pangea-aws 0.1.0

data/lib/pangea/resources/aws_ram_sharing_with_organization/types.rb

@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+      # Type-safe attributes for AwsRamSharingWithOrganization resources
+      # Manages Resource Access Manager (RAM) resource sharing with AWS Organizations.
+      class RamSharingWithOrganizationAttributes < Pangea::Resources::BaseAttributes
+        attribute? :enable, Resources::Types::Bool.optional
+        
+        # Tags to apply to the resource
+        attribute :tags, Resources::Types::AwsTags.default({}.freeze)
+
+        # Custom validation
+        def self.new(attributes = {})
+          attrs = super(attributes)
+          
+          
+          
+          
+          attrs
+        end
+        
+        # TODO: Add computed properties specific to aws_ram_sharing_with_organization
+
+      end
+    end
+      end
+    end
+  end

data/lib/pangea/resources/aws_rds_cluster/resource.rb

@@ -0,0 +1,186 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/aws_rds_cluster/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # Create an AWS RDS Cluster (Aurora) with type-safe attributes
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] RDS cluster attributes
+      # @return [ResourceReference] Reference object with outputs and computed properties
+      def aws_rds_cluster(name, attributes = {})
+        # Validate attributes using dry-struct
+        cluster_attrs = Types::RdsClusterAttributes.new(attributes)
+        
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:aws_rds_cluster, name) do
+          cluster_identifier cluster_attrs.cluster_identifier if cluster_attrs.cluster_identifier
+          cluster_identifier_prefix cluster_attrs.cluster_identifier_prefix if cluster_attrs.cluster_identifier_prefix
+          
+          # Engine configuration
+          engine cluster_attrs.engine
+          engine_version cluster_attrs.engine_version if cluster_attrs.engine_version
+          engine_mode cluster_attrs.engine_mode if cluster_attrs.engine_mode != "provisioned"
+          
+          # Database configuration
+          database_name cluster_attrs.database_name if cluster_attrs.database_name
+          master_username cluster_attrs.master_username if cluster_attrs.master_username
+          master_password cluster_attrs.master_password if cluster_attrs.master_password
+          manage_master_user_password cluster_attrs.manage_master_user_password if cluster_attrs.manage_master_user_password
+          master_user_secret_kms_key_id cluster_attrs.master_user_secret_kms_key_id if cluster_attrs.master_user_secret_kms_key_id
+          
+          # Network configuration
+          db_subnet_group_name cluster_attrs.db_subnet_group_name if cluster_attrs.db_subnet_group_name
+          vpc_security_group_ids cluster_attrs.vpc_security_group_ids if cluster_attrs.vpc_security_group_ids&.any?
+          availability_zones cluster_attrs.availability_zones if cluster_attrs.availability_zones && cluster_attrs.availability_zones&.any?
+          db_cluster_parameter_group_name cluster_attrs.db_cluster_parameter_group_name if cluster_attrs.db_cluster_parameter_group_name
+          port cluster_attrs.port if cluster_attrs.port
+          
+          # Backup configuration
+          backup_retention_period cluster_attrs.backup_retention_period
+          preferred_backup_window cluster_attrs.preferred_backup_window if cluster_attrs.preferred_backup_window
+          preferred_maintenance_window cluster_attrs.preferred_maintenance_window if cluster_attrs.preferred_maintenance_window
+          copy_tags_to_snapshot cluster_attrs.copy_tags_to_snapshot
+          
+          # Storage configuration
+          storage_encrypted cluster_attrs.storage_encrypted
+          kms_key_id cluster_attrs.kms_key_id if cluster_attrs.kms_key_id
+          storage_type cluster_attrs.storage_type if cluster_attrs.storage_type
+          allocated_storage cluster_attrs.allocated_storage if cluster_attrs.allocated_storage
+          iops cluster_attrs.iops if cluster_attrs.iops
+          
+          # Global cluster
+          global_cluster_identifier cluster_attrs.global_cluster_identifier if cluster_attrs.global_cluster_identifier
+          
+          # Serverless v1 scaling (deprecated)
+          if cluster_attrs.scaling_configuration
+            scaling_configuration do
+              cluster_attrs.scaling_configuration.each do |key, value|
+                public_send(key, value)
+              end
+            end
+          end
+          
+          # Serverless v2 scaling
+          if cluster_attrs.serverless_v2_scaling_configuration
+            serverless_v2_scaling_configuration do
+              min_capacity cluster_attrs.serverless_v2_scaling_configuration.min_capacity
+              max_capacity cluster_attrs.serverless_v2_scaling_configuration.max_capacity
+            end
+          end
+          
+          # Point-in-time restore
+          if cluster_attrs.restore_to_point_in_time
+            restore_to_point_in_time do
+              source_cluster_identifier cluster_attrs.restore_to_point_in_time.source_cluster_identifier
+              restore_to_time cluster_attrs.restore_to_point_in_time.restore_to_time if cluster_attrs.restore_to_point_in_time.restore_to_time
+              use_latest_restorable_time cluster_attrs.restore_to_point_in_time.use_latest_restorable_time if cluster_attrs.restore_to_point_in_time.use_latest_restorable_time
+              restore_type cluster_attrs.restore_to_point_in_time.restore_type if cluster_attrs.restore_to_point_in_time.restore_type
+            end
+          end
+          
+          # Snapshot restore
+          snapshot_identifier cluster_attrs.snapshot_identifier if cluster_attrs.snapshot_identifier
+          source_region cluster_attrs.source_region if cluster_attrs.source_region
+          
+          # Monitoring and logging
+          enabled_cloudwatch_logs_exports cluster_attrs.enabled_cloudwatch_logs_exports if cluster_attrs.enabled_cloudwatch_logs_exports&.any?
+          monitoring_interval cluster_attrs.monitoring_interval if cluster_attrs.monitoring_interval > 0
+          monitoring_role_arn cluster_attrs.monitoring_role_arn if cluster_attrs.monitoring_role_arn
+          performance_insights_enabled cluster_attrs.performance_insights_enabled if cluster_attrs.performance_insights_enabled
+          performance_insights_kms_key_id cluster_attrs.performance_insights_kms_key_id if cluster_attrs.performance_insights_kms_key_id
+          performance_insights_retention_period cluster_attrs.performance_insights_retention_period if cluster_attrs.performance_insights_enabled
+          
+          # Backtrack (Aurora MySQL only)
+          backtrack_window cluster_attrs.backtrack_window if cluster_attrs.backtrack_window
+          
+          # Additional configurations
+          apply_immediately cluster_attrs.apply_immediately if cluster_attrs.apply_immediately
+          auto_minor_version_upgrade cluster_attrs.auto_minor_version_upgrade
+          deletion_protection cluster_attrs.deletion_protection
+          skip_final_snapshot cluster_attrs.skip_final_snapshot
+          final_snapshot_identifier cluster_attrs.final_snapshot_identifier if cluster_attrs.final_snapshot_identifier
+          
+          # Enable HTTP endpoint for Aurora Serverless
+          enable_http_endpoint cluster_attrs.enable_http_endpoint if cluster_attrs.enable_http_endpoint
+          
+          # Apply tags if present
+          if cluster_attrs.tags&.any?
+            tags do
+              cluster_attrs.tags.each do |key, value|
+                public_send(key, value)
+              end
+            end
+          end
+        end
+        
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'aws_rds_cluster',
+          name: name,
+          resource_attributes: cluster_attrs.to_h,
+          outputs: {
+            id: "${aws_rds_cluster.#{name}.id}",
+            arn: "${aws_rds_cluster.#{name}.arn}",
+            cluster_identifier: "${aws_rds_cluster.#{name}.cluster_identifier}",
+            cluster_resource_id: "${aws_rds_cluster.#{name}.cluster_resource_id}",
+            endpoint: "${aws_rds_cluster.#{name}.endpoint}",
+            reader_endpoint: "${aws_rds_cluster.#{name}.reader_endpoint}",
+            engine_version_actual: "${aws_rds_cluster.#{name}.engine_version_actual}",
+            port: "${aws_rds_cluster.#{name}.port}",
+            database_name: "${aws_rds_cluster.#{name}.database_name}",
+            master_username: "${aws_rds_cluster.#{name}.master_username}",
+            master_user_secret: "${aws_rds_cluster.#{name}.master_user_secret}",
+            hosted_zone_id: "${aws_rds_cluster.#{name}.hosted_zone_id}",
+            cluster_members: "${aws_rds_cluster.#{name}.cluster_members}",
+            availability_zones: "${aws_rds_cluster.#{name}.availability_zones}",
+            backup_retention_period: "${aws_rds_cluster.#{name}.backup_retention_period}",
+            preferred_backup_window: "${aws_rds_cluster.#{name}.preferred_backup_window}",
+            preferred_maintenance_window: "${aws_rds_cluster.#{name}.preferred_maintenance_window}",
+            vpc_security_group_ids: "${aws_rds_cluster.#{name}.vpc_security_group_ids}",
+            db_subnet_group_name: "${aws_rds_cluster.#{name}.db_subnet_group_name}",
+            db_cluster_parameter_group_name: "${aws_rds_cluster.#{name}.db_cluster_parameter_group_name}",
+            storage_encrypted: "${aws_rds_cluster.#{name}.storage_encrypted}",
+            kms_key_id: "${aws_rds_cluster.#{name}.kms_key_id}"
+          },
+          computed_properties: {
+            engine_family: cluster_attrs.engine_family,
+            is_mysql: cluster_attrs.is_mysql?,
+            is_postgresql: cluster_attrs.is_postgresql?,
+            is_serverless: cluster_attrs.is_serverless?,
+            is_global: cluster_attrs.is_global?,
+            effective_port: cluster_attrs.effective_port,
+            has_enhanced_monitoring: cluster_attrs.has_enhanced_monitoring?,
+            has_performance_insights: cluster_attrs.has_performance_insights?,
+            has_backtrack: cluster_attrs.has_backtrack?,
+            has_http_endpoint: cluster_attrs.has_http_endpoint?,
+            supports_backtrack: cluster_attrs.supports_backtrack?,
+            supports_global: cluster_attrs.supports_global?,
+            supports_serverless_v2: cluster_attrs.supports_serverless_v2?,
+            default_cloudwatch_logs_exports: cluster_attrs.default_cloudwatch_logs_exports,
+            estimated_monthly_cost: cluster_attrs.estimated_monthly_cost
+          }
+        )
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_rds_cluster/types/attributes.rb

@@ -0,0 +1,84 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        class RdsClusterAttributes < Pangea::Resources::BaseAttributes
+          attribute? :cluster_identifier, Resources::Types::String.optional
+          attribute? :cluster_identifier_prefix, Resources::Types::String.optional
+          attribute? :engine, Resources::Types::String.constrained(included_in: %w[aurora aurora-mysql aurora-postgresql]).optional
+          attribute? :engine_version, Resources::Types::String.optional
+          attribute :engine_mode, Resources::Types::String.default('provisioned').constrained(included_in: %w[provisioned serverless parallelquery global])
+          attribute? :database_name, Resources::Types::String.optional
+          attribute? :master_username, Resources::Types::String.optional
+          attribute? :master_password, Resources::Types::String.optional
+          attribute :manage_master_user_password, Resources::Types::Bool.default(true)
+          attribute? :master_user_secret_kms_key_id, Resources::Types::String.optional
+          attribute? :db_subnet_group_name, Resources::Types::String.optional
+          attribute :vpc_security_group_ids, Resources::Types::Array.of(Resources::Types::String).default([].freeze)
+          attribute :availability_zones, Resources::Types::Array.of(Resources::Types::String).default([].freeze)
+          attribute? :db_cluster_parameter_group_name, Resources::Types::String.optional
+          attribute? :port, Resources::Types::Integer.optional
+          attribute :backup_retention_period, Resources::Types::Integer.default(7).constrained(gteq: 1, lteq: 35)
+          attribute? :preferred_backup_window, Resources::Types::String.optional
+          attribute? :preferred_maintenance_window, Resources::Types::String.optional
+          attribute :copy_tags_to_snapshot, Resources::Types::Bool.default(true)
+          attribute :storage_encrypted, Resources::Types::Bool.default(true)
+          attribute? :kms_key_id, Resources::Types::String.optional
+          attribute? :storage_type, Resources::Types::String.optional
+          attribute? :allocated_storage, Resources::Types::Integer.optional
+          attribute? :iops, Resources::Types::Integer.optional
+          attribute? :global_cluster_identifier, Resources::Types::String.optional
+          attribute :scaling_configuration, Resources::Types::Hash.default({}.freeze)
+          attribute? :serverless_v2_scaling_configuration, ServerlessV2Scaling.optional
+          attribute? :restore_to_point_in_time, RestoreToPointInTime.optional
+          attribute? :snapshot_identifier, Resources::Types::String.optional
+          attribute? :source_region, Resources::Types::String.optional
+          attribute :enabled_cloudwatch_logs_exports, Resources::Types::Array.of(Resources::Types::String).default([].freeze)
+          attribute :monitoring_interval, Resources::Types::Integer.default(0).constrained(gteq: 0, lteq: 60)
+          attribute? :monitoring_role_arn, Resources::Types::String.optional
+          attribute :performance_insights_enabled, Resources::Types::Bool.default(false)
+          attribute? :performance_insights_kms_key_id, Resources::Types::String.optional
+          attribute :performance_insights_retention_period, Resources::Types::Integer.default(7).constrained(gteq: 7, lteq: 731)
+          attribute? :backtrack_window, Resources::Types::Integer.optional.constrained(gteq: 0, lteq: 259_200)
+          attribute :apply_immediately, Resources::Types::Bool.default(false)
+          attribute :auto_minor_version_upgrade, Resources::Types::Bool.default(true)
+          attribute :deletion_protection, Resources::Types::Bool.default(false)
+          attribute :skip_final_snapshot, Resources::Types::Bool.default(false)
+          attribute? :final_snapshot_identifier, Resources::Types::String.optional
+          attribute :enable_http_endpoint, Resources::Types::Bool.default(false)
+          attribute :tags, Resources::Types::AwsTags.default({}.freeze)
+
+          def self.new(attributes = {})
+            attrs = super(attributes)
+            RdsClusterValidation.validate(attrs)
+            attrs
+          end
+
+          def engine_family = engine.include?('mysql') || engine == 'aurora' ? 'mysql' : 'postgresql'
+          def is_mysql? = engine.include?('mysql') || engine == 'aurora'
+          def is_postgresql? = engine.include?('postgresql')
+          def is_serverless? = engine_mode == 'serverless'
+          def is_global? = engine_mode == 'global' || !global_cluster_identifier.nil?
+          def has_enhanced_monitoring? = monitoring_interval.positive?
+          def has_performance_insights? = performance_insights_enabled
+          def has_backtrack? = backtrack_window&.positive?
+          def has_http_endpoint? = enable_http_endpoint
+          def effective_port = port || (is_mysql? ? 3306 : 5432)
+          def default_cloudwatch_logs_exports = is_mysql? ? %w[audit error general slowquery] : %w[postgresql]
+          def supports_backtrack? = is_mysql? && engine_mode == 'provisioned'
+          def supports_global? = engine_mode == 'provisioned'
+          def supports_serverless_v2? = engine_mode == 'provisioned'
+
+          def estimated_monthly_cost
+            return serverless_v2_scaling_configuration ? "#{serverless_v2_scaling_configuration.estimated_hourly_cost_range} (730 hours/month)" : '~$20-200/month (Aurora Serverless v1)' if is_serverless?
+            'Depends on cluster instances (see aws_rds_cluster_instance costs)'
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_rds_cluster/types/configs.rb

@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        module AuroraClusterConfigs
+          def self.mysql_development
+            { engine: 'aurora-mysql', engine_mode: 'provisioned', backup_retention_period: 1, skip_final_snapshot: true,
+              deletion_protection: false, enabled_cloudwatch_logs_exports: %w[slowquery], tags: { Environment: 'development', Engine: 'aurora-mysql' } }
+          end
+
+          def self.mysql_production
+            { engine: 'aurora-mysql', engine_mode: 'provisioned', backup_retention_period: 14, skip_final_snapshot: false,
+              deletion_protection: true, enabled_cloudwatch_logs_exports: %w[audit error general slowquery],
+              performance_insights_enabled: true, monitoring_interval: 60, backtrack_window: 259_200, tags: { Environment: 'production', Engine: 'aurora-mysql' } }
+          end
+
+          def self.postgresql_development
+            { engine: 'aurora-postgresql', engine_mode: 'provisioned', backup_retention_period: 1, skip_final_snapshot: true,
+              deletion_protection: false, enabled_cloudwatch_logs_exports: %w[postgresql], tags: { Environment: 'development', Engine: 'aurora-postgresql' } }
+          end
+
+          def self.postgresql_production
+            { engine: 'aurora-postgresql', engine_mode: 'provisioned', backup_retention_period: 14, skip_final_snapshot: false,
+              deletion_protection: true, enabled_cloudwatch_logs_exports: %w[postgresql],
+              performance_insights_enabled: true, monitoring_interval: 60, tags: { Environment: 'production', Engine: 'aurora-postgresql' } }
+          end
+
+          def self.serverless_v2(min_capacity: 0.5, max_capacity: 16.0)
+            { engine: 'aurora-mysql', engine_mode: 'provisioned',
+              serverless_v2_scaling_configuration: { min_capacity: min_capacity, max_capacity: max_capacity }, tags: { ServerlessVersion: 'v2' } }
+          end
+
+          def self.global_mysql
+            { engine: 'aurora-mysql', engine_mode: 'global', backup_retention_period: 14, deletion_protection: true, tags: { ClusterType: 'global', Engine: 'aurora-mysql' } }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_rds_cluster/types/nested_types.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        class ServerlessV2Scaling < Pangea::Resources::BaseAttributes
+          attribute? :min_capacity, Resources::Types::Float.constrained(gteq: 0.5, lteq: 128).optional
+          attribute? :max_capacity, Resources::Types::Float.constrained(gteq: 0.5, lteq: 128).optional
+
+          def self.new(attributes = {})
+            attrs = super(attributes)
+            raise Dry::Struct::Error, "min_capacity (#{attrs.min_capacity}) cannot be greater than max_capacity (#{attrs.max_capacity})" if attrs.min_capacity > attrs.max_capacity
+            attrs
+          end
+
+          def is_minimal? = min_capacity <= 1.0 && max_capacity <= 2.0
+          def is_high_performance? = max_capacity >= 16.0
+          def scaling_range = max_capacity - min_capacity
+          def estimated_hourly_cost_range = "$#{(min_capacity * 0.12).round(2)}-#{(max_capacity * 0.12).round(2)}/hour"
+        end
+
+        class RestoreToPointInTime < Pangea::Resources::BaseAttributes
+          attribute? :source_cluster_identifier, Resources::Types::String.optional
+          attribute? :restore_to_time, Resources::Types::String.optional
+          attribute :use_latest_restorable_time, Resources::Types::Bool.default(false)
+          attribute? :restore_type, Resources::Types::String.optional.constrained(included_in: %w[full-copy copy-on-write])
+
+          def self.new(attributes = {})
+            attrs = super(attributes)
+            raise Dry::Struct::Error, "Must specify either 'restore_to_time' or set 'use_latest_restorable_time' to true" if !attrs.use_latest_restorable_time && !attrs.restore_to_time
+            raise Dry::Struct::Error, "Cannot specify both 'restore_to_time' and 'use_latest_restorable_time'" if attrs.use_latest_restorable_time && attrs.restore_to_time
+            raise Dry::Struct::Error, 'source_cluster_identifier is required for point-in-time restore' unless attrs.source_cluster_identifier
+            attrs
+          end
+
+          def uses_latest_time? = use_latest_restorable_time
+          def uses_specific_time? = !restore_to_time.nil?
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_rds_cluster/types/validation.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        module RdsClusterValidation
+          def self.validate(attrs)
+            raise Dry::Struct::Error, "Cannot specify both 'cluster_identifier' and 'cluster_identifier_prefix'" if attrs.cluster_identifier && attrs.cluster_identifier_prefix
+            raise Dry::Struct::Error, "Cannot specify both 'master_password' and 'manage_master_user_password'" if attrs.master_password && attrs.manage_master_user_password
+            raise Dry::Struct::Error, "Cannot specify both 'scaling_configuration' and 'serverless_v2_scaling_configuration'" if attrs.scaling_configuration && attrs.serverless_v2_scaling_configuration
+            raise Dry::Struct::Error, "Serverless configurations only valid when engine_mode is 'serverless'" if attrs.engine_mode != 'serverless' && (attrs.scaling_configuration.is_a?(Hash) && !attrs.scaling_configuration.empty? || attrs.enable_http_endpoint)
+            raise Dry::Struct::Error, 'Backtrack is only supported by Aurora MySQL clusters' if attrs.backtrack_window && !attrs.engine.include?('mysql')
+            raise Dry::Struct::Error, "global_cluster_identifier can only be used with engine_mode 'global'" if attrs.global_cluster_identifier && attrs.engine_mode != 'global'
+            raise Dry::Struct::Error, 'monitoring_role_arn is required when monitoring_interval > 0' if attrs.monitoring_interval.positive? && !attrs.monitoring_role_arn
+            raise Dry::Struct::Error, 'performance_insights_retention_period must be at least 7 days when Performance Insights is enabled' if attrs.performance_insights_enabled && attrs.performance_insights_retention_period < 7
+            raise Dry::Struct::Error, 'final_snapshot_identifier is required when skip_final_snapshot is false' if !attrs.skip_final_snapshot && !attrs.final_snapshot_identifier
+            raise Dry::Struct::Error, "iops must be specified when storage_type is 'io1'" if attrs.engine_mode == 'provisioned' && attrs.storage_type == 'io1' && !attrs.iops
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_rds_cluster/types.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+require 'pangea/resources/types'
+require_relative 'types/nested_types'
+require_relative 'types/validation'
+require_relative 'types/attributes'
+require_relative 'types/configs'

data/lib/pangea/resources/aws_rds_cluster_endpoint/resource.rb

@@ -0,0 +1,93 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/aws_rds_cluster_endpoint/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # Create an AWS RDS Cluster Endpoint with type-safe attributes
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] RDS cluster endpoint attributes
+      # @return [ResourceReference] Reference object with outputs and computed properties
+      def aws_rds_cluster_endpoint(name, attributes = {})
+        # Validate attributes using dry-struct
+        endpoint_attrs = Types::RdsClusterEndpointAttributes.new(attributes)
+        
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:aws_rds_cluster_endpoint, name) do
+          cluster_identifier endpoint_attrs.cluster_identifier
+          cluster_endpoint_identifier endpoint_attrs.cluster_endpoint_identifier
+          custom_endpoint_type endpoint_attrs.custom_endpoint_type
+          
+          # Static members configuration
+          if endpoint_attrs.static_members&.any?
+            static_members endpoint_attrs.static_members.map(&:db_instance_identifier)
+          end
+          
+          # Excluded members configuration
+          if endpoint_attrs.excluded_members&.any?
+            excluded_members endpoint_attrs.excluded_members.map(&:db_instance_identifier)
+          end
+          
+          # Apply tags if present
+          if endpoint_attrs.tags&.any?
+            tags do
+              endpoint_attrs.tags.each do |key, value|
+                public_send(key, value)
+              end
+            end
+          end
+        end
+        
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'aws_rds_cluster_endpoint',
+          name: name,
+          resource_attributes: endpoint_attrs.to_h,
+          outputs: {
+            id: "${aws_rds_cluster_endpoint.#{name}.id}",
+            arn: "${aws_rds_cluster_endpoint.#{name}.arn}",
+            cluster_identifier: "${aws_rds_cluster_endpoint.#{name}.cluster_identifier}",
+            cluster_endpoint_identifier: "${aws_rds_cluster_endpoint.#{name}.cluster_endpoint_identifier}",
+            custom_endpoint_type: "${aws_rds_cluster_endpoint.#{name}.custom_endpoint_type}",
+            endpoint: "${aws_rds_cluster_endpoint.#{name}.endpoint}",
+            static_members: "${aws_rds_cluster_endpoint.#{name}.static_members}",
+            excluded_members: "${aws_rds_cluster_endpoint.#{name}.excluded_members}",
+            tags: "${aws_rds_cluster_endpoint.#{name}.tags}",
+            tags_all: "${aws_rds_cluster_endpoint.#{name}.tags_all}"
+          },
+          computed_properties: {
+            is_reader: endpoint_attrs.is_reader?,
+            is_writer: endpoint_attrs.is_writer?,
+            is_any: endpoint_attrs.is_any?,
+            has_static_members: endpoint_attrs.has_static_members?,
+            has_excluded_members: endpoint_attrs.has_excluded_members?,
+            static_member_db_ids: endpoint_attrs.static_member_db_ids,
+            excluded_member_db_ids: endpoint_attrs.excluded_member_db_ids,
+            uses_custom_member_config: endpoint_attrs.uses_custom_member_config?,
+            configuration_summary: endpoint_attrs.configuration_summary,
+            estimated_monthly_cost: endpoint_attrs.estimated_monthly_cost
+          }
+        )
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_rds_cluster_endpoint/types/configs.rb

@@ -0,0 +1,97 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Common RDS Cluster Endpoint configurations
+        module RdsClusterEndpointConfigs
+          # Read-only endpoint for reporting and analytics
+          def self.read_replica_endpoint(cluster_id:, endpoint_id: "read-replica")
+            {
+              cluster_identifier: cluster_id,
+              cluster_endpoint_identifier: endpoint_id,
+              custom_endpoint_type: "READER",
+              tags: { Purpose: "read-replica", Usage: "analytics" }
+            }
+          end
+
+          # Custom reader endpoint excluding specific instances
+          def self.analytics_endpoint(cluster_id:, excluded_db_instances: [], endpoint_id: "analytics")
+            excluded_members = excluded_db_instances.map { |db_id| { db_instance_identifier: db_id } }
+
+            {
+              cluster_identifier: cluster_id,
+              cluster_endpoint_identifier: endpoint_id,
+              custom_endpoint_type: "READER",
+              excluded_members: excluded_members,
+              tags: { Purpose: "analytics", Type: "custom-reader" }
+            }
+          end
+
+          # Static reader endpoint with specific instances
+          def self.dedicated_reader_endpoint(cluster_id:, static_db_instances:, endpoint_id: "dedicated-reader")
+            static_members = static_db_instances.map { |db_id| { db_instance_identifier: db_id } }
+
+            {
+              cluster_identifier: cluster_id,
+              cluster_endpoint_identifier: endpoint_id,
+              custom_endpoint_type: "READER",
+              static_members: static_members,
+              tags: { Purpose: "dedicated-reader", Type: "static-members" }
+            }
+          end
+
+          # Any endpoint for connection pooling
+          def self.pooled_endpoint(cluster_id:, endpoint_id: "pooled")
+            {
+              cluster_identifier: cluster_id,
+              cluster_endpoint_identifier: endpoint_id,
+              custom_endpoint_type: "ANY",
+              tags: { Purpose: "connection-pooling", Type: "any" }
+            }
+          end
+
+          # Development/testing endpoint
+          def self.development_endpoint(cluster_id:, endpoint_id: "dev")
+            {
+              cluster_identifier: cluster_id,
+              cluster_endpoint_identifier: endpoint_id,
+              custom_endpoint_type: "READER",
+              tags: { Environment: "development", Purpose: "testing" }
+            }
+          end
+
+          # Regional failover endpoint
+          def self.failover_endpoint(cluster_id:, excluded_primary: nil, endpoint_id: "failover")
+            config = {
+              cluster_identifier: cluster_id,
+              cluster_endpoint_identifier: endpoint_id,
+              custom_endpoint_type: "READER",
+              tags: { Purpose: "failover", Type: "disaster-recovery" }
+            }
+
+            if excluded_primary
+              config[:excluded_members] = [{ db_instance_identifier: excluded_primary }]
+            end
+
+            config
+          end
+        end
+      end
+    end
+  end
+end