pangea-aws 0.1.0

data/lib/pangea/resources/aws_eks_node_group/types/scaling_config.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Scaling configuration for node group
+        class ScalingConfig < Pangea::Resources::BaseAttributes
+          transform_keys(&:to_sym)
+
+          attribute :desired_size, Pangea::Resources::Types::Integer.constrained(gteq: 0).default(2)
+          attribute :max_size, Pangea::Resources::Types::Integer.constrained(gteq: 1).default(4)
+          attribute :min_size, Pangea::Resources::Types::Integer.constrained(gteq: 0).default(1)
+
+          def self.new(attributes)
+            attrs = attributes.is_a?(::Hash) ? attributes : {}
+
+            # Validate size relationships
+            min = attrs[:min_size] || 1
+            max = attrs[:max_size] || 4
+            desired = attrs[:desired_size] || 2
+
+            if min > max
+              raise Dry::Struct::Error, "min_size (#{min}) cannot be greater than max_size (#{max})"
+            end
+
+            if desired < min || desired > max
+              raise Dry::Struct::Error, "desired_size (#{desired}) must be between min_size (#{min}) and max_size (#{max})"
+            end
+
+            super(attrs)
+          end
+
+          def to_h
+            {
+              desired_size: desired_size,
+              max_size: max_size,
+              min_size: min_size
+            }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_eks_node_group/types/taint.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Taint configuration for node group
+        class Taint < Pangea::Resources::BaseAttributes
+          transform_keys(&:to_sym)
+
+          VALID_EFFECTS = %w[NO_SCHEDULE NO_EXECUTE PREFER_NO_SCHEDULE].freeze
+
+          attribute? :key, Pangea::Resources::Types::String.optional
+          attribute :value, Pangea::Resources::Types::String.optional.default(nil)
+          attribute? :effect, Pangea::Resources::Types::String.constrained(included_in: VALID_EFFECTS).optional
+
+          def to_h
+            hash = { key: key, effect: effect }
+            hash[:value] = value if value
+            hash
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_eks_node_group/types/update_config.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Update configuration for managed node group
+        class UpdateConfig < Pangea::Resources::BaseAttributes
+          transform_keys(&:to_sym)
+
+          attribute :max_unavailable, Pangea::Resources::Types::Integer.optional.default(nil).constrained(gteq: 1)
+          attribute :max_unavailable_percentage, Pangea::Resources::Types::Integer.optional.default(nil).constrained(
+            gteq: 1, lteq: 100
+          )
+
+          def self.new(attributes)
+            attrs = attributes.is_a?(::Hash) ? attributes : {}
+
+            # Validate that only one type of max_unavailable is specified
+            if attrs[:max_unavailable] && attrs[:max_unavailable_percentage]
+              raise Dry::Struct::Error, 'Cannot specify both max_unavailable and max_unavailable_percentage'
+            end
+
+            super(attrs)
+          end
+
+          def to_h
+            hash = {}
+            hash[:max_unavailable] = max_unavailable if max_unavailable
+            hash[:max_unavailable_percentage] = max_unavailable_percentage if max_unavailable_percentage
+            hash
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_eks_node_group/types.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+# Load types in dependency order
+require_relative 'types/scaling_config'
+require_relative 'types/update_config'
+require_relative 'types/remote_access'
+require_relative 'types/launch_template'
+require_relative 'types/taint'
+require_relative 'types/eks_node_group_attributes'

data/lib/pangea/resources/aws_elasticache_cluster/resource.rb

@@ -0,0 +1,131 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/aws_elasticache_cluster/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # Create an AWS ElastiCache Cluster with type-safe attributes
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] ElastiCache cluster attributes
+      # @return [ResourceReference] Reference object with outputs and computed properties
+      def aws_elasticache_cluster(name, attributes = {})
+        # Validate attributes using dry-struct
+        cluster_attrs = Types::ElastiCacheClusterAttributes.new(attributes)
+        
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:aws_elasticache_cluster, name) do
+          cluster_id cluster_attrs.cluster_id
+          engine cluster_attrs.engine
+          node_type cluster_attrs.node_type
+          num_cache_nodes cluster_attrs.num_cache_nodes
+          
+          # Engine configuration
+          engine_version cluster_attrs.engine_version if cluster_attrs.engine_version
+          parameter_group_name cluster_attrs.parameter_group_name if cluster_attrs.parameter_group_name
+          port cluster_attrs.port if cluster_attrs.port
+          
+          # Network configuration
+          subnet_group_name cluster_attrs.subnet_group_name if cluster_attrs.subnet_group_name
+          security_group_ids cluster_attrs.security_group_ids if cluster_attrs.security_group_ids&.any?
+          
+          # Availability zone configuration
+          availability_zone cluster_attrs.availability_zone if cluster_attrs.availability_zone
+          if cluster_attrs.preferred_availability_zones&.any?
+            preferred_availability_zones cluster_attrs.preferred_availability_zones
+          end
+          
+          # Maintenance configuration
+          maintenance_window cluster_attrs.maintenance_window if cluster_attrs.maintenance_window
+          notification_topic_arn cluster_attrs.notification_topic_arn if cluster_attrs.notification_topic_arn
+          auto_minor_version_upgrade cluster_attrs.auto_minor_version_upgrade
+          apply_immediately cluster_attrs.apply_immediately
+          
+          # Redis-specific configuration
+          if cluster_attrs.is_redis?
+            # Snapshot configuration
+            snapshot_arns cluster_attrs.snapshot_arns if cluster_attrs.snapshot_arns
+            snapshot_name cluster_attrs.snapshot_name if cluster_attrs.snapshot_name
+            snapshot_window cluster_attrs.snapshot_window if cluster_attrs.snapshot_window
+            snapshot_retention_limit cluster_attrs.snapshot_retention_limit if cluster_attrs.snapshot_retention_limit > 0
+            final_snapshot_identifier cluster_attrs.final_snapshot_identifier if cluster_attrs.final_snapshot_identifier
+            
+            # Encryption configuration
+            at_rest_encryption_enabled cluster_attrs.at_rest_encryption_enabled if cluster_attrs.at_rest_encryption_enabled
+            transit_encryption_enabled cluster_attrs.transit_encryption_enabled if cluster_attrs.transit_encryption_enabled
+            auth_token cluster_attrs.auth_token if cluster_attrs.auth_token
+          end
+          
+          # Log delivery configuration
+          if cluster_attrs.log_delivery_configuration&.any?
+            cluster_attrs.log_delivery_configuration.each_with_index do |log_config, index|
+              log_delivery_configuration do
+                destination log_config[:destination]
+                destination_type log_config[:destination_type]
+                log_format log_config[:log_format]
+                log_type log_config[:log_type]
+              end
+            end
+          end
+          
+          # Apply tags if present
+          if cluster_attrs.tags&.any?
+            tags do
+              cluster_attrs.tags.each do |key, value|
+                public_send(key, value)
+              end
+            end
+          end
+        end
+        
+        # Create resource reference
+        ref = ResourceReference.new(
+          type: 'aws_elasticache_cluster',
+          name: name,
+          resource_attributes: cluster_attrs.to_h,
+          outputs: {
+            id: "${aws_elasticache_cluster.#{name}.id}",
+            arn: "${aws_elasticache_cluster.#{name}.arn}",
+            cluster_address: "${aws_elasticache_cluster.#{name}.cluster_address}",
+            configuration_endpoint: "${aws_elasticache_cluster.#{name}.configuration_endpoint}",
+            port: "${aws_elasticache_cluster.#{name}.port}",
+            cache_nodes: "${aws_elasticache_cluster.#{name}.cache_nodes}",
+            engine_version_actual: "${aws_elasticache_cluster.#{name}.engine_version_actual}",
+            tags_all: "${aws_elasticache_cluster.#{name}.tags_all}"
+          }
+        )
+        
+        # Add computed properties via method delegation
+        ref.define_singleton_method(:is_redis?) { cluster_attrs.is_redis? }
+        ref.define_singleton_method(:is_memcached?) { cluster_attrs.is_memcached? }
+        ref.define_singleton_method(:default_port) { cluster_attrs.default_port }
+        ref.define_singleton_method(:supports_encryption?) { cluster_attrs.supports_encryption? }
+        ref.define_singleton_method(:supports_backup?) { cluster_attrs.supports_backup? }
+        ref.define_singleton_method(:supports_auth?) { cluster_attrs.supports_auth? }
+        ref.define_singleton_method(:engine_supports_encryption?) { cluster_attrs.engine_supports_encryption? }
+        ref.define_singleton_method(:is_cluster_mode?) { cluster_attrs.is_cluster_mode? }
+        ref.define_singleton_method(:estimated_monthly_cost) { cluster_attrs.estimated_monthly_cost }
+        
+        ref
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_elasticache_cluster/types/configs.rb

@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Common ElastiCache configurations
+        module ElastiCacheConfigs
+          module_function
+
+          # Redis default configuration
+          def redis(version: '7.0', node_type: 'cache.t4g.micro')
+            {
+              engine: 'redis',
+              engine_version: version,
+              node_type: node_type,
+              num_cache_nodes: 1,
+              port: 6379,
+              at_rest_encryption_enabled: true,
+              transit_encryption_enabled: true,
+              auto_minor_version_upgrade: true
+            }
+          end
+
+          # Memcached default configuration
+          def memcached(version: '1.6.17', node_type: 'cache.t4g.micro', num_nodes: 2)
+            {
+              engine: 'memcached',
+              engine_version: version,
+              node_type: node_type,
+              num_cache_nodes: num_nodes,
+              port: 11_211,
+              auto_minor_version_upgrade: true
+            }
+          end
+
+          # High-performance Redis configuration
+          def redis_high_performance(node_type: 'cache.r6g.large')
+            {
+              engine: 'redis',
+              engine_version: '7.0',
+              node_type: node_type,
+              num_cache_nodes: 1,
+              port: 6379,
+              at_rest_encryption_enabled: true,
+              transit_encryption_enabled: true,
+              snapshot_retention_limit: 7,
+              auto_minor_version_upgrade: false
+            }
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_elasticache_cluster/types/helpers.rb

@@ -0,0 +1,97 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Helper methods for ElastiCache cluster attributes
+        module ElastiCacheHelpers
+          def is_redis?
+            engine == 'redis'
+          end
+
+          def is_memcached?
+            engine == 'memcached'
+          end
+
+          def default_port
+            is_redis? ? 6379 : 11_211
+          end
+
+          def supports_encryption?
+            is_redis?
+          end
+
+          def supports_backup?
+            is_redis?
+          end
+
+          def supports_auth?
+            is_redis?
+          end
+
+          def engine_supports_encryption?
+            return false unless is_redis?
+            return true unless engine_version
+
+            version_parts = engine_version.split('.').map(&:to_i)
+            major = version_parts[0]
+            minor = version_parts[1]
+            patch = version_parts[2] || 0
+
+            major > 3 || (major == 3 && minor > 2) || (major == 3 && minor == 2 && patch >= 6)
+          end
+
+          def is_cluster_mode?
+            false
+          end
+
+          def estimated_monthly_cost
+            hourly_rate = hourly_rate_for_node_type
+            total_cost = hourly_rate * 730 * num_cache_nodes
+            "~$#{total_cost.round(2)}/month"
+          end
+
+          private
+
+          # rubocop:disable Metrics/CyclomaticComplexity, Metrics/MethodLength
+          def hourly_rate_for_node_type
+            case node_type
+            when /t4g.nano/ then 0.016
+            when /t4g.micro/ then 0.032
+            when /t4g.small/ then 0.064
+            when /t4g.medium/ then 0.128
+            when /t3.micro/ then 0.017
+            when /t3.small/ then 0.034
+            when /t3.medium/ then 0.068
+            when /m6g.large/ then 0.077
+            when /m6g.xlarge/ then 0.154
+            when /m5.large/ then 0.083
+            when /m5.xlarge/ then 0.166
+            when /r6g.large/ then 0.101
+            when /r6g.xlarge/ then 0.202
+            when /r5.large/ then 0.126
+            when /r5.xlarge/ then 0.252
+            else 0.100
+            end
+          end
+          # rubocop:enable Metrics/CyclomaticComplexity, Metrics/MethodLength
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_elasticache_cluster/types/node_types.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Valid ElastiCache node types
+        module ElastiCacheNodeTypes
+          # Burstable Performance node types
+          BURSTABLE = [
+            'cache.t4g.nano', 'cache.t4g.micro', 'cache.t4g.small', 'cache.t4g.medium',
+            'cache.t3.micro', 'cache.t3.small', 'cache.t3.medium'
+          ].freeze
+
+          # General Purpose node types
+          GENERAL_PURPOSE = [
+            'cache.m6g.large', 'cache.m6g.xlarge', 'cache.m6g.2xlarge', 'cache.m6g.4xlarge',
+            'cache.m6g.8xlarge', 'cache.m6g.12xlarge', 'cache.m6g.16xlarge',
+            'cache.m5.large', 'cache.m5.xlarge', 'cache.m5.2xlarge', 'cache.m5.4xlarge',
+            'cache.m5.12xlarge', 'cache.m5.24xlarge'
+          ].freeze
+
+          # Memory Optimized node types
+          MEMORY_OPTIMIZED = [
+            'cache.r6g.large', 'cache.r6g.xlarge', 'cache.r6g.2xlarge', 'cache.r6g.4xlarge',
+            'cache.r6g.8xlarge', 'cache.r6g.12xlarge', 'cache.r6g.16xlarge',
+            'cache.r5.large', 'cache.r5.xlarge', 'cache.r5.2xlarge', 'cache.r5.4xlarge',
+            'cache.r5.12xlarge', 'cache.r5.24xlarge'
+          ].freeze
+
+          # All valid node types
+          ALL = (BURSTABLE + GENERAL_PURPOSE + MEMORY_OPTIMIZED).freeze
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_elasticache_cluster/types/validators.rb

@@ -0,0 +1,114 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # Validation logic for ElastiCache cluster attributes
+        module ElastiCacheValidators
+          module_function
+
+          def validate_and_apply_defaults(attrs)
+            validate_availability_zones(attrs)
+
+            case attrs.engine
+            when 'redis'
+              attrs = validate_redis(attrs)
+            when 'memcached'
+              validate_memcached(attrs)
+              attrs = attrs.copy_with(port: attrs.port || 11_211)
+            end
+
+            attrs
+          end
+
+          def validate_redis(attrs)
+            validate_redis_num_cache_nodes(attrs)
+            validate_redis_auth_token(attrs)
+            validate_redis_encryption(attrs)
+            attrs.copy_with(port: attrs.port || 6379)
+          end
+
+          def validate_redis_num_cache_nodes(attrs)
+            return unless attrs.num_cache_nodes > 1
+
+            raise Dry::Struct::Error,
+                  'Redis clusters should use num_cache_nodes=1 and replication groups for scaling'
+          end
+
+          def validate_redis_auth_token(attrs)
+            return unless attrs.auth_token && !attrs.transit_encryption_enabled
+
+            raise Dry::Struct::Error, 'Auth token requires transit_encryption_enabled=true'
+          end
+
+          def validate_redis_encryption(attrs)
+            return unless attrs.at_rest_encryption_enabled && !attrs.engine_supports_encryption?
+
+            raise Dry::Struct::Error, 'At-rest encryption requires Redis 3.2.6 or later'
+          end
+
+          def validate_memcached(attrs)
+            validate_memcached_snapshots(attrs)
+            validate_memcached_encryption(attrs)
+            validate_memcached_auth(attrs)
+            validate_memcached_final_snapshot(attrs)
+            validate_memcached_multi_az(attrs)
+          end
+
+          def validate_memcached_snapshots(attrs)
+            has_snapshot_config = attrs.snapshot_arns || attrs.snapshot_name ||
+                                  attrs.snapshot_window || attrs.snapshot_retention_limit.positive?
+            return unless has_snapshot_config
+
+            raise Dry::Struct::Error, 'Snapshot configuration is only available for Redis'
+          end
+
+          def validate_memcached_encryption(attrs)
+            return unless attrs.transit_encryption_enabled || attrs.at_rest_encryption_enabled
+
+            raise Dry::Struct::Error, 'Encryption is only available for Redis'
+          end
+
+          def validate_memcached_auth(attrs)
+            return unless attrs.auth_token
+
+            raise Dry::Struct::Error, 'Auth token is only available for Redis'
+          end
+
+          def validate_memcached_final_snapshot(attrs)
+            return unless attrs.final_snapshot_identifier
+
+            raise Dry::Struct::Error, 'Final snapshot is only available for Redis'
+          end
+
+          def validate_memcached_multi_az(attrs)
+            return unless attrs.preferred_availability_zones&.any? && attrs.num_cache_nodes < 2
+
+            raise Dry::Struct::Error, 'Multi-AZ deployment requires at least 2 cache nodes for Memcached'
+          end
+
+          def validate_availability_zones(attrs)
+            return unless attrs.availability_zone && attrs.preferred_availability_zones&.any?
+
+            raise Dry::Struct::Error, 'Cannot specify both availability_zone and preferred_availability_zones'
+          end
+        end
+      end
+    end
+  end
+end