REST API endpoints for alerts — GET /alerts

GET /api/v1/alerts
Authorization: Bearer <token>

{
  "data": [
    {
      "id": 1,
      "title": "S3 bucket made public",
      "type": "security",
      "severity": "critical",
      "status": "open",
      "resource_id": 5,
      "resource_name": "data-lake-bucket",
      "created_at": "2024-01-15T14:35:00Z"
    }
  ],
  "meta": { "total": 7, "page": 1, "per_page": 20 }
}

GET /api/v1/alerts/{id}
Authorization: Bearer <token>

POST /api/v1/alerts
Authorization: Bearer <token>
Content-Type: application/json

{
  "title": "Manual security review required",
  "type": "security",
  "severity": "high",
  "resource_id": 15,
  "description": "Audit requested by CISO"
}

POST /api/v1/alerts/{id}/acknowledge
Authorization: Bearer <token>

POST /api/v1/alerts/{id}/resolve
Authorization: Bearer <token>
Content-Type: application/json

{
  "resolution_note": "Reverted security group change"
}

POST /api/v1/alerts/bulk
Authorization: Bearer <token>
Content-Type: application/json

{
  "ids": [1, 2, 3],
  "action": "acknowledge"
}