#!/usr/bin/env python

"""
    publish_metric_data.py:
    Lambda function that publishes the AWS Inspector scan findings
    of an AMI lifecycle generated EC2 instance to CloudWatch metrics
    as part of the AMI lifecycle VULNERABILITY_SCANS State Machine.
"""

import datetime
import json
import logging
import traceback

import boto3

from ..services.constants_service import ConstantsService
from ..services.error_notifier_service import ErrorNotifierService

# constants
OPERATOR = "VULNERABILITY_SCAN_PUBLISH_METRIC_DATA"
TEMPLATE_FILE = "state_machine_error.template"

# boto 3
cloudwatch_client = boto3.client('cloudwatch')

# services
error_notifier_service = ErrorNotifierService()
constants_service = ConstantsService()

def lambda_handler(event: dict, context: dict) -> dict:
    # set logging
    logger = logging.getLogger()
    logger.setLevel(logging.DEBUG)

    # print the event details
    logger.debug(json.dumps(event, indent=2))

    try:

        # get details from previous stage
        vulnerability_severities = event['vulnerability_scans_operation']['output']['vulnerability_severities']
        vulnerability_scan_ami_id = event['vulnerability_scans_operation']['input']["ami_id"]

        dimensions = [
            {
                "Name": "AmiId",
                "Value": vulnerability_scan_ami_id
            }
        ]

        metric_data = [
            {
                "MetricName": "Severity_INFORMATIONAL",
                "Value": int(vulnerability_severities['INFORMATIONAL']),
                "Unit": "Count",
                "Dimensions": dimensions
            },
            {
                "MetricName": "Severity_LOW",
                "Value": int(vulnerability_severities['LOW']),
                "Unit": "Count",
                "Dimensions": dimensions
            },
            {
                "MetricName": "Severity_MEDIUM",
                "Value": int(vulnerability_severities['MEDIUM']),
                "Unit": "Count",
                "Dimensions": dimensions
            },
            {
                "MetricName": "Severity_HIGH",
                "Value": int(vulnerability_severities['HIGH']),
                "Unit": "Count",
                "Dimensions": dimensions
            },
            {
                "MetricName": "Severity_CRITICAL",
                "Value": int(vulnerability_severities['CRITICAL']),
                "Unit": "Count",
                "Dimensions": dimensions
            },
            {
                "MetricName": "Severity_UNTRIAGED",
                "Value": int(vulnerability_severities['UNTRIAGED']),
                "Unit": "Count",
                "Dimensions": dimensions
            }
        ]

        response = cloudwatch_client.put_metric_data(
            Namespace='AmiVulnerabilityScanFindings',
            MetricData=metric_data
        )

        # set task outputs
        event['vulnerability_scans_operation']['output']['status'] = constants_service.STATUS_COMPLETED
        event['vulnerability_scans_operation']['output']['hasError'] = False

        return {
            'statusCode': 200,
            'body': event,
            'headers': {'Content-Type': 'application/json'}
        }
        
    except Exception as e:
        
        traceback.print_exception(type(e), value=e, tb=e.__traceback__)
        stack_trace = traceback.format_exc()

        logger.error(f'Error in executing {OPERATOR} operation: {str(e)}')

        event['vulnerability_scans_operation']['output']['status'] = constants_service.STATUS_ERROR
        event['vulnerability_scans_operation']['output']['hasError'] = True
        event['vulnerability_scans_operation']['output']['errorMessage'] = str(e)
        
        # create error payload to send to the api
        error_payload = {}
        error_payload['name'] = constants_service.EVENT_BUILD_AMI
        error_payload['status'] = constants_service.STATUS_ERROR
        error_payload['status_date'] = datetime.datetime.now().strftime("%m/%d/%Y, %H:%M:%S")
        
        stack_tag = event['vulnerability_scans_operation']['input']['cfn_stack_name']
        lifecycle_id = event['vulnerability_scans_operation']['input']['lifecycle_id']

        properties = {
            'task': OPERATOR,
            "error": str(e),
            "stack_trace": stack_trace,
            "stack_tag": stack_tag,
            "lifecycle_id": lifecycle_id
        }

        error_payload['properties'] = properties

        subject = f"ERROR in {OPERATOR} state machine event for {stack_tag}"

        try:
            error_notifier_service.send_notification(
                subject=subject,
                template_name=TEMPLATE_FILE,
                template_attributes=error_payload,
                error_message=str(e),
                stack_trace=stack_trace
            )
        except Exception as err:
            logger.error(f"An error occurred attempting to send error notification: {str(err)}")

        return {
            'statusCode': 500,
            'body': event,
            'headers': {'Content-Type': 'application/json'}
        }