pangea 0.0.42 → 0.0.45

data/lib/pangea/resources/aws_mobile_analytics_app.rbs

@@ -0,0 +1,30 @@
+# TypeProf 0.21.2
+
+module Pangea
+  module Resources
+    module AwsMobileAnalyticsApp
+      module Types
+        class Attributes
+          attr_reader name: String
+
+          def self.from_dynamic: (Hash[Symbol, untyped] d) -> Attributes
+        end
+
+        class Reference
+          attr_reader id: String
+        end
+      end
+
+      module Resource
+        def self.validate: (Hash[Symbol, untyped] definition) -> Types::Attributes
+        def self.defaults: () -> Hash[Symbol, untyped]
+        def self.required_attributes: () -> Array[Symbol]
+        def self.compute_attributes: (Hash[Symbol, untyped] definition) -> Types::Reference
+        
+        private
+        
+        def self.ref: (String | Symbol name, Symbol attribute) -> String
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_mq_broker/resource.rb

@@ -0,0 +1,157 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/aws_mq_broker/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # Create an AWS MQ Broker for message queuing
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] MQ broker attributes
+      # @option attributes [String] :broker_name The broker name
+      # @option attributes [String] :engine_type ActiveMQ or RabbitMQ
+      # @option attributes [String] :engine_version Engine version
+      # @option attributes [String] :host_instance_type Instance type
+      # @option attributes [Array<Hash>] :users Broker users configuration
+      # @option attributes [Boolean] :apply_immediately Apply changes immediately
+      # @option attributes [String] :authentication_strategy Authentication strategy
+      # @option attributes [Boolean] :auto_minor_version_upgrade Auto upgrade minor versions
+      # @option attributes [Hash] :configuration Broker configuration
+      # @option attributes [String] :deployment_mode Deployment mode
+      # @option attributes [Hash] :encryption_options Encryption settings
+      # @option attributes [Hash] :ldap_server_metadata LDAP configuration
+      # @option attributes [Hash] :logs Logging configuration
+      # @option attributes [Hash] :maintenance_window_start_time Maintenance window
+      # @option attributes [Boolean] :publicly_accessible Public accessibility
+      # @option attributes [Array<String>] :security_groups Security group IDs
+      # @option attributes [String] :storage_type Storage type
+      # @option attributes [Array<String>] :subnet_ids Subnet IDs
+      # @option attributes [Hash] :tags Resource tags
+      # @return [ResourceReference] Reference object with outputs
+      def aws_mq_broker(name, attributes = {})
+        # Validate attributes using dry-struct
+        broker_attrs = Types::Types::MqBrokerAttributes.new(attributes)
+        
+        # Generate terraform resource block
+        resource(:aws_mq_broker, name) do
+          broker_name broker_attrs.broker_name
+          engine_type broker_attrs.engine_type
+          engine_version broker_attrs.engine_version
+          host_instance_type broker_attrs.host_instance_type
+          
+          # Users configuration
+          broker_attrs.users.each do |user|
+            user do
+              username user[:username]
+              password user[:password] if user[:password]
+              console_access user[:console_access] if user.key?(:console_access)
+              groups user[:groups] if user[:groups]
+            end
+          end
+          
+          apply_immediately broker_attrs.apply_immediately if broker_attrs.apply_immediately != false
+          authentication_strategy broker_attrs.authentication_strategy if broker_attrs.authentication_strategy != 'simple'
+          auto_minor_version_upgrade broker_attrs.auto_minor_version_upgrade if broker_attrs.auto_minor_version_upgrade != false
+          
+          # Configuration
+          if broker_attrs.configuration
+            configuration do
+              id broker_attrs.configuration[:id] if broker_attrs.configuration[:id]
+              revision broker_attrs.configuration[:revision] if broker_attrs.configuration[:revision]
+            end
+          end
+          
+          deployment_mode broker_attrs.deployment_mode if broker_attrs.deployment_mode != 'SINGLE_INSTANCE'
+          
+          # Encryption options
+          if broker_attrs.encryption_options
+            encryption_options do
+              kms_key_id broker_attrs.encryption_options[:kms_key_id] if broker_attrs.encryption_options[:kms_key_id]
+              use_aws_owned_key broker_attrs.encryption_options[:use_aws_owned_key] if broker_attrs.encryption_options.key?(:use_aws_owned_key)
+            end
+          end
+          
+          # LDAP server metadata
+          if broker_attrs.ldap_server_metadata
+            ldap_server_metadata do
+              hosts broker_attrs.ldap_server_metadata[:hosts]
+              role_base broker_attrs.ldap_server_metadata[:role_base]
+              role_name broker_attrs.ldap_server_metadata[:role_name] if broker_attrs.ldap_server_metadata[:role_name]
+              role_search_matching broker_attrs.ldap_server_metadata[:role_search_matching] if broker_attrs.ldap_server_metadata[:role_search_matching]
+              role_search_subtree broker_attrs.ldap_server_metadata[:role_search_subtree] if broker_attrs.ldap_server_metadata.key?(:role_search_subtree)
+              service_account_password broker_attrs.ldap_server_metadata[:service_account_password]
+              service_account_username broker_attrs.ldap_server_metadata[:service_account_username]
+              user_base broker_attrs.ldap_server_metadata[:user_base]
+              user_role_name broker_attrs.ldap_server_metadata[:user_role_name] if broker_attrs.ldap_server_metadata[:user_role_name]
+              user_search_matching broker_attrs.ldap_server_metadata[:user_search_matching] if broker_attrs.ldap_server_metadata[:user_search_matching]
+              user_search_subtree broker_attrs.ldap_server_metadata[:user_search_subtree] if broker_attrs.ldap_server_metadata.key?(:user_search_subtree)
+            end
+          end
+          
+          # Logs
+          if broker_attrs.logs
+            logs do
+              general broker_attrs.logs[:general] if broker_attrs.logs.key?(:general)
+              audit broker_attrs.logs[:audit] if broker_attrs.logs.key?(:audit)
+            end
+          end
+          
+          # Maintenance window
+          if broker_attrs.maintenance_window_start_time
+            maintenance_window_start_time do
+              day_of_week broker_attrs.maintenance_window_start_time[:day_of_week]
+              time_of_day broker_attrs.maintenance_window_start_time[:time_of_day]
+              time_zone broker_attrs.maintenance_window_start_time[:time_zone] if broker_attrs.maintenance_window_start_time[:time_zone]
+            end
+          end
+          
+          publicly_accessible broker_attrs.publicly_accessible if broker_attrs.publicly_accessible != false
+          security_groups broker_attrs.security_groups if broker_attrs.security_groups
+          storage_type broker_attrs.storage_type if broker_attrs.storage_type
+          subnet_ids broker_attrs.subnet_ids if broker_attrs.subnet_ids
+          
+          # Tags
+          if broker_attrs.tags&.any?
+            tags broker_attrs.tags
+          end
+        end
+        
+        # Return resource reference with outputs
+        ResourceReference.new(
+          type: 'aws_mq_broker',
+          name: name,
+          resource_attributes: broker_attrs.to_h,
+          outputs: {
+            id: "${aws_mq_broker.#{name}.id}",
+            arn: "${aws_mq_broker.#{name}.arn}",
+            broker_name: "${aws_mq_broker.#{name}.broker_name}",
+            instances: "${aws_mq_broker.#{name}.instances}",
+            console_url: "${aws_mq_broker.#{name}.instances.0.console_url}",
+            endpoints: "${aws_mq_broker.#{name}.instances.0.endpoints}"
+          }
+        )
+      end
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register(:aws, Pangea::Resources::AWS)

data/lib/pangea/resources/aws_mq_broker/types.rb

@@ -0,0 +1,181 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # MQ broker engine types
+        MqEngineType = String.enum('ActiveMQ', 'RabbitMQ')
+
+        # MQ instance types
+        MqInstanceType = String.enum(
+          'mq.t2.micro', 'mq.t3.micro',
+          'mq.m4.large', 'mq.m5.large', 'mq.m5.xlarge', 'mq.m5.2xlarge', 'mq.m5.4xlarge',
+          'mq.c4.large', 'mq.c4.xlarge', 'mq.c5.large', 'mq.c5.xlarge', 'mq.c5.2xlarge', 'mq.c5.4xlarge', 'mq.c5.9xlarge',
+          'mq.r4.large', 'mq.r4.xlarge', 'mq.r4.2xlarge', 'mq.r4.4xlarge',
+          'mq.r5.large', 'mq.r5.xlarge', 'mq.r5.2xlarge', 'mq.r5.4xlarge', 'mq.r5.12xlarge'
+        )
+
+        # MQ deployment mode
+        MqDeploymentMode = String.enum('SINGLE_INSTANCE', 'ACTIVE_STANDBY_MULTI_AZ', 'CLUSTER_MULTI_AZ')
+
+        # MQ storage type
+        MqStorageType = String.enum('ebs', 'efs')
+
+        # MQ authentication strategy
+        MqAuthenticationStrategy = String.enum('simple', 'ldap')
+
+        # MQ day of week
+        MqDayOfWeek = String.enum('MONDAY', 'TUESDAY', 'WEDNESDAY', 'THURSDAY', 'FRIDAY', 'SATURDAY', 'SUNDAY')
+
+        # MQ user configuration
+        MqUser = Hash.schema(
+          username: Resources::Types::String.constrained(size: 1..100),
+          password?: Resources::Types::String.constrained(size: 12..250).optional,
+          console_access?: Resources::Types::Bool.optional,
+          groups?: Resources::Types::Array.of(String).optional
+        )
+
+        # MQ encryption options
+        MqEncryptionOptions = Hash.schema(
+          kms_key_id?: Resources::Types::String.optional,
+          use_aws_owned_key?: Resources::Types::Bool.optional
+        )
+
+        # MQ maintenance window start time
+        MqMaintenanceWindowStartTime = Hash.schema(
+          day_of_week: MqDayOfWeek,
+          time_of_day: Resources::Types::String.constrained(format: /\A([01]?[0-9]|2[0-3]):[0-5][0-9]\z/),
+          time_zone?: Resources::Types::String.optional
+        )
+
+        # MQ logs configuration
+        MqLogs = Hash.schema(
+          general?: Resources::Types::Bool.optional,
+          audit?: Resources::Types::Bool.optional
+        )
+
+        # MQ LDAP server metadata (for LDAP authentication)
+        MqLdapServerMetadata = Hash.schema(
+          hosts: Resources::Types::Array.of(String).constrained(min_size: 1),
+          role_base: Resources::Types::String,
+          role_name?: Resources::Types::String.optional,
+          role_search_matching?: Resources::Types::String.optional,
+          role_search_subtree?: Resources::Types::Bool.optional,
+          service_account_password: Resources::Types::String,
+          service_account_username: Resources::Types::String,
+          user_base: Resources::Types::String,
+          user_role_name?: Resources::Types::String.optional,
+          user_search_matching?: Resources::Types::String.optional,
+          user_search_subtree?: Resources::Types::Bool.optional
+        )
+
+        # MQ Broker resource attributes
+        class MqBrokerAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          attribute :broker_name, Resources::Types::String.constrained(
+            format: /\A[a-zA-Z0-9_-]+\z/,
+            size: 1..50
+          )
+
+          attribute :engine_type, MqEngineType
+          
+          attribute :engine_version, Resources::Types::String
+          
+          attribute :host_instance_type, MqInstanceType
+          
+          attribute :users, Resources::Types::Array.of(MqUser).constrained(min_size: 1, max_size: 250)
+
+          attribute? :apply_immediately, Resources::Types::Bool.default(false)
+          
+          attribute? :authentication_strategy, MqAuthenticationStrategy.default('simple')
+          
+          attribute? :auto_minor_version_upgrade, Resources::Types::Bool.default(false)
+          
+          attribute? :configuration, Hash.schema(
+            id?: Resources::Types::String.optional,
+            revision?: Resources::Types::Integer.constrained(gteq: 1).optional
+          ).optional
+          
+          attribute? :deployment_mode, MqDeploymentMode.default('SINGLE_INSTANCE')
+          
+          attribute? :encryption_options, MqEncryptionOptions.optional
+          
+          attribute? :ldap_server_metadata, MqLdapServerMetadata.optional
+          
+          attribute? :logs, MqLogs.optional
+          
+          attribute? :maintenance_window_start_time, MqMaintenanceWindowStartTime.optional
+          
+          attribute? :publicly_accessible, Resources::Types::Bool.default(false)
+          
+          attribute? :security_groups, Resources::Types::Array.of(String).optional
+          
+          attribute? :storage_type, MqStorageType.optional
+          
+          attribute? :subnet_ids, Resources::Types::Array.of(String).optional
+
+          attribute? :tags, Resources::Types::AwsTags
+
+          # Custom validation
+          def self.new(attributes)
+            attrs = attributes.is_a?(Hash) ? attributes : {}
+
+            # Validate deployment mode constraints
+            if attrs[:deployment_mode] && attrs[:engine_type]
+              case attrs[:engine_type]
+              when 'ActiveMQ'
+                unless ['SINGLE_INSTANCE', 'ACTIVE_STANDBY_MULTI_AZ'].include?(attrs[:deployment_mode])
+                  raise Dry::Struct::Error, "ActiveMQ only supports SINGLE_INSTANCE and ACTIVE_STANDBY_MULTI_AZ deployment modes"
+                end
+              when 'RabbitMQ'
+                unless ['SINGLE_INSTANCE', 'CLUSTER_MULTI_AZ'].include?(attrs[:deployment_mode])
+                  raise Dry::Struct::Error, "RabbitMQ only supports SINGLE_INSTANCE and CLUSTER_MULTI_AZ deployment modes"
+                end
+              end
+            end
+
+            # Validate multi-AZ requirements
+            if attrs[:deployment_mode] && attrs[:deployment_mode].include?('MULTI_AZ')
+              unless attrs[:subnet_ids] && attrs[:subnet_ids].size >= 2
+                raise Dry::Struct::Error, "Multi-AZ deployment requires at least 2 subnet IDs"
+              end
+            end
+
+            # Validate LDAP authentication requirements
+            if attrs[:authentication_strategy] == 'ldap'
+              unless attrs[:ldap_server_metadata]
+                raise Dry::Struct::Error, "ldap_server_metadata is required when authentication_strategy is 'ldap'"
+              end
+            end
+
+            # Validate storage type constraints
+            if attrs[:storage_type] == 'efs' && attrs[:engine_type] != 'RabbitMQ'
+              raise Dry::Struct::Error, "EFS storage type is only supported for RabbitMQ brokers"
+            end
+
+            super(attrs)
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/aws_mq_broker.rbs

@@ -0,0 +1,130 @@
+# RBS type definitions for AWS MQ Broker resource
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        type mq_engine_type = "ActiveMQ" | "RabbitMQ"
+        type mq_deployment_mode = "SINGLE_INSTANCE" | "ACTIVE_STANDBY_MULTI_AZ" | "CLUSTER_MULTI_AZ"
+        type mq_storage_type = "ebs" | "efs"
+        type mq_authentication_strategy = "simple" | "ldap"
+        type mq_day_of_week = "MONDAY" | "TUESDAY" | "WEDNESDAY" | "THURSDAY" | "FRIDAY" | "SATURDAY" | "SUNDAY"
+
+        interface _MqUser
+          def username: () -> String
+          def password?: () -> String?
+          def console_access?: () -> bool?
+          def groups?: () -> Array[String]?
+        end
+
+        interface _MqEncryptionOptions
+          def kms_key_id?: () -> String?
+          def use_aws_owned_key?: () -> bool?
+        end
+
+        interface _MqMaintenanceWindowStartTime
+          def day_of_week: () -> mq_day_of_week
+          def time_of_day: () -> String
+          def time_zone?: () -> String?
+        end
+
+        interface _MqLogs
+          def general?: () -> bool?
+          def audit?: () -> bool?
+        end
+
+        interface _MqLdapServerMetadata
+          def hosts: () -> Array[String]
+          def role_base: () -> String
+          def role_name?: () -> String?
+          def role_search_matching?: () -> String?
+          def role_search_subtree?: () -> bool?
+          def service_account_password: () -> String
+          def service_account_username: () -> String
+          def user_base: () -> String
+          def user_role_name?: () -> String?
+          def user_search_matching?: () -> String?
+          def user_search_subtree?: () -> bool?
+        end
+
+        class MqBrokerAttributes < Dry::Struct
+          def self.new: (Hash[Symbol, untyped] attributes) -> instance
+
+          def broker_name: () -> String
+          def engine_type: () -> mq_engine_type
+          def engine_version: () -> String
+          def host_instance_type: () -> String
+          def users: () -> Array[_MqUser]
+          def apply_immediately?: () -> bool?
+          def authentication_strategy?: () -> mq_authentication_strategy?
+          def auto_minor_version_upgrade?: () -> bool?
+          def configuration?: () -> { id?: String?, revision?: Integer? }?
+          def deployment_mode?: () -> mq_deployment_mode?
+          def encryption_options?: () -> _MqEncryptionOptions?
+          def ldap_server_metadata?: () -> _MqLdapServerMetadata?
+          def logs?: () -> _MqLogs?
+          def maintenance_window_start_time?: () -> _MqMaintenanceWindowStartTime?
+          def publicly_accessible?: () -> bool?
+          def security_groups?: () -> Array[String]?
+          def storage_type?: () -> mq_storage_type?
+          def subnet_ids?: () -> Array[String]?
+          def tags?: () -> Hash[Symbol, String]?
+        end
+      end
+
+      # Create an AWS MQ Broker
+      def aws_mq_broker: (
+        Symbol name,
+        ?broker_name: String,
+        ?engine_type: Types::mq_engine_type,
+        ?engine_version: String,
+        ?host_instance_type: String,
+        ?users: Array[{
+          username: String,
+          ?password: String,
+          ?console_access: bool,
+          ?groups: Array[String]
+        }],
+        ?apply_immediately: bool,
+        ?authentication_strategy: Types::mq_authentication_strategy,
+        ?auto_minor_version_upgrade: bool,
+        ?configuration: {
+          ?id: String,
+          ?revision: Integer
+        },
+        ?deployment_mode: Types::mq_deployment_mode,
+        ?encryption_options: {
+          ?kms_key_id: String,
+          ?use_aws_owned_key: bool
+        },
+        ?ldap_server_metadata: {
+          hosts: Array[String],
+          role_base: String,
+          ?role_name: String,
+          ?role_search_matching: String,
+          ?role_search_subtree: bool,
+          service_account_password: String,
+          service_account_username: String,
+          user_base: String,
+          ?user_role_name: String,
+          ?user_search_matching: String,
+          ?user_search_subtree: bool
+        },
+        ?logs: {
+          ?general: bool,
+          ?audit: bool
+        },
+        ?maintenance_window_start_time: {
+          day_of_week: Types::mq_day_of_week,
+          time_of_day: String,
+          ?time_zone: String
+        },
+        ?publicly_accessible: bool,
+        ?security_groups: Array[String],
+        ?storage_type: Types::mq_storage_type,
+        ?subnet_ids: Array[String],
+        ?tags: Hash[Symbol, String]
+      ) -> ResourceReference
+    end
+  end
+end

data/lib/pangea/resources/aws_mq_configuration/resource.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/aws_mq_configuration/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    module AWS
+      # Create an AWS MQ Configuration
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] MQ configuration attributes
+      # @option attributes [String] :name The configuration name
+      # @option attributes [String] :engine_type ActiveMQ or RabbitMQ
+      # @option attributes [String] :engine_version Engine version
+      # @option attributes [String] :data Configuration data (XML for ActiveMQ, Erlang/JSON for RabbitMQ)
+      # @option attributes [String] :authentication_strategy Authentication strategy
+      # @option attributes [String] :description Configuration description
+      # @option attributes [Hash] :tags Resource tags
+      # @return [ResourceReference] Reference object with outputs
+      def aws_mq_configuration(name, attributes = {})
+        # Validate attributes using dry-struct
+        config_attrs = Types::Types::MqConfigurationAttributes.new(attributes)
+        
+        # Generate terraform resource block
+        resource(:aws_mq_configuration, name) do
+          name config_attrs.name
+          engine_type config_attrs.engine_type
+          engine_version config_attrs.engine_version
+          data config_attrs.data
+          
+          authentication_strategy config_attrs.authentication_strategy if config_attrs.authentication_strategy != 'simple'
+          description config_attrs.description if config_attrs.description
+          
+          # Tags
+          if config_attrs.tags&.any?
+            tags config_attrs.tags
+          end
+        end
+        
+        # Return resource reference with outputs
+        ResourceReference.new(
+          type: 'aws_mq_configuration',
+          name: name,
+          resource_attributes: config_attrs.to_h,
+          outputs: {
+            id: "${aws_mq_configuration.#{name}.id}",
+            arn: "${aws_mq_configuration.#{name}.arn}",
+            name: "${aws_mq_configuration.#{name}.name}",
+            latest_revision: "${aws_mq_configuration.#{name}.latest_revision}"
+          }
+        )
+      end
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register(:aws, Pangea::Resources::AWS)

data/lib/pangea/resources/aws_mq_configuration/types.rb

@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        # MQ Configuration resource attributes
+        class MqConfigurationAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          attribute :name, Resources::Types::String.constrained(
+            format: /\A[a-zA-Z0-9_-]+\z/,
+            size: 1..150
+          )
+
+          attribute :engine_type, MqEngineType
+          
+          attribute :engine_version, Resources::Types::String
+          
+          attribute :data, Resources::Types::String
+
+          attribute? :authentication_strategy, MqAuthenticationStrategy.default('simple')
+          
+          attribute? :description, Resources::Types::String.constrained(size: 0..1024).optional
+
+          attribute? :tags, Resources::Types::AwsTags
+
+          # Custom validation
+          def self.new(attributes)
+            attrs = attributes.is_a?(Hash) ? attributes : {}
+
+            # Validate configuration data format
+            if attrs[:data] && attrs[:engine_type]
+              data = attrs[:data].strip
+              
+              case attrs[:engine_type]
+              when 'ActiveMQ'
+                # ActiveMQ configurations are typically XML
+                unless data.start_with?('<?xml') || data.start_with?('<configuration')
+                  raise Dry::Struct::Error, "ActiveMQ configuration data should be XML format"
+                end
+              when 'RabbitMQ'
+                # RabbitMQ configurations are typically in Erlang format or JSON
+                unless data.include?('[') || data.include?('{') || data.match(/^\w+\s*=/)
+                  raise Dry::Struct::Error, "RabbitMQ configuration data should be in Erlang or JSON format"
+                end
+              end
+            end
+
+            super(attrs)
+          end
+
+          # Check if configuration is XML (typically ActiveMQ)
+          def xml_configuration?
+            data.strip.start_with?('<?xml') || data.strip.start_with?('<')
+          end
+
+          # Check if configuration is JSON
+          def json_configuration?
+            data.strip.start_with?('{') || data.strip.start_with?('[')
+          end
+
+          # Get configuration size in bytes
+          def configuration_size_bytes
+            data.bytesize
+          end
+        end
+      end
+    end
+  end
+end