAG,yBAAc,CAAC,KAAK,CAAW,wBAAwB,EAAE,EAAE,CAAC,CAAC;AACtF,QAAA,wBAAwB,GAAG,yBAAc,CAAC,KAAK,CAAW,0BAA0B,EAAE,EAAE,CAAC,CAAC;AAC1F,QAAA,wBAAwB,GAAG,yBAAc,CAAC,KAAK,CAAW,0BAA0B,EAAE,EAAE,CAAC,CAAC;AAC1F,QAAA,8BAA8B,GAAG,yBAAc,CAAC,KAAK,CAAS,gCAAgC,EAAE,EAAE,CAAC,CAAC;AACjH,qBAAqB;AACR,QAAA,+BAA+B,GAAG,yBAAc,CAAC,KAAK,CACjE,iCAAiC,EACjC,oHAAoH,CACrH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ampsec/platform-client",
-  "version": "17.4.0",
+  "version": "18.0.0",
   "description": "",
   "main": "build/src/index.js",
   "runkitExampleFilename": "example/main.js",

package/src/dto/ampSetting.dto.ts

@@ -0,0 +1,16 @@
+import {BaseDto, BaseUpsertDto} from './base.dto';
+
+export type AmpSettingKey = string;
+
+export type AmpSettingUpsertDto = BaseUpsertDto & {
+  /** Tenant ID */
+  tid: string;
+  /** Connector ID */
+  cid?: string;
+  /** Setting key */
+  key: AmpSettingKey;
+  /** Setting value */
+  value?: unknown;
+};
+
+export type AmpSettingDto = BaseDto & AmpSettingUpsertDto;

package/src/dto/enums/index.ts

@@ -6,4 +6,5 @@ export * from './findingKind';
 export * from './finding.severity';
 export * from './finding.status';
 export * from './jobExecution.status';
+export * from './riskContributor.type';
 export * from './saasComponentKind';

package/src/dto/enums/riskContributor.type.ts

@@ -0,0 +1,10 @@
+/* eslint-disable no-unused-vars */
+export enum RiskContributorType {
+  IS_EXECUTIVE = 'IS_EXECUTIVE',
+  MFA = 'MFA',
+  PRODUCTION_ACCESS = 'PRODUCTION_ACCESS',
+  PRIVILEGED_ACCESS = 'PRIVILEGED_ACCESS',
+  TOOLING = 'TOOLING',
+  TRAINING = 'TRAINING',
+  VULNERABILITY = 'VULNERABILITY',
+}

package/src/dto/index.ts

@@ -16,5 +16,6 @@ export * from './riskContributors.dto';
 export * from './saasAssets.dto';
 export * from './saasComponents.dto';
 export * from './saasUsers.dto';
+export * from './ampSetting.dto';
 export * from './tenants.dto';
 export * from './users.dto';

package/src/dto/platform/index.ts

@@ -9,6 +9,7 @@ export * from './platform.reportResults.dto';
 export * from './platform.saasAssets.dto';
 export * from './platform.saasComponents.dto';
 export * from './platform.saasUsers.dto';
+export * from './platform.ampSetting.dto';
 export * from './platform.tenants.dto';
 export * from './platform.users.dto';
 export * from './tenant.based.dto';

package/src/dto/platform/platform.ampSetting.dto.ts

@@ -0,0 +1,6 @@
+import {AmpSettingDto, AmpSettingUpsertDto} from '../ampSetting.dto';
+import {TenantBased, UpsertTenantBased} from './tenant.based.dto';
+
+export type PlatformAmpSettingUpsertDto = AmpSettingUpsertDto & UpsertTenantBased;
+
+export type PlatformAmpSettingDto = AmpSettingDto & TenantBased;

package/src/dto/riskContributors.dto.ts

@@ -1,6 +1,9 @@
 import {BaseDto, BaseUpsertDto} from './base.dto';
+import {RiskContributorType} from './enums';
 
 export type RiskContributorUpsertDto = BaseUpsertDto & {
+  /** Type of risk contributor */
+  type: RiskContributorType;
   /** Short descriptor of the risk contributor, e.g. V, P, etc... */
   displayValue: string;
   /** Description of the risk contributor */

package/src/dto/users.dto.ts

@@ -1,6 +1,6 @@
 import {ChangeAwareDto, ChangeAwareUpsertDto} from './base.dto';
 import {MetricResults} from './reportResults.dto';
-import {RiskContributorDto} from './riskContributors.dto';
+import {RiskContributorUpsertDto} from './riskContributors.dto';
 
 export type UserUpsertDto = ChangeAwareUpsertDto & {
   /** Tenant ID */
@@ -24,7 +24,7 @@ export type UserUpsertDto = ChangeAwareUpsertDto & {
   /** Employment start date used for calculating tenure */
   startDate?: string;
   /** Risk Contributors associated with the user */
-  riskContributors: RiskContributorDto[];
+  riskContributors: RiskContributorUpsertDto[];
   /** Metrics associated with the user */
   metrics?: MetricResults;
 };

package/src/services/AmpApi.ts

@@ -20,6 +20,7 @@ import {AmpRestClientOptions, RestClient, getAmpRestClient} from './rest';
 import {KIND} from './constants';
 import {AmpReportService, AmpReportServiceImpl} from './reports.service';
 import {DefaultEnumService, EnumService} from './rest/EnumService';
+import {AmpSettingsService} from './settings.service';
 
 export type AmpApiOptions = AmpRestClientOptions;
 
@@ -47,6 +48,7 @@ export class AmpApi {
   readonly saasAssets: AmpDataService<SaasAssetDto>;
   readonly saasComponents: AmpDataService<SaasComponentDto>;
   readonly saasUsers: AmpDataService<SaasUserDto>;
+  readonly settings: AmpSettingsService;
   readonly tenants: AmpEntityService<TenantUpsertDto, TenantDto>;
   readonly users: AmpDataService<UserDto>;
 
@@ -62,6 +64,7 @@ export class AmpApi {
     this.saasAssets = new AmpDataServiceImpl<SaasAssetDto>(rest, KIND.SAAS_ASSETS);
     this.saasComponents = new AmpDataServiceImpl<SaasComponentDto>(rest, KIND.SAAS_COMPONENTS);
     this.saasUsers = new AmpDataServiceImpl<SaasUserDto>(rest, KIND.SAAS_USERS);
+    this.settings = new AmpSettingsService(rest);
     this.tenants = new AmpEntityServiceImpl<TenantUpsertDto, TenantDto>(rest, KIND.TENANTS);
     this.users = new AmpDataServiceImpl<UserDto>(rest, KIND.USERS);
   }

package/src/services/AmpSdk.ts

@@ -28,6 +28,7 @@ import {KIND, TARGET_API_PLATFORM} from './constants';
 import {PlatformJobSpecDto, PlatformJobSpecUpsertDto} from '../dto/platform/platform.jobSpec.dto';
 import {PlatformJobExecutionStateDto, PlatformJobExecutionStateUpsertDto} from '../dto/platform/platform.jobExecutionState.dto';
 import {DefaultEnumService, EnumService} from './rest/EnumService';
+import {AmpSettingsService} from './settings.service';
 
 export type AmpSdkOptions = AmpRestClientOptions;
 
@@ -53,6 +54,7 @@ export class AmpSdkServices {
   readonly saasAssets: AmpSaaSEntityService<PlatformSaasAssetUpsertDto, PlatformSaasAssetDto>;
   readonly saasComponents: AmpSaaSEntityService<PlatformSaasComponentUpsertDto, PlatformSaasComponentDto>;
   readonly saasUsers: AmpSaaSEntityService<PlatformSaasUserUpsertDto, PlatformSaasUserDto>;
+  readonly settings: AmpSettingsService;
   readonly tenants: AmpEntityService<TenantUpsertDto, TenantDto>;
   readonly users: AmpGlobalEntityService<PlatformUserUpsertDto, PlatformUserDto>;
 
@@ -69,6 +71,7 @@ export class AmpSdkServices {
     this.saasAssets = new AmpSaaSEntityServiceImpl<PlatformSaasAssetUpsertDto, PlatformSaasAssetDto>(rest, KIND.SAAS_ASSETS, TARGET_API_PLATFORM);
     this.saasComponents = new AmpSaaSEntityServiceImpl<PlatformSaasComponentUpsertDto, PlatformSaasComponentDto>(rest, KIND.SAAS_COMPONENTS, TARGET_API_PLATFORM);
     this.saasUsers = new AmpSaaSEntityServiceImpl<PlatformSaasUserUpsertDto, PlatformSaasUserDto>(rest, KIND.SAAS_USERS, TARGET_API_PLATFORM);
+    this.settings = new AmpSettingsService(rest, TARGET_API_PLATFORM);
     this.tenants = new AmpEntityServiceImpl<TenantUpsertDto, TenantDto>(rest, KIND.TENANTS, TARGET_API_PLATFORM);
     this.users = new AmpGlobalEntityServiceImpl<PlatformUserUpsertDto, PlatformUserDto>(rest, KIND.USERS, TARGET_API_PLATFORM);
   }

package/src/services/index.ts

@@ -4,3 +4,4 @@ export * from './constants';
 export * from './data.service';
 export * from './entity.service';
 export * from './rest';
+export * from './settings.service';

package/src/services/settings.service.ts

@@ -0,0 +1,118 @@
+import _ from 'lodash';
+import {AmpSettingDto, AmpSettingUpsertDto, AmpSettingKey} from '../dto/ampSetting.dto';
+import {RestClient} from './rest';
+import {TargetApi} from './constants';
+
+export type TypedAmpSettingsKey<T> = {
+  id: AmpSettingKey;
+  defaultValue: T;
+};
+
+export type RawAmpSettingsMap = {[key: AmpSettingKey]: unknown};
+
+export type TenantSettingsMap = {
+  tenantSettings: RawAmpSettingsMap;
+  connectorSettings: {
+    [cid: string]: RawAmpSettingsMap;
+  };
+};
+
+export class AmpSettingsService {
+  protected readonly rest: RestClient;
+  protected readonly targetApi: string;
+  constructor(rest: RestClient, targetApi: TargetApi = 'api') {
+    this.rest = rest;
+    this.targetApi = targetApi;
+  }
+
+  async getSettingsMap(tid?: string): Promise<AmpSettingsMap> {
+    const page = await this.rest.call({
+      url: `/${this.targetApi}/v1/settings`,
+      method: 'GET',
+      params: {tid},
+    });
+    const settings = page.data as AmpSettingDto[];
+    const rawSettingsMap: TenantSettingsMap = {
+      tenantSettings: {},
+      connectorSettings: {},
+    };
+    settings.forEach(setting => {
+      if (setting.cid) {
+        if (!rawSettingsMap.connectorSettings[setting.cid]) {
+          rawSettingsMap.connectorSettings[setting.cid] = {};
+        }
+        rawSettingsMap.connectorSettings[setting.cid][setting.key] = setting.value;
+      } else {
+        rawSettingsMap.tenantSettings[setting.key] = setting.value;
+      }
+    });
+    return new AmpSettingsMap(rawSettingsMap);
+  }
+
+  async create<T>(key: TypedAmpSettingsKey<T>, value: T, tid: string, cid?: string): Promise<AmpSettingDto> {
+    const page = await this.rest.call({
+      url: `/${this.targetApi}/v1/settings`,
+      method: 'POST',
+      data: {
+        tid,
+        cid,
+        key,
+        value,
+      },
+    });
+    const settings = page.data as AmpSettingDto[];
+    return settings[0];
+  }
+
+  async update(id: string, entity: AmpSettingUpsertDto): Promise<AmpSettingDto> {
+    const page = await this.rest.call({
+      url: `/${this.targetApi}/v1/settings/${id}`,
+      method: 'PUT',
+      data: entity,
+    });
+    const settings = page.data as AmpSettingDto[];
+    return settings[0];
+  }
+}
+
+export class AmpSettingsMap {
+  private readonly settings: TenantSettingsMap;
+
+  constructor(settings: TenantSettingsMap) {
+    this.settings = settings;
+  }
+
+  getGlobalSetting<T>(key: TypedAmpSettingsKey<T>): T {
+    const tenantVal = this.settings.tenantSettings[key.id];
+    if (tenantVal) {
+      return tenantVal as T;
+    }
+    return key.defaultValue;
+  }
+
+  getConnectorSetting<T>(cid: string, key: TypedAmpSettingsKey<T>): T {
+    const tenantVal = this.settings.tenantSettings[key.id];
+    const connectorVal = this.settings.connectorSettings[cid][key.id];
+    if (connectorVal) {
+      return connectorVal as T;
+    }
+    if (tenantVal) {
+      return tenantVal as T;
+    }
+    return key.defaultValue;
+  }
+
+  getConnectorSettings(cid: string): RawAmpSettingsMap | undefined {
+    if (!this.settings.connectorSettings[cid]) {
+      return undefined;
+    }
+    return _.clone(this.settings.connectorSettings[cid]);
+  }
+
+  static asKey<T>(key: AmpSettingKey, defaultValue: T): TypedAmpSettingsKey<T> {
+    return {
+      id: key,
+      defaultValue,
+    };
+  }
+}

package/src/settings.ts

@@ -0,0 +1,29 @@
+import {AmpSettingsMap} from './services';
+
+/*
+ * GLOBAL ONLY
+ * TODO:
+ */
+
+/*
+ * GLOBAL
+ * Note: these can be overridden by connector level settings
+ */
+export const NOTIFICATIONS_ENALBED = AmpSettingsMap.asKey<boolean>('notifications.enabled', false); // TODO: enble by default
+
+/********************
+ *     PROVIDERS    *
+ ********************/
+
+/*
+ * SLACK
+ */
+export const SLACK_EXECUTIVE_GROUPS = AmpSettingsMap.asKey<string[]>('slack.executive.groups', []);
+export const SLACK_PROD_ACCESS_GROUPS = AmpSettingsMap.asKey<string[]>('slack.prod_access.groups', []);
+export const SLACK_PRIV_ACCESS_GROUPS = AmpSettingsMap.asKey<string[]>('slack.priv_access.groups', []);
+export const SLACK_CONTACT_SECURITY_CHANNEL = AmpSettingsMap.asKey<string>('slack.contact_security.channel', '');
+// TODO: localization
+export const SLACK_CONTACT_SECURITY_TEMPLATE = AmpSettingsMap.asKey<string>(
+  'slack.contact_security.template',
+  'Thanks for getting in touch! We forwarded your message to our security team and they will get back to you shortly.'
+);