pangea-aws 0.1.0

data/lib/pangea/resources/aws_ssm_maintenance_window/types/attributes.rb

@@ -0,0 +1,188 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Type-safe attributes for AWS Systems Manager Maintenance Window resources
+        class SsmMaintenanceWindowAttributes < Pangea::Resources::BaseAttributes
+          attribute? :name, Resources::Types::String.optional
+          attribute? :schedule, Resources::Types::String.optional
+          attribute? :duration, Resources::Types::Integer.constrained(gteq: 1, lteq: 24).optional
+          attribute? :cutoff, Resources::Types::Integer.constrained(gteq: 0, lteq: 23).optional
+          attribute :allow_unassociated_targets, Resources::Types::Bool.default(false)
+          attribute :enabled, Resources::Types::Bool.default(true)
+          attribute? :end_date, Resources::Types::String.optional
+          attribute? :start_date, Resources::Types::String.optional
+          attribute? :schedule_timezone, Resources::Types::String.optional
+          attribute? :schedule_offset, Resources::Types::Integer.optional.constrained(gteq: 1, lteq: 6)
+          attribute? :description, Resources::Types::String.optional
+          attribute :tags, Resources::Types::AwsTags.default({}.freeze)
+
+          def self.new(attributes = {})
+            attrs = super(attributes)
+            validate_schedule!(attrs.schedule)
+            validate_cutoff!(attrs)
+            validate_dates!(attrs)
+            validate_schedule_offset!(attrs)
+            validate_timezone!(attrs)
+            validate_description!(attrs)
+            attrs
+          end
+
+          def self.validate_schedule!(schedule)
+            schedule = schedule.strip
+            if schedule.start_with?('cron(')
+              validate_cron_expression!(schedule)
+            elsif schedule.start_with?('rate(')
+              validate_rate_expression!(schedule)
+            else
+              raise Dry::Struct::Error, 'Schedule must be a cron() or rate() expression'
+            end
+          end
+
+          def self.validate_cron_expression!(schedule)
+            return if schedule.match?(/\Acron\(\s*(\*|[0-5]?\d|\d+\-\d+|\d+(,\d+)*|\d+\/\d+)\s+(\*|[0-2]?\d|1?\d\-2?\d|\d+(,\d+)*|\d+\/\d+)\s+(\*|\?|[1-2]?\d|3[01]|\d+\-\d+|\d+(,\d+)*|L|W|\d+W|LW)\s+(\*|\?|[1-9]|1[0-2]|JAN|FEB|MAR|APR|MAY|JUN|JUL|AUG|SEP|OCT|NOV|DEC|\d+\-\d+|\d+(,\d+)*)\s+(\*|\?|[0-6]|SUN|MON|TUE|WED|THU|FRI|SAT|\d+\-\d+|\d+(,\d+)*|L|#|\d+#\d+)\s+(\*|19[7-9]\d|20\d{2}|\d{4}\-\d{4}|\d+(,\d+)*)\s*\)\z/i)
+
+            raise Dry::Struct::Error, 'Invalid cron expression format. Use: cron(minute hour day-of-month month day-of-week year)'
+          end
+
+          def self.validate_rate_expression!(schedule)
+            match = schedule.match(/\Arate\(\s*(\d+)\s+(minute|minutes|hour|hours|day|days)\s*\)\z/i)
+            raise Dry::Struct::Error, 'Invalid rate expression format. Use: rate(value unit) where unit is minute(s), hour(s), or day(s)' unless match
+
+            value = match[1].to_i
+            unit = match[2].downcase
+            min_values = { 'minute' => 15, 'minutes' => 15, 'hour' => 1, 'hours' => 1, 'day' => 1, 'days' => 1 }
+            raise Dry::Struct::Error, "Rate expression minimum value for #{unit} is #{min_values[unit]}" if value < min_values[unit]
+          end
+
+          def self.validate_cutoff!(attrs)
+            raise Dry::Struct::Error, 'Cutoff must be less than duration' if attrs.cutoff >= attrs.duration
+          end
+
+          def self.validate_dates!(attrs)
+            if attrs.start_date
+              begin
+                DateTime.iso8601(attrs.start_date)
+              rescue ArgumentError
+                raise Dry::Struct::Error, 'start_date must be in ISO 8601 format (YYYY-MM-DDTHH:MM:SSZ)'
+              end
+            end
+
+            if attrs.end_date
+              begin
+                DateTime.iso8601(attrs.end_date)
+              rescue ArgumentError
+                raise Dry::Struct::Error, 'end_date must be in ISO 8601 format (YYYY-MM-DDTHH:MM:SSZ)'
+              end
+            end
+
+            return unless attrs.start_date && attrs.end_date
+
+            start_time = DateTime.iso8601(attrs.start_date)
+            end_time = DateTime.iso8601(attrs.end_date)
+            raise Dry::Struct::Error, 'end_date must be after start_date' if end_time <= start_time
+          end
+
+          def self.validate_schedule_offset!(attrs)
+            raise Dry::Struct::Error, 'schedule_offset can only be used with cron expressions' if attrs.schedule_offset && !attrs.schedule.start_with?('cron(')
+          end
+
+          def self.validate_timezone!(attrs)
+            return unless attrs.schedule_timezone
+            raise Dry::Struct::Error, "Invalid timezone format. Use IANA timezone format (e.g., 'America/New_York', 'UTC')" unless attrs.schedule_timezone.match?(/\A[A-Za-z0-9_\/+-]+\z/)
+          end
+
+          def self.validate_description!(attrs)
+            raise Dry::Struct::Error, 'Description cannot exceed 128 characters' if attrs.description && attrs.description.length > 128
+          end
+
+          def is_enabled? = enabled
+          def is_disabled? = !enabled
+          def uses_cron_schedule? = schedule.start_with?('cron(')
+          def uses_rate_schedule? = schedule.start_with?('rate(')
+          def has_start_date? = !start_date.nil?
+          def has_end_date? = !end_date.nil?
+          def has_timezone? = !schedule_timezone.nil?
+          def has_schedule_offset? = !schedule_offset.nil?
+          def has_description? = !description.nil?
+          def allows_unassociated_targets? = allow_unassociated_targets
+          def duration_hours = duration
+          def cutoff_hours = cutoff
+          def effective_execution_time_hours = duration - cutoff
+
+          def schedule_type
+            return 'cron' if uses_cron_schedule?
+            return 'rate' if uses_rate_schedule?
+
+            'unknown'
+          end
+
+          def parsed_schedule_info
+            if uses_cron_schedule?
+              parse_cron_schedule
+            elsif uses_rate_schedule?
+              parse_rate_schedule
+            else
+              {}
+            end
+          end
+
+          def estimated_monthly_executions
+            schedule_info = parsed_schedule_info
+            return 'Unknown' if schedule_info.empty?
+
+            if uses_rate_schedule?
+              estimate_rate_executions(schedule_info)
+            elsif uses_cron_schedule?
+              estimate_cron_executions(schedule_info)
+            else
+              'Unknown'
+            end
+          end
+
+          private
+
+          def parse_cron_schedule
+            match = schedule.match(/\Acron\(\s*([^)]+)\s*\)\z/)
+            return {} unless match
+
+            fields = match[1].split(/\s+/)
+            return {} unless fields.length == 6
+
+            { minute: fields[0], hour: fields[1], day_of_month: fields[2], month: fields[3], day_of_week: fields[4], year: fields[5] }
+          end
+
+          def parse_rate_schedule
+            match = schedule.match(/\Arate\(\s*(\d+)\s+(minute|minutes|hour|hours|day|days)\s*\)\z/i)
+            return {} unless match
+
+            { value: match[1].to_i, unit: match[2].downcase.sub(/s$/, '') }
+          end
+
+          def estimate_rate_executions(schedule_info)
+            case schedule_info[:unit]
+            when 'minute' then (30 * 24 * 60) / schedule_info[:value]
+            when 'hour' then (30 * 24) / schedule_info[:value]
+            when 'day' then 30 / schedule_info[:value]
+            else 'Unknown'
+            end
+          end
+
+          def estimate_cron_executions(cron)
+            return 4 if cron[:day_of_week] != '*' && cron[:day_of_week] != '?'
+            return 1 if cron[:day_of_month] != '*' && cron[:day_of_month] != '?'
+            return 30 if cron[:hour] != '*'
+
+            'Variable'
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_ssm_maintenance_window/types/configs.rb

@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Common SSM Maintenance Window configurations
+        module SsmMaintenanceWindowConfigs
+          def self.daily_maintenance_window(name, hour: 2, duration: 4, cutoff: 1)
+            {
+              name: name,
+              schedule: "cron(0 #{hour} * * ? *)",
+              duration: duration,
+              cutoff: cutoff,
+              description: 'Daily maintenance window'
+            }
+          end
+
+          def self.weekly_maintenance_window(name, day_of_week: 'SUN', hour: 2, duration: 6, cutoff: 1)
+            {
+              name: name,
+              schedule: "cron(0 #{hour} ? * #{day_of_week} *)",
+              duration: duration,
+              cutoff: cutoff,
+              description: 'Weekly maintenance window'
+            }
+          end
+
+          def self.monthly_maintenance_window(name, day_of_month: 1, hour: 2, duration: 8, cutoff: 1)
+            {
+              name: name,
+              schedule: "cron(0 #{hour} #{day_of_month} * ? *)",
+              duration: duration,
+              cutoff: cutoff,
+              description: 'Monthly maintenance window'
+            }
+          end
+
+          def self.business_hours_maintenance_window(name, day_of_week: 'MON-FRI', hour: 14, timezone: 'America/New_York')
+            {
+              name: name,
+              schedule: "cron(0 #{hour} ? * #{day_of_week} *)",
+              duration: 4,
+              cutoff: 1,
+              schedule_timezone: timezone,
+              description: 'Business hours maintenance window'
+            }
+          end
+
+          def self.off_hours_maintenance_window(name, timezone: 'UTC')
+            {
+              name: name,
+              schedule: 'cron(0 2 ? * SUN *)',
+              duration: 6,
+              cutoff: 1,
+              schedule_timezone: timezone,
+              description: 'Off-hours maintenance window'
+            }
+          end
+
+          def self.emergency_maintenance_window(name)
+            {
+              name: name,
+              schedule: 'rate(7 days)',
+              duration: 12,
+              cutoff: 2,
+              allow_unassociated_targets: true,
+              enabled: false,
+              description: 'Emergency maintenance window'
+            }
+          end
+
+          def self.patch_maintenance_window(name, day_of_week: 'SAT', hour: 3)
+            {
+              name: name,
+              schedule: "cron(0 #{hour} ? * #{day_of_week} *)",
+              duration: 4,
+              cutoff: 1,
+              description: 'Patch management maintenance window'
+            }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_ssm_maintenance_window/types.rb

@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors. Licensed under Apache 2.0.
+
+require 'pangea/resources/types'
+require_relative 'types/attributes'
+require_relative 'types/configs'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # SsmMaintenanceWindowAttributes is defined in types/attributes.rb
+        # SsmMaintenanceWindowConfigs is defined in types/configs.rb
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_ssm_maintenance_window/types.rbs

@@ -0,0 +1,49 @@
+# RBS type definitions for AWS SSM Maintenance Window types
+
+module Pangea
+  module Resources
+    module AWS
+      class SsmMaintenanceWindowAttributes < Dry::Struct
+        attr_reader name: String
+        attr_reader schedule: String
+        attr_reader duration: Integer
+        attr_reader cutoff: Integer
+        attr_reader allow_unassociated_targets: bool
+        attr_reader enabled: bool
+        attr_reader end_date: String?
+        attr_reader start_date: String?
+        attr_reader schedule_timezone: String?
+        attr_reader schedule_offset: Integer?
+        attr_reader description: String?
+        attr_reader tags: Hash[Symbol, String]
+        
+        def is_enabled?: () -> bool
+        def is_disabled?: () -> bool
+        def uses_cron_schedule?: () -> bool
+        def uses_rate_schedule?: () -> bool
+        def has_start_date?: () -> bool
+        def has_end_date?: () -> bool
+        def has_timezone?: () -> bool
+        def has_schedule_offset?: () -> bool
+        def has_description?: () -> bool
+        def allows_unassociated_targets?: () -> bool
+        def duration_hours: () -> Integer
+        def cutoff_hours: () -> Integer
+        def effective_execution_time_hours: () -> Integer
+        def schedule_type: () -> String
+        def parsed_schedule_info: () -> Hash[Symbol, untyped]
+        def estimated_monthly_executions: () -> (Integer | String)
+      end
+
+      module SsmMaintenanceWindowConfigs
+        def self.daily_maintenance_window: (String, ?hour: Integer, ?duration: Integer, ?cutoff: Integer) -> Hash[Symbol, untyped]
+        def self.weekly_maintenance_window: (String, ?day_of_week: String, ?hour: Integer, ?duration: Integer, ?cutoff: Integer) -> Hash[Symbol, untyped]
+        def self.monthly_maintenance_window: (String, ?day_of_month: Integer, ?hour: Integer, ?duration: Integer, ?cutoff: Integer) -> Hash[Symbol, untyped]
+        def self.business_hours_maintenance_window: (String, ?day_of_week: String, ?hour: Integer, ?timezone: String) -> Hash[Symbol, untyped]
+        def self.off_hours_maintenance_window: (String, ?timezone: String) -> Hash[Symbol, untyped]
+        def self.emergency_maintenance_window: (String) -> Hash[Symbol, untyped]
+        def self.patch_maintenance_window: (String, ?day_of_week: String, ?hour: Integer) -> Hash[Symbol, untyped]
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_ssm_parameter/resource.rb

@@ -0,0 +1,95 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/aws_ssm_parameter/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # Create an AWS Systems Manager Parameter with type-safe attributes
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] SSM parameter attributes
+      # @return [ResourceReference] Reference object with outputs and computed properties
+      def aws_ssm_parameter(name, attributes = {})
+        # Validate attributes using dry-struct
+        parameter_attrs = Types::SsmParameterAttributes.new(attributes)
+
+        # Build resource attributes as a hash
+        resource_attrs = {
+          name: parameter_attrs.name,
+          type: parameter_attrs.type,
+          value: parameter_attrs.value
+        }
+
+        resource_attrs[:description] = parameter_attrs.description if parameter_attrs.description
+        resource_attrs[:key_id] = parameter_attrs.key_id if parameter_attrs.key_id
+        resource_attrs[:tier] = parameter_attrs.tier
+        resource_attrs[:allowed_pattern] = parameter_attrs.allowed_pattern if parameter_attrs.allowed_pattern
+        resource_attrs[:data_type] = parameter_attrs.data_type if parameter_attrs.data_type
+        resource_attrs[:overwrite] = parameter_attrs.overwrite
+        resource_attrs[:tags] = parameter_attrs.tags if parameter_attrs.tags&.any?
+
+        # Write to manifest: direct access for synthesizer, fall back to resource() for test mocks
+        if is_a?(AbstractSynthesizer)
+          translation[:manifest][:resource] ||= {}
+          translation[:manifest][:resource][:aws_ssm_parameter] ||= {}
+          translation[:manifest][:resource][:aws_ssm_parameter][name] = resource_attrs
+        else
+          resource(:aws_ssm_parameter, name, resource_attrs)
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'aws_ssm_parameter',
+          name: name,
+          resource_attributes: parameter_attrs.to_h,
+          outputs: {
+            name: "${aws_ssm_parameter.#{name}.name}",
+            arn: "${aws_ssm_parameter.#{name}.arn}",
+            type: "${aws_ssm_parameter.#{name}.type}",
+            value: "${aws_ssm_parameter.#{name}.value}",
+            version: "${aws_ssm_parameter.#{name}.version}",
+            tier: "${aws_ssm_parameter.#{name}.tier}",
+            data_type: "${aws_ssm_parameter.#{name}.data_type}",
+            key_id: "${aws_ssm_parameter.#{name}.key_id}",
+            tags_all: "${aws_ssm_parameter.#{name}.tags_all}"
+          },
+          computed_properties: {
+            is_secure_string: parameter_attrs.is_secure_string?,
+            is_string_list: parameter_attrs.is_string_list?,
+            is_string: parameter_attrs.is_string?,
+            uses_kms_key: parameter_attrs.uses_kms_key?,
+            is_advanced_tier: parameter_attrs.is_advanced_tier?,
+            is_standard_tier: parameter_attrs.is_standard_tier?,
+            has_description: parameter_attrs.has_description?,
+            has_allowed_pattern: parameter_attrs.has_allowed_pattern?,
+            has_data_type: parameter_attrs.has_data_type?,
+            allows_overwrite: parameter_attrs.allows_overwrite?,
+            is_hierarchical: parameter_attrs.is_hierarchical?,
+            parameter_path: parameter_attrs.parameter_path,
+            parameter_name_only: parameter_attrs.parameter_name_only,
+            string_list_values: parameter_attrs.string_list_values,
+            estimated_monthly_cost: parameter_attrs.estimated_monthly_cost
+          }
+        )
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_ssm_parameter/types/configs.rb

@@ -0,0 +1,118 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Common SSM Parameter configurations
+        module SsmParameterConfigs
+          # Simple string parameter
+          def self.string_parameter(name, value, description: nil)
+            {
+              name: name,
+              type: "String",
+              value: value,
+              description: description,
+              tier: "Standard"
+            }.compact
+          end
+
+          # Secure string parameter with KMS encryption
+          def self.secure_parameter(name, value, key_id: nil, description: nil)
+            {
+              name: name,
+              type: "SecureString",
+              value: value,
+              key_id: key_id,
+              description: description,
+              tier: "Standard"
+            }.compact
+          end
+
+          # String list parameter
+          def self.string_list_parameter(name, values, description: nil)
+            {
+              name: name,
+              type: "StringList",
+              value: values.is_a?(Array) ? values.join(',') : values,
+              description: description,
+              tier: "Standard"
+            }.compact
+          end
+
+          # Configuration parameter with validation pattern
+          def self.config_parameter(name, value, pattern, description: nil)
+            {
+              name: name,
+              type: "String",
+              value: value,
+              allowed_pattern: pattern,
+              description: description,
+              tier: "Standard"
+            }.compact
+          end
+
+          # Advanced tier parameter for large values
+          def self.advanced_parameter(name, value, description: nil)
+            {
+              name: name,
+              type: "String",
+              value: value,
+              description: description,
+              tier: "Advanced"
+            }.compact
+          end
+
+          # Database connection parameter
+          def self.database_config_parameter(name, connection_string, key_id: nil)
+            {
+              name: name,
+              type: "SecureString",
+              value: connection_string,
+              key_id: key_id,
+              description: "Database connection configuration",
+              tier: "Standard"
+            }.compact
+          end
+
+          # Application configuration parameter
+          def self.app_config_parameter(name, config_json, description: nil)
+            {
+              name: name,
+              type: "String",
+              value: config_json,
+              description: description,
+              data_type: "text",
+              tier: config_json.bytesize > 4096 ? "Advanced" : "Standard"
+            }.compact
+          end
+
+          # AMI ID parameter
+          def self.ami_parameter(name, ami_id, description: nil)
+            {
+              name: name,
+              type: "String",
+              value: ami_id,
+              description: description,
+              data_type: "aws:ec2:image",
+              allowed_pattern: "^ami-[a-z0-9]{8,17}$"
+            }.compact
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_ssm_parameter/types/helpers.rb

@@ -0,0 +1,101 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Helper methods for SSM Parameter attributes
+        module SsmParameterHelpers
+          def is_secure_string?
+            type == "SecureString"
+          end
+
+          def is_string_list?
+            type == "StringList"
+          end
+
+          def is_string?
+            type == "String"
+          end
+
+          def uses_kms_key?
+            !key_id.nil?
+          end
+
+          def is_advanced_tier?
+            tier == "Advanced"
+          end
+
+          def is_standard_tier?
+            tier == "Standard"
+          end
+
+          def has_description?
+            !description.nil?
+          end
+
+          def has_allowed_pattern?
+            !allowed_pattern.nil?
+          end
+
+          def has_data_type?
+            !data_type.nil?
+          end
+
+          def allows_overwrite?
+            overwrite
+          end
+
+          def is_hierarchical?
+            name.include?('/')
+          end
+
+          def parameter_path
+            return '/' unless is_hierarchical?
+            parts = name.split('/')[0...-1]
+            parts.empty? ? '/' : parts.join('/')
+          end
+
+          def parameter_name_only
+            return name unless is_hierarchical?
+            name.split('/').last
+          end
+
+          def string_list_values
+            return [] unless is_string_list?
+            value.split(',').map(&:strip)
+          end
+
+          def estimated_monthly_cost
+            # SSM Parameter Store pricing
+            base_cost = 0.0
+
+            if is_advanced_tier?
+              base_cost = 0.05 # $0.05 per parameter per month for Advanced
+            # Standard tier parameters are free
+            end
+
+            if is_advanced_tier?
+              "~$#{base_cost}/month"
+            else
+              "Free (Standard tier)"
+            end
+          end
+        end
+      end
+    end
+  end
+end