pangea-aws 0.1.0

data/lib/pangea/resources/aws_sagemaker_notebook_instance/resource.rb

@@ -0,0 +1,137 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/aws_sagemaker_notebook_instance/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # SageMaker Notebook Instance resource for managed Jupyter notebook environments
+      # 
+      # Notebook instances provide fully managed Jupyter notebook servers for data exploration,
+      # model development, and machine learning experimentation. They offer persistent storage,
+      # pre-installed ML frameworks, and integration with other SageMaker services.
+      #
+      # @example Basic notebook instance for development
+      #   aws_sagemaker_notebook_instance(:ml_notebook, {
+      #     instance_name: "ml-development-notebook",
+      #     instance_type: "ml.t3.medium",
+      #     role_arn: notebook_role_ref.arn
+      #   })
+      #
+      # @example Secure notebook instance in VPC with custom configuration
+      #   aws_sagemaker_notebook_instance(:secure_notebook, {
+      #     instance_name: "secure-ml-notebook",
+      #     instance_type: "ml.m5.xlarge",
+      #     role_arn: notebook_role_ref.arn,
+      #     subnet_id: private_subnet_ref.id,
+      #     security_group_ids: [notebook_sg_ref.id],
+      #     direct_internet_access: "Disabled",
+      #     kms_key_id: kms_key_ref.arn,
+      #     volume_size_in_gb: 100,
+      #     volume_type: "gp3",
+      #     root_access: "Disabled",
+      #     platform_identifier: "notebook-al2-v2",
+      #     instance_metadata_service_configuration: {
+      #       minimum_instance_metadata_service_version: "2"
+      #     }
+      #   })
+      #
+      # @example GPU-enabled notebook with accelerators and code repositories
+      #   aws_sagemaker_notebook_instance(:gpu_notebook, {
+      #     instance_name: "gpu-ml-notebook",
+      #     instance_type: "ml.p3.2xlarge",
+      #     role_arn: notebook_role_ref.arn,
+      #     accelerator_types: ["ml.eia2.medium"],
+      #     volume_size_in_gb: 200,
+      #     volume_type: "gp3",
+      #     lifecycle_config_name: gpu_lifecycle_config_ref.name,
+      #     default_code_repository: "https://github.com/company/ml-experiments",
+      #     additional_code_repositories: [
+      #       "https://github.com/company/ml-utils",
+      #       "https://github.com/company/datasets"
+      #     ],
+      #     tags: {
+      #       Environment: "development",
+      #       Team: "ml-research",
+      #       CostCenter: "r-and-d",
+      #       GPU: "enabled"
+      #     }
+      #   })
+      SageMakerNotebookInstance = Struct.new(:name, :attributes, keyword_init: true)
+      class SageMakerNotebookInstance
+        def self.resource_type
+          'aws_sagemaker_notebook_instance'
+        end
+        
+        def self.attribute_struct
+          Types::SageMakerNotebookInstanceAttributes
+        end
+      end
+      
+      # Resource function for aws_sagemaker_notebook_instance
+      # 
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] The resource attributes
+      # @return [ResourceReference] Reference to the created resource
+      def aws_sagemaker_notebook_instance(name, attributes)
+        resource = SageMakerNotebookInstance.new(
+          name: name,
+          attributes: attributes
+        )
+        
+        add_resource(resource)
+        
+        # Return resource reference with computed attributes
+        ResourceReference.new(
+          name: name,
+          type: :aws_sagemaker_notebook_instance,
+          attributes: {
+            # Direct attributes
+            id: "${aws_sagemaker_notebook_instance.#{name}.id}",
+            arn: "${aws_sagemaker_notebook_instance.#{name}.arn}",
+            name: "${aws_sagemaker_notebook_instance.#{name}.name}",
+            instance_name: "${aws_sagemaker_notebook_instance.#{name}.instance_name}",
+            instance_type: "${aws_sagemaker_notebook_instance.#{name}.instance_type}",
+            role_arn: "${aws_sagemaker_notebook_instance.#{name}.role_arn}",
+            
+            # Computed attributes
+            url: "${aws_sagemaker_notebook_instance.#{name}.url}",
+            network_interface_id: "${aws_sagemaker_notebook_instance.#{name}.network_interface_id}",
+            security_groups: "${aws_sagemaker_notebook_instance.#{name}.security_groups}",
+            
+            # Helper attributes for integration
+            notebook_instance_name: "${aws_sagemaker_notebook_instance.#{name}.instance_name}",
+            jupyter_url: "${aws_sagemaker_notebook_instance.#{name}.url}",
+            is_gpu_instance: attributes[:instance_type]&.start_with?('ml.p') || false,
+            has_accelerators: attributes[:accelerator_types]&.any? || false,
+            has_vpc_config: !attributes[:subnet_id].nil?,
+            has_internet_access: attributes[:direct_internet_access] != 'Disabled',
+            storage_size_gb: attributes[:volume_size_in_gb] || 20,
+            uses_kms_encryption: !attributes[:kms_key_id].nil?,
+            
+            # Security attributes
+            root_access_disabled: attributes[:root_access] == 'Disabled',
+            uses_latest_platform: attributes[:platform_identifier] == 'notebook-al2-v2',
+            imdsv2_enforced: attributes.dig(:instance_metadata_service_configuration, :minimum_instance_metadata_service_version) == '2'
+          }
+        )
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_sagemaker_notebook_instance/types/helpers.rb

@@ -0,0 +1,73 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module SageMakerNotebookInstance
+        # Helper methods for SageMaker Notebook Instance attributes
+        module Helpers
+          def is_gpu_instance?
+            instance_type.start_with?('ml.p')
+          end
+
+          def is_compute_optimized?
+            instance_type.start_with?('ml.c')
+          end
+
+          def is_memory_optimized?
+            instance_type.start_with?('ml.r')
+          end
+
+          def is_burstable?
+            instance_type.start_with?('ml.t')
+          end
+
+          def has_vpc_configuration?
+            !subnet_id.nil?
+          end
+
+          def has_internet_access?
+            direct_internet_access == 'Enabled'
+          end
+
+          def has_accelerators?
+            accelerator_types&.any?
+          end
+
+          def uses_custom_kms_key?
+            !kms_key_id.nil?
+          end
+
+          def has_lifecycle_config?
+            !lifecycle_config_name.nil?
+          end
+
+          def has_code_repositories?
+            !default_code_repository.nil? || additional_code_repositories&.any?
+          end
+
+          def total_code_repositories
+            count = 0
+            count += 1 if default_code_repository
+            count += additional_code_repositories.size if additional_code_repositories
+            count
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_sagemaker_notebook_instance/types/pricing.rb

@@ -0,0 +1,118 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module SageMakerNotebookInstance
+        # Pricing calculations for SageMaker Notebook Instance
+        module Pricing
+          ACCELERATOR_COSTS = {
+            'ml.eia1.medium' => 0.13,
+            'ml.eia1.large' => 0.26,
+            'ml.eia1.xlarge' => 0.52,
+            'ml.eia2.medium' => 0.14,
+            'ml.eia2.large' => 0.28,
+            'ml.eia2.xlarge' => 0.56
+          }.freeze
+
+          T_INSTANCE_COSTS = {
+            'ml.t2.medium' => 0.0464,
+            'ml.t2.large' => 0.0928,
+            'ml.t2.xlarge' => 0.1856,
+            'ml.t2.2xlarge' => 0.3712,
+            'ml.t3.medium' => 0.0548,
+            'ml.t3.large' => 0.1096,
+            'ml.t3.xlarge' => 0.2192,
+            'ml.t3.2xlarge' => 0.4384
+          }.freeze
+
+          P_INSTANCE_COSTS = {
+            'ml.p2.xlarge' => 0.9,
+            'ml.p2.8xlarge' => 7.2,
+            'ml.p2.16xlarge' => 14.4,
+            'ml.p3.2xlarge' => 3.06,
+            'ml.p3.8xlarge' => 12.24,
+            'ml.p3.16xlarge' => 24.48
+          }.freeze
+
+          STORAGE_COST_PER_GB = 0.10
+          HOURS_PER_MONTH = 24 * 30
+
+          def estimated_monthly_cost
+            instance_cost = get_instance_cost_per_hour * HOURS_PER_MONTH
+            storage_cost = volume_size_in_gb * STORAGE_COST_PER_GB
+            accelerator_cost = get_accelerator_cost_per_hour * HOURS_PER_MONTH
+
+            instance_cost + storage_cost + accelerator_cost
+          end
+
+          def get_instance_cost_per_hour
+            case instance_type
+            when /^ml\.t/
+              T_INSTANCE_COSTS[instance_type] || 0.1
+            when /^ml\.m/
+              compute_m_instance_cost
+            when /^ml\.c/
+              compute_c_instance_cost
+            when /^ml\.r/
+              compute_r_instance_cost
+            when /^ml\.p/
+              P_INSTANCE_COSTS[instance_type] || 1.0
+            else
+              0.1
+            end
+          end
+
+          def get_accelerator_cost_per_hour
+            return 0.0 unless accelerator_types&.any?
+
+            accelerator_types.sum { |acc| ACCELERATOR_COSTS[acc] || 0.0 }
+          end
+
+          private
+
+          def compute_m_instance_cost
+            case instance_type
+            when /xl/ then instance_type.include?('2xl') ? 0.8 : 0.4
+            when /4xl/ then 1.6
+            when /8xl/ then 3.2
+            else 0.2
+            end
+          end
+
+          def compute_c_instance_cost
+            case instance_type
+            when /xl/ then instance_type.include?('2xl') ? 0.6 : 0.3
+            when /4xl/ then 1.2
+            when /8xl/ then 2.4
+            else 0.15
+            end
+          end
+
+          def compute_r_instance_cost
+            case instance_type
+            when /xl/ then instance_type.include?('2xl') ? 1.0 : 0.5
+            when /4xl/ then 2.0
+            when /8xl/ then 4.0
+            else 0.25
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_sagemaker_notebook_instance/types/security.rb

@@ -0,0 +1,81 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module SageMakerNotebookInstance
+        # Security and compliance methods for SageMaker Notebook Instance
+        module Security
+          LATEST_PLATFORM = 'notebook-al2-v2'
+          MAX_SECURITY_SCORE = 100
+
+          def security_score
+            score = 0
+            score += 20 if has_vpc_configuration? && !has_internet_access?
+            score += 15 if uses_custom_kms_key?
+            score += 10 if root_access == 'Disabled'
+            score += 10 if has_lifecycle_config?
+            score += 10 if platform_identifier == LATEST_PLATFORM
+            score += 15 if imds_v2_required?
+            score += 5 if security_group_ids&.any?
+
+            [score, MAX_SECURITY_SCORE].min
+          end
+
+          def compliance_status
+            issues = collect_compliance_issues
+
+            {
+              status: issues.empty? ? 'compliant' : 'needs_attention',
+              issues: issues
+            }
+          end
+
+          def instance_capabilities
+            {
+              instance_type: instance_type,
+              gpu_enabled: is_gpu_instance?,
+              compute_optimized: is_compute_optimized?,
+              memory_optimized: is_memory_optimized?,
+              burstable: is_burstable?,
+              accelerators: accelerator_types || [],
+              storage_gb: volume_size_in_gb,
+              estimated_monthly_cost: estimated_monthly_cost
+            }
+          end
+
+          private
+
+          def imds_v2_required?
+            instance_metadata_service_configuration&.dig(:minimum_instance_metadata_service_version) == '2'
+          end
+
+          def collect_compliance_issues
+            issues = []
+            issues << 'Notebook has direct internet access' if has_internet_access? && has_vpc_configuration?
+            issues << 'No custom KMS key for encryption' unless uses_custom_kms_key?
+            issues << 'Root access is enabled' if root_access == 'Enabled'
+            issues << 'No lifecycle configuration specified' unless has_lifecycle_config?
+            issues << 'Using older platform identifier' if platform_identifier && platform_identifier != LATEST_PLATFORM
+            issues << 'Instance metadata service v1 allowed' unless imds_v2_required?
+            issues
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_sagemaker_notebook_instance/types/validators.rb

@@ -0,0 +1,97 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module SageMakerNotebookInstance
+        # Validation logic for SageMaker Notebook Instance attributes
+        module Validators
+          RESERVED_NAMES = %w[sagemaker aws amazon].freeze
+          INCOMPATIBLE_ACCELERATOR_PREFIXES = %w[ml.t ml.m4 ml.c4].freeze
+          REPO_URL_PATTERN = /\A(https:\/\/github\.com\/|https:\/\/git-codecommit\.[a-z0-9-]+\.amazonaws\.com\/|arn:aws:sagemaker:)/.freeze
+          KMS_KEY_PATTERN = /\A(arn:aws:kms:|alias\/|[a-f0-9-]{36})/.freeze
+
+          def self.validate!(attrs)
+            validate_instance_name(attrs[:instance_name])
+            validate_vpc_configuration(attrs[:subnet_id], attrs[:direct_internet_access])
+            validate_security_groups(attrs[:security_group_ids], attrs[:subnet_id])
+            validate_kms_key(attrs[:kms_key_id])
+            validate_accelerator_compatibility(attrs[:accelerator_types], attrs[:instance_type])
+            validate_code_repositories(attrs[:default_code_repository], attrs[:additional_code_repositories])
+            validate_volume_configuration(attrs[:volume_type], attrs[:volume_size_in_gb])
+          end
+
+          def self.validate_instance_name(name)
+            return unless name
+
+            if RESERVED_NAMES.any? { |reserved| name.downcase.include?(reserved) }
+              raise Dry::Struct::Error, "Instance name cannot contain reserved words: #{RESERVED_NAMES.join(', ')}"
+            end
+          end
+
+          def self.validate_vpc_configuration(subnet_id, direct_internet_access)
+            if subnet_id.nil? && direct_internet_access == 'Disabled'
+              raise Dry::Struct::Error, 'direct_internet_access cannot be Disabled without specifying subnet_id'
+            end
+          end
+
+          def self.validate_security_groups(security_group_ids, subnet_id)
+            if security_group_ids&.any? && subnet_id.nil?
+              raise Dry::Struct::Error, 'security_group_ids can only be specified when subnet_id is provided'
+            end
+          end
+
+          def self.validate_kms_key(kms_key_id)
+            return unless kms_key_id
+            return if kms_key_id.match?(KMS_KEY_PATTERN)
+
+            raise Dry::Struct::Error, 'kms_key_id must be a valid KMS key ARN, alias, or key ID'
+          end
+
+          def self.validate_accelerator_compatibility(accelerator_types, instance_type)
+            return unless accelerator_types&.any?
+
+            if INCOMPATIBLE_ACCELERATOR_PREFIXES.any? { |prefix| instance_type&.start_with?(prefix) }
+              raise Dry::Struct::Error, "Elastic Inference accelerators are not compatible with #{instance_type}"
+            end
+          end
+
+          def self.validate_code_repositories(default_repo, additional_repos)
+            all_repos = []
+            all_repos << default_repo if default_repo
+            all_repos.concat(additional_repos || [])
+
+            all_repos.each do |repo|
+              next if repo.match?(REPO_URL_PATTERN)
+
+              raise Dry::Struct::Error, 'Code repository must be a GitHub URL, CodeCommit URL, or SageMaker Git repo ARN'
+            end
+          end
+
+          def self.validate_volume_configuration(volume_type, volume_size)
+            return unless %w[io1 io2].include?(volume_type)
+
+            volume_size ||= 20
+            return unless volume_size < 10
+
+            raise Dry::Struct::Error, "Volume size must be at least 10GB for #{volume_type} volume type"
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_sagemaker_notebook_instance/types.rb

@@ -0,0 +1,104 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'dry-struct'
+require 'pangea/resources/types'
+require_relative 'types/validators'
+require_relative 'types/pricing'
+require_relative 'types/helpers'
+require_relative 'types/security'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # SageMaker Notebook Instance types
+        SageMakerNotebookInstanceType = Resources::Types::String.constrained(included_in: ['ml.t2.medium', 'ml.t2.large', 'ml.t2.xlarge', 'ml.t2.2xlarge',
+          'ml.t3.medium', 'ml.t3.large', 'ml.t3.xlarge', 'ml.t3.2xlarge',
+          'ml.m4.xlarge', 'ml.m4.2xlarge', 'ml.m4.4xlarge', 'ml.m4.10xlarge', 'ml.m4.16xlarge',
+          'ml.m5.xlarge', 'ml.m5.2xlarge', 'ml.m5.4xlarge', 'ml.m5.8xlarge', 'ml.m5.12xlarge', 'ml.m5.24xlarge',
+          'ml.c4.xlarge', 'ml.c4.2xlarge', 'ml.c4.4xlarge', 'ml.c4.8xlarge',
+          'ml.c5.xlarge', 'ml.c5.2xlarge', 'ml.c5.4xlarge', 'ml.c5.9xlarge', 'ml.c5.18xlarge',
+          'ml.c5d.xlarge', 'ml.c5d.2xlarge', 'ml.c5d.4xlarge', 'ml.c5d.9xlarge', 'ml.c5d.18xlarge',
+          'ml.r4.xlarge', 'ml.r4.2xlarge', 'ml.r4.4xlarge', 'ml.r4.8xlarge', 'ml.r4.16xlarge',
+          'ml.r5.xlarge', 'ml.r5.2xlarge', 'ml.r5.4xlarge', 'ml.r5.8xlarge', 'ml.r5.12xlarge', 'ml.r5.24xlarge',
+          'ml.p2.xlarge', 'ml.p2.8xlarge', 'ml.p2.16xlarge',
+          'ml.p3.2xlarge', 'ml.p3.8xlarge', 'ml.p3.16xlarge'])
+
+        # SageMaker Notebook Instance volume types
+        SageMakerNotebookVolumeType = Resources::Types::String.constrained(included_in: ['gp2', 'gp3', 'io1', 'io2'])
+
+        # SageMaker Notebook Instance platform identifier
+        SageMakerNotebookPlatformIdentifier = Resources::Types::String.constrained(included_in: ['notebook-al1-v1', 'notebook-al2-v1', 'notebook-al2-v2'])
+
+        # SageMaker Notebook Instance root access
+        SageMakerNotebookRootAccess = Resources::Types::String.constrained(included_in: ['Enabled', 'Disabled']).default('Enabled')
+
+        # SageMaker Notebook Instance status
+        SageMakerNotebookInstanceStatus = Resources::Types::String.constrained(included_in: ['Pending', 'InService', 'Stopping', 'Stopped', 'Failed', 'Deleting', 'Updating'])
+
+        # Accelerator types enum
+        SageMakerAcceleratorType = Resources::Types::String.constrained(included_in: ['ml.eia1.medium', 'ml.eia1.large', 'ml.eia1.xlarge',
+          'ml.eia2.medium', 'ml.eia2.large', 'ml.eia2.xlarge'])
+
+        # SageMaker Notebook Instance attributes with comprehensive validation
+        class SageMakerNotebookInstanceAttributes < Pangea::Resources::BaseAttributes
+          include SageMakerNotebookInstance::Pricing
+          include SageMakerNotebookInstance::Helpers
+          include SageMakerNotebookInstance::Security
+
+          transform_keys(&:to_sym)
+
+          # Required attributes
+          attribute? :instance_name, Resources::Types::String.constrained(
+            min_size: 1,
+            max_size: 63,
+            format: /\A[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9]\z/
+          )
+          attribute? :instance_type, SageMakerNotebookInstanceType.optional
+          attribute? :role_arn, Resources::Types::String.constrained(
+            format: /\Aarn:aws:iam::\d{12}:role\/[a-zA-Z0-9_+=,.@-]+\z/
+          )
+
+          # Optional attributes
+          attribute? :subnet_id, Resources::Types::String.optional
+          attribute :security_group_ids, Resources::Types::Array.of(Resources::Types::String).default([].freeze)
+          attribute? :kms_key_id, Resources::Types::String.optional
+          attribute? :lifecycle_config_name, Resources::Types::String.optional
+          attribute :direct_internet_access, Resources::Types::String.constrained(included_in: ['Enabled', 'Disabled']).default('Enabled')
+          attribute :volume_size_in_gb, Resources::Types::Integer.constrained(gteq: 5, lteq: 16384).default(20)
+          attribute :volume_type, SageMakerNotebookVolumeType.default('gp2')
+          attribute :accelerator_types, Resources::Types::Array.of(SageMakerAcceleratorType).default([].freeze)
+          attribute? :default_code_repository, Resources::Types::String.optional
+          attribute :additional_code_repositories, Resources::Types::Array.of(Resources::Types::String).default([].freeze)
+          attribute? :root_access, SageMakerNotebookRootAccess.optional
+          attribute? :platform_identifier, SageMakerNotebookPlatformIdentifier.optional
+          attribute? :instance_metadata_service_configuration, Resources::Types::Hash.schema(
+            minimum_instance_metadata_service_version: Resources::Types::String.constrained(included_in: ['1', '2']).default('1')
+          ).lax.optional
+          attribute? :tags, Resources::Types::AwsTags.optional
+
+          # Custom validation for SageMaker Notebook Instance
+          def self.new(attributes)
+            attrs = attributes.is_a?(::Hash) ? attributes : {}
+            SageMakerNotebookInstance::Validators.validate!(attrs)
+            super(attrs)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_sagemaker_pipeline/resource.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/aws_sagemaker_pipeline/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # SageMaker Pipeline resource for ML workflow orchestration
+      SageMakerPipeline = Struct.new(:name, :attributes, keyword_init: true)
+      class SageMakerPipeline
+        def self.resource_type
+          'aws_sagemaker_pipeline'
+        end
+        
+        def self.attribute_struct
+          Types::SageMakerPipelineAttributes
+        end
+      end
+      
+      def aws_sagemaker_pipeline(name, attributes)
+        resource = SageMakerPipeline.new(
+          name: name,
+          attributes: attributes
+        )
+        
+        add_resource(resource)
+        
+        ResourceReference.new(
+          name: name,
+          type: :aws_sagemaker_pipeline,
+          attributes: {
+            id: "${aws_sagemaker_pipeline.#{name}.id}",
+            arn: "${aws_sagemaker_pipeline.#{name}.arn}",
+            pipeline_name: "${aws_sagemaker_pipeline.#{name}.pipeline_name}",
+            pipeline_status: "${aws_sagemaker_pipeline.#{name}.pipeline_status}",
+            has_parallelism: !attributes[:parallelism_configuration].nil?,
+            max_parallel_steps: attributes.dig(:parallelism_configuration, :max_parallel_execution_steps) || 50
+          }
+        )
+      end
+    end
+  end
+end