cartography 0.93.0rc1__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/slack/group.py

@@ -0,0 +1,129 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class SlackGroupNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    description: PropertyRef = PropertyRef("description")
+    is_subteam: PropertyRef = PropertyRef("is_subteam")
+    handle: PropertyRef = PropertyRef("handle")
+    is_external: PropertyRef = PropertyRef("is_external")
+    date_create: PropertyRef = PropertyRef("date_create")
+    date_update: PropertyRef = PropertyRef("date_update")
+    date_delete: PropertyRef = PropertyRef("date_delete")
+    created_by: PropertyRef = PropertyRef("created_by")
+    updated_by: PropertyRef = PropertyRef("updated_by")
+    user_count: PropertyRef = PropertyRef("user_count")
+    channel_count: PropertyRef = PropertyRef("channel_count")
+
+
+@dataclass(frozen=True)
+class SlackGroupToSlackUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:SlackUser)-[:MEMBER_OF]->(:SlackGroup)
+class SlackGroupToUserRel(CartographyRelSchema):
+    target_node_label: str = "SlackUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("member_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF"
+    properties: SlackGroupToSlackUserRelProperties = (
+        SlackGroupToSlackUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class SlackGroupToCreatorRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:SlackUser)-[:CREATED]->(:SlackGroup)
+class SlackGroupToCreatorRel(CartographyRelSchema):
+    target_node_label: str = "SlackUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("created_by")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CREATED"
+    properties: SlackGroupToCreatorRelProperties = SlackGroupToCreatorRelProperties()
+
+
+@dataclass(frozen=True)
+class SlackGroupToSlackTeamRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:SlackTeam)-[:RESOURCE]->(:SlackGroup)
+class SlackGroupToSlackTeamRel(CartographyRelSchema):
+    target_node_label: str = "SlackTeam"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TEAM_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: SlackGroupToSlackTeamRelProperties = (
+        SlackGroupToSlackTeamRelProperties()
+    )
+
+
+class SlackTeamToTeamRel(CartographyRelSchema):
+    target_node_label: str = "SlackTeam"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TEAM_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: SlackGroupToSlackTeamRelProperties = (
+        SlackGroupToSlackTeamRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class SlackGroupToSlackChannelRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:SlackChannel)<-[:MEMBER_OF]-(:SlackGroup)
+class SlackGroupToChannelRel(CartographyRelSchema):
+    target_node_label: str = "SlackChannel"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("channel_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "MEMBER_OF"
+    properties: SlackGroupToSlackChannelRelProperties = (
+        SlackGroupToSlackChannelRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class SlackGroupSchema(CartographyNodeSchema):
+    label: str = "SlackGroup"
+    properties: SlackGroupNodeProperties = SlackGroupNodeProperties()
+    other_relationships: OtherRelationships = OtherRelationships(
+        rels=[
+            SlackGroupToUserRel(),
+            SlackGroupToChannelRel(),
+            SlackGroupToCreatorRel(),
+        ],
+    )
+    sub_resource_relationship: SlackGroupToSlackTeamRel = SlackGroupToSlackTeamRel()

cartography/models/slack/team.py

@@ -0,0 +1,22 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+
+
+@dataclass(frozen=True)
+class SlackTeamNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    domain: PropertyRef = PropertyRef("domain")
+    url: PropertyRef = PropertyRef("url")
+    is_verified: PropertyRef = PropertyRef("is_verified")
+    email_domain: PropertyRef = PropertyRef("email_domain")
+
+
+@dataclass(frozen=True)
+class SlackTeamSchema(CartographyNodeSchema):
+    label: str = "SlackTeam"
+    properties: SlackTeamNodeProperties = SlackTeamNodeProperties()

cartography/models/slack/user.py

@@ -0,0 +1,62 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class SlackUserNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    real_name: PropertyRef = PropertyRef("real_name")
+    display_name: PropertyRef = PropertyRef("profile.display_name")
+    first_name: PropertyRef = PropertyRef("profile.first_name")
+    last_name: PropertyRef = PropertyRef("profile.last_name")
+    profile_title: PropertyRef = PropertyRef("profile.title")
+    profile_phone: PropertyRef = PropertyRef("profile.phone")
+    email: PropertyRef = PropertyRef("profile.email", extra_index=True)
+    deleted: PropertyRef = PropertyRef("deleted")
+    is_admin: PropertyRef = PropertyRef("is_admin")
+    is_owner: PropertyRef = PropertyRef("is_owner")
+    is_restricted: PropertyRef = PropertyRef("is_restricted")
+    is_ultra_restricted: PropertyRef = PropertyRef("is_ultra_restricted")
+    is_bot: PropertyRef = PropertyRef("is_bot")
+    is_app_user: PropertyRef = PropertyRef("is_app_user")
+    is_email_confirmed: PropertyRef = PropertyRef("is_email_confirmed")
+    team: PropertyRef = PropertyRef("profile.team")
+    has_mfa: PropertyRef = PropertyRef("has_mfa")
+
+
+@dataclass(frozen=True)
+class SlackTeamToSlackUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:SlackTeam)-[:RESOURCE]->(:SlackUser)
+class SlackTeamToUserRel(CartographyRelSchema):
+    target_node_label: str = "SlackTeam"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TEAM_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: SlackTeamToSlackUserRelProperties = SlackTeamToSlackUserRelProperties()
+
+
+@dataclass(frozen=True)
+class SlackUserSchema(CartographyNodeSchema):
+    label: str = "SlackUser"
+    properties: SlackUserNodeProperties = SlackUserNodeProperties()
+    sub_resource_relationship: SlackTeamToUserRel = SlackTeamToUserRel()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        ["UserAccount"]
+    )  # UserAccount label is used for ontology mapping

cartography/models/snipeit/asset.py

@@ -0,0 +1,92 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class SnipeitAssetNodeProperties(CartographyNodeProperties):
+    """
+    https://snipe-it.readme.io/reference/hardware-list
+    """
+
+    # Common properties
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+    # SnipeIT specific properties
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    asset_tag: PropertyRef = PropertyRef("asset_tag")
+    assigned_to: PropertyRef = PropertyRef("assigned_to.email")
+    category: PropertyRef = PropertyRef("category.name")
+    company: PropertyRef = PropertyRef("company.name")
+    manufacturer: PropertyRef = PropertyRef("manufacturer.name")
+    model: PropertyRef = PropertyRef("model.name")
+    serial: PropertyRef = PropertyRef("serial", extra_index=True)
+    status: PropertyRef = PropertyRef("status_label.name")
+
+
+###
+# (:SnipeitAsset)<-[:ASSET]-(:SnipeitTenant)
+###
+@dataclass(frozen=True)
+class SnipeitTenantToSnipeitAssetRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SnipeitTenantToSnipeitAssetRel(CartographyRelSchema):
+    target_node_label: str = "SnipeitTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_ASSET"
+    properties: SnipeitTenantToSnipeitAssetRelProperties = (
+        SnipeitTenantToSnipeitAssetRelProperties()
+    )
+
+
+###
+# (:SnipeitUser)-[:HAS_CHECKED_OUT]->(:SnipeitAsset)
+###
+@dataclass(frozen=True)
+class SnipeitUserToSnipeitAssetRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SnipeitUserToSnipeitAssetRel(CartographyRelSchema):
+    target_node_label: str = "SnipeitUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"email": PropertyRef("assigned_to.email")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_CHECKED_OUT"
+    properties: SnipeitUserToSnipeitAssetRelProperties = (
+        SnipeitUserToSnipeitAssetRelProperties()
+    )
+
+
+###
+@dataclass(frozen=True)
+class SnipeitAssetSchema(CartographyNodeSchema):
+    label: str = "SnipeitAsset"  # The label of the node
+    properties: SnipeitAssetNodeProperties = (
+        SnipeitAssetNodeProperties()
+    )  # An object representing all properties
+    sub_resource_relationship: SnipeitTenantToSnipeitAssetRel = (
+        SnipeitTenantToSnipeitAssetRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            SnipeitUserToSnipeitAssetRel(),
+        ],
+    )

cartography/models/snipeit/tenant.py

@@ -0,0 +1,19 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+
+
+@dataclass(frozen=True)
+class SnipeitTenantNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SnipeitTenantSchema(CartographyNodeSchema):
+    label: str = "SnipeitTenant"  # The label of the node
+    properties: SnipeitTenantNodeProperties = (
+        SnipeitTenantNodeProperties()
+    )  # An object representing all properties

cartography/models/snipeit/user.py

@@ -0,0 +1,60 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class SnipeitUserNodeProperties(CartographyNodeProperties):
+    """
+    Ref: https://snipe-it.readme.io/reference/users
+    """
+
+    # Common properties
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+    # SnipeIT specific properties
+    company: PropertyRef = PropertyRef("company_id.name", extra_index=True)
+    email: PropertyRef = PropertyRef("email", extra_index=True)
+    username: PropertyRef = PropertyRef("username")
+
+
+@dataclass(frozen=True)
+class SnipeitTenantToSnipeitUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:SnipeitTenant)-[:HAS_USER]->(:SnipeitUser)
+class SnipeitTenantToSnipeitUserRel(CartographyRelSchema):
+    target_node_label: str = "SnipeitTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_USER"
+    properties: SnipeitTenantToSnipeitUserRelProperties = (
+        SnipeitTenantToSnipeitUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class SnipeitUserSchema(CartographyNodeSchema):
+    label: str = "SnipeitUser"  # The label of the node
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        ["UserAccount"]
+    )  # UserAccount label is used for ontology mapping
+    properties: SnipeitUserNodeProperties = (
+        SnipeitUserNodeProperties()
+    )  # An object representing all properties
+    sub_resource_relationship: SnipeitTenantToSnipeitUserRel = (
+        SnipeitTenantToSnipeitUserRel()
+    )

cartography/models/spacelift/cloudtrailevent.py

@@ -0,0 +1,120 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventNodeProperties(CartographyNodeProperties):
+    """
+    Properties for a CloudTrail Spacelift Event node.
+    Represents a single CloudTrail event from a Spacelift run.
+    One event can affect multiple EC2 instances (e.g., RunInstances creating multiple instances).
+    """
+
+    id: PropertyRef = PropertyRef("id")
+    event_time: PropertyRef = PropertyRef("event_time")
+    event_name: PropertyRef = PropertyRef("event_name")
+    aws_account: PropertyRef = PropertyRef("aws_account")
+    aws_region: PropertyRef = PropertyRef("aws_region")
+    run_id: PropertyRef = PropertyRef("run_id")
+    instance_ids: PropertyRef = PropertyRef("instance_ids")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventToAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventToAccountRel(CartographyRelSchema):
+    target_node_label: str = "SpaceliftAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("spacelift_account_id", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: CloudTrailSpaceliftEventToAccountRelProperties = (
+        CloudTrailSpaceliftEventToAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventToRunRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventToRunRel(CartographyRelSchema):
+    """
+    FROM_RUN relationship from a CloudTrailSpaceliftEvent to the SpaceliftRun that generated it.
+    (:CloudTrailSpaceliftEvent)-[:FROM_RUN]->(:SpaceliftRun)
+    """
+
+    target_node_label: str = "SpaceliftRun"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("run_id"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "FROM_RUN"
+    properties: CloudTrailSpaceliftEventToRunRelProperties = (
+        CloudTrailSpaceliftEventToRunRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventToEC2InstanceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventToEC2InstanceRel(CartographyRelSchema):
+    """
+    AFFECTED relationship from a CloudTrailSpaceliftEvent to EC2Instances it affected.
+    (:CloudTrailSpaceliftEvent)-[:AFFECTED]->(:EC2Instance)
+
+    Uses one-to-many relationship since a single CloudTrail event can affect multiple instances.
+    """
+
+    target_node_label: str = "EC2Instance"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "instanceid": PropertyRef("instance_ids", one_to_many=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "AFFECTED"
+    properties: CloudTrailSpaceliftEventToEC2InstanceRelProperties = (
+        CloudTrailSpaceliftEventToEC2InstanceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class CloudTrailSpaceliftEventSchema(CartographyNodeSchema):
+    """
+    Represents CloudTrail events from Spacelift runs interacting with EC2 instances.
+    """
+
+    label: str = "CloudTrailSpaceliftEvent"
+    properties: CloudTrailSpaceliftEventNodeProperties = (
+        CloudTrailSpaceliftEventNodeProperties()
+    )
+    sub_resource_relationship: CloudTrailSpaceliftEventToAccountRel = (
+        CloudTrailSpaceliftEventToAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            CloudTrailSpaceliftEventToRunRel(),
+            CloudTrailSpaceliftEventToEC2InstanceRel(),
+        ]
+    )

cartography/models/spacelift/run.py

@@ -0,0 +1,162 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class SpaceliftRunNodeProperties(CartographyNodeProperties):
+    """
+    Properties for a Spacelift Run node.
+    """
+
+    id: PropertyRef = PropertyRef("id")
+    run_type: PropertyRef = PropertyRef("run_type")
+    state: PropertyRef = PropertyRef("state")
+    commit_sha: PropertyRef = PropertyRef("commit_sha")
+    branch: PropertyRef = PropertyRef("branch")
+    created_at: PropertyRef = PropertyRef("created_at")
+    stack_id: PropertyRef = PropertyRef("stack_id")
+    triggered_by_user_id: PropertyRef = PropertyRef("triggered_by_user_id")
+    spacelift_account_id: PropertyRef = PropertyRef("spacelift_account_id")
+    affected_instance_ids: PropertyRef = PropertyRef("affected_instance_ids")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToAccountRelProperties(CartographyRelProperties):
+    """
+    Properties for the RESOURCE relationship between a Run and its Account.
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToAccountRel(CartographyRelSchema):
+    """
+    RESOURCE relationship from a Run to its Account.
+    (:SpaceliftRun)<-[:RESOURCE]-(:SpaceliftAccount)
+    """
+
+    target_node_label: str = "SpaceliftAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("spacelift_account_id", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: SpaceliftRunToAccountRelProperties = (
+        SpaceliftRunToAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToStackRelProperties(CartographyRelProperties):
+    """
+    Properties for the GENERATED relationship between a Stack and its Run.
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToStackRel(CartographyRelSchema):
+    """
+    GENERATED relationship from a Run to its parent Stack.
+    (:SpaceliftRun)<-[:GENERATED]-(:SpaceliftStack)
+    """
+
+    target_node_label: str = "SpaceliftStack"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("stack_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "GENERATED"
+    properties: SpaceliftRunToStackRelProperties = SpaceliftRunToStackRelProperties()
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToUserRelProperties(CartographyRelProperties):
+    """
+    Properties for the TRIGGERED relationship between a User and a Run.
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToUserRel(CartographyRelSchema):
+    """
+    TRIGGERED relationship from a Run to the User who triggered it.
+    (:SpaceliftRun)<-[:TRIGGERED]-(:SpaceliftUser)
+    """
+
+    target_node_label: str = "SpaceliftUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("triggered_by_user_id")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "TRIGGERED"
+    properties: SpaceliftRunToUserRelProperties = SpaceliftRunToUserRelProperties()
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToWorkerRelProperties(CartographyRelProperties):
+    """
+    Properties for the EXECUTED relationship between a Worker and a Run.
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToEC2InstanceSimpleRelProperties(CartographyRelProperties):
+    """
+    Properties for the simple AFFECTED relationship between a Run and EC2 Instances.
+    This relationship is created from Spacelift entities API during runs sync.
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class SpaceliftRunToEC2InstanceSimpleRel(CartographyRelSchema):
+    """
+    AFFECTED relationship from a Run to EC2 Instances it manages (from Spacelift entities API).
+    (:SpaceliftRun)-[:AFFECTED]->(:EC2Instance)
+    """
+
+    target_node_label: str = "EC2Instance"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"instanceid": PropertyRef("affected_instance_ids", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "AFFECTED"
+    properties: SpaceliftRunToEC2InstanceSimpleRelProperties = (
+        SpaceliftRunToEC2InstanceSimpleRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class SpaceliftRunSchema(CartographyNodeSchema):
+    """
+    Schema for a Spacelift Run node.
+    """
+
+    label: str = "SpaceliftRun"
+    properties: SpaceliftRunNodeProperties = SpaceliftRunNodeProperties()
+    sub_resource_relationship: SpaceliftRunToAccountRel = SpaceliftRunToAccountRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            SpaceliftRunToStackRel(),
+            SpaceliftRunToUserRel(),
+            SpaceliftRunToEC2InstanceSimpleRel(),
+        ],
+    )