# Regulatory scope lens (PCI / HIPAA / SOC touchpoints)
#
# Customize provider values and prefixes for your compliance framework.
# provider values become summary.by_provider keys in JSON output.
definition:
  language:
    go:
      - name: "AWS IAM identity APIs"
        prefix: "github.com/aws/aws-sdk-go-v2/service/iam"
        provider: IDENTITY
      - name: "AWS Cognito identity"
        prefix: "github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider"
        provider: IDENTITY
      - name: "AWS KMS crypto APIs"
        prefix: "github.com/aws/aws-sdk-go-v2/service/kms"
        provider: CRYPTO
      - name: "Payment-adjacent SDK (example — replace with your PSP)"
        prefix: "github.com/stripe/stripe-go"
        provider: PAYMENT
      - name: "Internal PII handler (example)"
        prefix: "github.com/acme/pii/"
        provider: PII
    java:
      - name: "AWS IAM identity APIs"
        prefix: "software.amazon.awssdk.services.iam"
        provider: IDENTITY
      - name: "AWS Cognito identity"
        prefix: "software.amazon.awssdk.services.cognitoidentityprovider"
        provider: IDENTITY
      - name: "AWS KMS crypto APIs"
        prefix: "software.amazon.awssdk.services.kms"
        provider: CRYPTO
      - name: "Stripe Java SDK"
        prefix: "com.stripe."
        provider: PAYMENT
      - name: "Spring Security auth"
        prefix: "org.springframework.security."
        provider: IDENTITY
    python:
      - name: "Stripe Python SDK"
        prefix: "stripe."
        provider: PAYMENT
        rule: "stripe\\.(?<operation>[a-zA-Z0-9_]+)"
      - name: "Cryptography library"
        prefix: "cryptography."
        provider: CRYPTO
        rule: "cryptography\\.(?<operation>[a-zA-Z0-9_]+)"
    javascript:
      - name: "AWS IAM client v3"
        prefix: "@aws-sdk/client-iam"
        provider: IDENTITY
      - name: "AWS KMS client v3"
        prefix: "@aws-sdk/client-kms"
        provider: CRYPTO
      - name: "Stripe Node SDK"
        prefix: "stripe."
        provider: PAYMENT
        rule: "stripe\\.(?<operation>[a-zA-Z0-9_]+)"

  providers:
    IDENTITY:
      servicenameMapping:
        "iam": "iam"
        "cognito": "cognito"
    CRYPTO:
      servicenameMapping:
        "kms": "kms"
    PAYMENT:
      servicenameMapping:
        "stripe": "stripe"
    PII:
      servicenameMapping: {}
