REST API endpoints for compliance assessments

GET /api/v1/compliance/frameworks
Authorization: Bearer <token>

[
  {
    "id": "cis-aws",
    "name": "CIS AWS Foundations Benchmark",
    "version": "2.0",
    "enabled": true
  },
  {
    "id": "soc2",
    "name": "SOC 2 Type II",
    "version": null,
    "enabled": false
  }
]

POST /api/v1/compliance/frameworks/{framework_id}/enable
Authorization: Bearer <token>
Content-Type: application/json

{
  "provider_ids": [1, 2]
}

DELETE /api/v1/compliance/frameworks/{framework_id}/enable
Authorization: Bearer <token>

POST /api/v1/compliance/assess
Authorization: Bearer <token>
Content-Type: application/json

{
  "framework_id": "cis-aws",
  "provider_id": 1
}

{
  "job_id": 67,
  "status": "running"
}

GET /api/v1/compliance/assessments
Authorization: Bearer <token>

GET /api/v1/compliance/assessments/{id}
Authorization: Bearer <token>

{
  "id": 1,
  "framework_id": "cis-aws",
  "provider_id": 1,
  "score": 0.724,
  "total_controls": 58,
  "passed": 42,
  "failed": 16,
  "created_at": "2024-01-15T04:00:00Z",
  "controls": [
    {
      "id": "cis-aws-2.1.1",
      "category": "Storage",
      "title": "Ensure S3 encryption-at-rest",
      "severity": "high",
      "status": "failed",
      "failed_resources": [
        { "resource_id": 5, "name": "data-lake-bucket" }
      ]
    }
  ]
}

GET /api/v1/compliance/assessments/{id}/export?format=pdf
Authorization: Bearer <token>