pangea 0.0.42 → 0.0.45

data/lib/pangea/resources/aws_wafv2_web_acl.rbs

@@ -0,0 +1,309 @@
+# RBS type definitions for AWS WAF v2 Web ACL resource
+
+module Pangea
+  module Resources
+    module AWS
+      module Types
+        type wafv2_scope = "REGIONAL" | "CLOUDFRONT"
+        type wafv2_default_action_type = "ALLOW" | "BLOCK"  
+        type wafv2_rule_action_type = "ALLOW" | "BLOCK" | "COUNT" | "CAPTCHA" | "CHALLENGE"
+        type wafv2_positional_constraint = "EXACTLY" | "STARTS_WITH" | "ENDS_WITH" | "CONTAINS" | "CONTAINS_WORD"
+        type wafv2_comparison_operator = "EQ" | "NE" | "LE" | "LT" | "GE" | "GT"
+        type wafv2_text_transformation = "NONE" | "COMPRESS_WHITE_SPACE" | "HTML_ENTITY_DECODE" | "LOWERCASE" | "CMD_LINE" | "URL_DECODE" | "BASE64_DECODE" | "HEX_DECODE" | "MD5" | "REPLACE_COMMENTS" | "ESCAPE_SEQ_DECODE" | "SQL_HEX_DECODE" | "CSS_DECODE" | "JS_DECODE" | "NORMALIZE_PATH" | "NORMALIZE_PATH_WIN" | "REMOVE_NULLS" | "REPLACE_NULLS" | "BASE64_DECODE_EXT" | "URL_DECODE_UNI" | "UTF8_TO_UNICODE"
+        type wafv2_oversize_handling = "CONTINUE" | "MATCH" | "NO_MATCH"
+        type wafv2_fallback_behavior = "MATCH" | "NO_MATCH"
+        type wafv2_aggregate_key_type = "IP" | "FORWARDED_IP"
+        type wafv2_json_match_scope = "ALL" | "KEY" | "VALUE"
+        type wafv2_invalid_fallback_behavior = "MATCH" | "NO_MATCH" | "EVALUATE_AS_STRING"
+        type wafv2_content_type = "TEXT_PLAIN" | "TEXT_HTML" | "APPLICATION_JSON"
+        
+        interface _WafV2VisibilityConfig
+          def cloudwatch_metrics_enabled: () -> bool
+          def metric_name: () -> String
+          def sampled_requests_enabled: () -> bool
+        end
+        
+        interface _WafV2FieldToMatch
+          def all_query_arguments?: () -> Hash[Symbol, untyped]?
+          def body?: () -> {
+            oversize_handling?: wafv2_oversize_handling?
+          }?
+          def method?: () -> Hash[Symbol, untyped]?
+          def query_string?: () -> Hash[Symbol, untyped]?
+          def single_header?: () -> { name: String }?
+          def single_query_argument?: () -> { name: String }?
+          def uri_path?: () -> Hash[Symbol, untyped]?
+          def json_body?: () -> {
+            match_pattern: {
+              all?: Hash[Symbol, untyped]?,
+              included_paths?: Array[String]?
+            },
+            match_scope: wafv2_json_match_scope,
+            invalid_fallback_behavior?: wafv2_invalid_fallback_behavior?,
+            oversize_handling?: wafv2_oversize_handling?
+          }?
+        end
+
+        interface _WafV2TextTransformation
+          def priority: () -> Integer
+          def type: () -> wafv2_text_transformation
+        end
+
+        interface _WafV2Statement
+          def byte_match_statement?: () -> {
+            field_to_match: _WafV2FieldToMatch,
+            positional_constraint: wafv2_positional_constraint,
+            search_string: String,
+            text_transformations: Array[_WafV2TextTransformation]
+          }?
+          def sqli_match_statement?: () -> {
+            field_to_match: _WafV2FieldToMatch,
+            text_transformations: Array[_WafV2TextTransformation]
+          }?
+          def xss_match_statement?: () -> {
+            field_to_match: _WafV2FieldToMatch,
+            text_transformations: Array[_WafV2TextTransformation]
+          }?
+          def size_constraint_statement?: () -> {
+            field_to_match: _WafV2FieldToMatch,
+            comparison_operator: wafv2_comparison_operator,
+            size: Integer,
+            text_transformations: Array[_WafV2TextTransformation]
+          }?
+          def geo_match_statement?: () -> {
+            country_codes: Array[String],
+            forwarded_ip_config?: {
+              header_name: String,
+              fallback_behavior: wafv2_fallback_behavior
+            }?
+          }?
+          def ip_set_reference_statement?: () -> {
+            arn: String,
+            ip_set_forwarded_ip_config?: {
+              header_name: String,
+              fallback_behavior: wafv2_fallback_behavior,
+              position: String
+            }?
+          }?
+          def rule_group_reference_statement?: () -> {
+            arn: String,
+            excluded_rules?: Array[{ name: String }]?
+          }?
+          def managed_rule_group_statement?: () -> {
+            vendor_name: String,
+            name: String,
+            version?: String?,
+            excluded_rules?: Array[{ name: String }]?,
+            scope_down_statement?: Hash[Symbol, untyped]?,
+            managed_rule_group_configs?: Array[Hash[Symbol, untyped]]?
+          }?
+          def rate_based_statement?: () -> {
+            limit: Integer,
+            aggregate_key_type: wafv2_aggregate_key_type,
+            forwarded_ip_config?: {
+              header_name: String,
+              fallback_behavior: wafv2_fallback_behavior
+            }?,
+            scope_down_statement?: Hash[Symbol, untyped]?
+          }?
+          def and_statement?: () -> {
+            statements: Array[Hash[Symbol, untyped]]
+          }?
+          def or_statement?: () -> {
+            statements: Array[Hash[Symbol, untyped]]
+          }?
+          def not_statement?: () -> {
+            statement: Hash[Symbol, untyped]
+          }?
+        end
+
+        interface _WafV2CustomRequestHandling
+          def insert_headers: () -> Array[{ name: String, value: String }]
+        end
+
+        interface _WafV2CustomResponse
+          def response_code: () -> Integer
+          def custom_response_body_key?: () -> String?
+          def response_headers?: () -> Array[{ name: String, value: String }]?
+        end
+
+        interface _WafV2RuleAction
+          def allow?: () -> {
+            custom_request_handling?: _WafV2CustomRequestHandling?
+          }?
+          def block?: () -> {
+            custom_response?: _WafV2CustomResponse?
+          }?
+          def count?: () -> {
+            custom_request_handling?: _WafV2CustomRequestHandling?
+          }?
+          def captcha?: () -> {
+            custom_request_handling?: _WafV2CustomRequestHandling?
+          }?
+          def challenge?: () -> {
+            custom_request_handling?: _WafV2CustomRequestHandling?
+          }?
+        end
+
+        interface _WafV2DefaultAction
+          def allow?: () -> {
+            custom_request_handling?: _WafV2CustomRequestHandling?
+          }?
+          def block?: () -> {
+            custom_response?: _WafV2CustomResponse?
+          }?
+        end
+
+        interface _WafV2ImmunityTimeProperty
+          def immunity_time: () -> Integer
+        end
+
+        interface _WafV2Rule
+          def name: () -> String
+          def priority: () -> Integer
+          def action: () -> _WafV2RuleAction
+          def statement: () -> _WafV2Statement
+          def visibility_config: () -> _WafV2VisibilityConfig
+          def rule_labels?: () -> Array[{ name: String }]
+          def captcha_config?: () -> {
+            immunity_time_property: _WafV2ImmunityTimeProperty
+          }?
+          def challenge_config?: () -> {
+            immunity_time_property: _WafV2ImmunityTimeProperty
+          }?
+        end
+
+        class WafV2VisibilityConfig < Dry::Struct
+          def self.new: (Hash[Symbol, untyped] attributes) -> instance
+
+          def cloudwatch_metrics_enabled: () -> bool
+          def metric_name: () -> String  
+          def sampled_requests_enabled: () -> bool
+        end
+
+        class WafV2Statement < Dry::Struct
+          def self.new: (Hash[Symbol, untyped] attributes) -> instance
+        end
+
+        class WafV2RuleAction < Dry::Struct
+          def self.new: (Hash[Symbol, untyped] attributes) -> instance
+        end
+
+        class WafV2Rule < Dry::Struct
+          def self.new: (Hash[Symbol, untyped] attributes) -> instance
+        end
+
+        class WafV2DefaultAction < Dry::Struct
+          def self.new: (Hash[Symbol, untyped] attributes) -> instance
+        end
+
+        class WafV2WebAclAttributes < Dry::Struct
+          def self.new: (Hash[Symbol, untyped] attributes) -> instance
+
+          def name: () -> String
+          def scope: () -> String
+          def default_action: () -> WafV2DefaultAction
+          def description?: () -> String?
+          def rules: () -> Array[WafV2Rule]
+          def visibility_config: () -> WafV2VisibilityConfig
+          def tags: () -> Hash[Symbol, String]
+          def custom_response_bodies: () -> Hash[String, { content: String, content_type: wafv2_content_type }]
+          def token_domains: () -> Array[String]
+          def challenge_config?: () -> { immunity_time_property: _WafV2ImmunityTimeProperty }?
+          def captcha_config?: () -> { immunity_time_property: _WafV2ImmunityTimeProperty }?
+
+          def total_capacity_units_estimate: () -> Integer
+          def has_rate_limiting?: () -> bool
+          def has_geo_blocking?: () -> bool
+          def has_managed_rules?: () -> bool
+          def uses_custom_responses?: () -> bool
+        end
+      end
+
+      # Create an AWS WAF v2 Web ACL
+      def aws_wafv2_web_acl: (
+        Symbol name,
+        ?name: String,
+        ?scope: Types::wafv2_scope,
+        ?default_action: {
+          allow?: {
+            custom_request_handling?: {
+              insert_headers: Array[{ name: String, value: String }]
+            }
+          },
+          block?: {
+            custom_response?: {
+              response_code: Integer,
+              custom_response_body_key?: String,
+              response_headers?: Array[{ name: String, value: String }]
+            }
+          }
+        },
+        ?description: String,
+        ?rules: Array[{
+          name: String,
+          priority: Integer,
+          action: {
+            allow?: {
+              custom_request_handling?: {
+                insert_headers: Array[{ name: String, value: String }]
+              }
+            },
+            block?: {
+              custom_response?: {
+                response_code: Integer,
+                custom_response_body_key?: String,
+                response_headers?: Array[{ name: String, value: String }]
+              }
+            },
+            count?: {
+              custom_request_handling?: {
+                insert_headers: Array[{ name: String, value: String }]
+              }
+            },
+            captcha?: {
+              custom_request_handling?: {
+                insert_headers: Array[{ name: String, value: String }]
+              }
+            },
+            challenge?: {
+              custom_request_handling?: {
+                insert_headers: Array[{ name: String, value: String }]
+              }
+            }
+          },
+          statement: Hash[Symbol, untyped],
+          visibility_config: {
+            cloudwatch_metrics_enabled: bool,
+            metric_name: String,
+            sampled_requests_enabled: bool
+          },
+          rule_labels?: Array[{ name: String }],
+          captcha_config?: {
+            immunity_time_property: { immunity_time: Integer }
+          },
+          challenge_config?: {
+            immunity_time_property: { immunity_time: Integer }
+          }
+        }],
+        ?visibility_config: {
+          cloudwatch_metrics_enabled: bool,
+          metric_name: String,
+          sampled_requests_enabled: bool
+        },
+        ?tags: Hash[Symbol, String],
+        ?custom_response_bodies: Hash[String, {
+          content: String,
+          content_type: Types::wafv2_content_type
+        }],
+        ?token_domains: Array[String],
+        ?challenge_config: {
+          immunity_time_property: { immunity_time: Integer }
+        },
+        ?captcha_config: {
+          immunity_time_property: { immunity_time: Integer }
+        }
+      ) -> ResourceReference
+    end
+  end
+end

data/lib/pangea/resources/aws_wavelength.rb

@@ -0,0 +1,323 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+module Pangea
+  module Resources
+    module AWS
+      # AWS Wavelength - Ultra-low latency applications at the edge of 5G networks
+      # Wavelength embeds AWS compute and storage services within 5G networks, providing mobile edge computing infrastructure for developing, deploying, and scaling ultra-low-latency applications
+      
+      # Create a Carrier Gateway for Wavelength Zones
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Carrier gateway attributes
+      # @option attributes [String] :vpc_id (required) The VPC ID
+      # @option attributes [Hash<String,String>] :tags Resource tags
+      # @return [ResourceReference] Reference object with outputs
+      def aws_ec2_carrier_gateway(name, attributes = {})
+        required_attrs = %i[vpc_id]
+        optional_attrs = {
+          tags: {}
+        }
+        
+        cgw_attrs = optional_attrs.merge(attributes)
+        
+        required_attrs.each do |attr|
+          raise ArgumentError, "Missing required attribute: #{attr}" unless cgw_attrs.key?(attr)
+        end
+        
+        resource(:aws_ec2_carrier_gateway, name) do
+          vpc_id cgw_attrs[:vpc_id]
+          
+          if cgw_attrs[:tags].any?
+            tags cgw_attrs[:tags]
+          end
+        end
+        
+        ResourceReference.new(
+          type: 'aws_ec2_carrier_gateway',
+          name: name,
+          resource_attributes: cgw_attrs,
+          outputs: {
+            id: "${aws_ec2_carrier_gateway.#{name}.id}",
+            arn: "${aws_ec2_carrier_gateway.#{name}.arn}",
+            owner_id: "${aws_ec2_carrier_gateway.#{name}.owner_id}",
+            state: "${aws_ec2_carrier_gateway.#{name}.state}",
+            vpc_id: "${aws_ec2_carrier_gateway.#{name}.vpc_id}"
+          }
+        )
+      end
+      
+      # Create a Wavelength workload
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Workload attributes
+      # @option attributes [String] :workload_name (required) The workload name
+      # @option attributes [String] :workload_type (required) The workload type (e.g., "COMPUTE", "STORAGE")
+      # @option attributes [String] :wavelength_zone (required) The Wavelength zone
+      # @option attributes [Hash] :configuration Workload configuration
+      # @option attributes [String] :description Workload description
+      # @option attributes [Hash<String,String>] :tags Resource tags
+      # @return [ResourceReference] Reference object with outputs
+      def aws_wavelength_workload(name, attributes = {})
+        required_attrs = %i[workload_name workload_type wavelength_zone]
+        optional_attrs = {
+          configuration: {},
+          description: nil,
+          tags: {}
+        }
+        
+        workload_attrs = optional_attrs.merge(attributes)
+        
+        required_attrs.each do |attr|
+          raise ArgumentError, "Missing required attribute: #{attr}" unless workload_attrs.key?(attr)
+        end
+        
+        resource(:aws_wavelength_workload, name) do
+          workload_name workload_attrs[:workload_name]
+          workload_type workload_attrs[:workload_type]
+          wavelength_zone workload_attrs[:wavelength_zone]
+          description workload_attrs[:description] if workload_attrs[:description]
+          
+          if workload_attrs[:configuration].any?
+            configuration workload_attrs[:configuration]
+          end
+          
+          if workload_attrs[:tags].any?
+            tags workload_attrs[:tags]
+          end
+        end
+        
+        ResourceReference.new(
+          type: 'aws_wavelength_workload',
+          name: name,
+          resource_attributes: workload_attrs,
+          outputs: {
+            id: "${aws_wavelength_workload.#{name}.id}",
+            arn: "${aws_wavelength_workload.#{name}.arn}",
+            status: "${aws_wavelength_workload.#{name}.status}",
+            creation_time: "${aws_wavelength_workload.#{name}.creation_time}"
+          }
+        )
+      end
+      
+      # Create a Wavelength deployment
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Deployment attributes
+      # @option attributes [String] :deployment_name (required) The deployment name
+      # @option attributes [String] :workload_id (required) The workload ID
+      # @option attributes [String] :deployment_configuration (required) The deployment configuration
+      # @option attributes [String] :description Deployment description
+      # @option attributes [Hash<String,String>] :tags Resource tags
+      # @return [ResourceReference] Reference object with outputs
+      def aws_wavelength_deployment(name, attributes = {})
+        required_attrs = %i[deployment_name workload_id deployment_configuration]
+        optional_attrs = {
+          description: nil,
+          tags: {}
+        }
+        
+        deploy_attrs = optional_attrs.merge(attributes)
+        
+        required_attrs.each do |attr|
+          raise ArgumentError, "Missing required attribute: #{attr}" unless deploy_attrs.key?(attr)
+        end
+        
+        resource(:aws_wavelength_deployment, name) do
+          deployment_name deploy_attrs[:deployment_name]
+          workload_id deploy_attrs[:workload_id]
+          deployment_configuration deploy_attrs[:deployment_configuration]
+          description deploy_attrs[:description] if deploy_attrs[:description]
+          
+          if deploy_attrs[:tags].any?
+            tags deploy_attrs[:tags]
+          end
+        end
+        
+        ResourceReference.new(
+          type: 'aws_wavelength_deployment',
+          name: name,
+          resource_attributes: deploy_attrs,
+          outputs: {
+            id: "${aws_wavelength_deployment.#{name}.id}",
+            arn: "${aws_wavelength_deployment.#{name}.arn}",
+            status: "${aws_wavelength_deployment.#{name}.status}",
+            deployment_url: "${aws_wavelength_deployment.#{name}.deployment_url}"
+          }
+        )
+      end
+      
+      # Create a Wavelength application deployment
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Application deployment attributes
+      # @option attributes [String] :application_name (required) The application name
+      # @option attributes [String] :wavelength_zone (required) The Wavelength zone
+      # @option attributes [Hash] :application_configuration Application configuration
+      # @option attributes [String] :runtime_environment Runtime environment (e.g., "docker", "kubernetes")
+      # @option attributes [Hash] :network_configuration Network configuration
+      # @option attributes [Hash<String,String>] :tags Resource tags
+      # @return [ResourceReference] Reference object with outputs
+      def aws_wavelength_application_deployment(name, attributes = {})
+        required_attrs = %i[application_name wavelength_zone]
+        optional_attrs = {
+          application_configuration: {},
+          runtime_environment: "docker",
+          network_configuration: {},
+          tags: {}
+        }
+        
+        app_attrs = optional_attrs.merge(attributes)
+        
+        required_attrs.each do |attr|
+          raise ArgumentError, "Missing required attribute: #{attr}" unless app_attrs.key?(attr)
+        end
+        
+        resource(:aws_wavelength_application_deployment, name) do
+          application_name app_attrs[:application_name]
+          wavelength_zone app_attrs[:wavelength_zone]
+          runtime_environment app_attrs[:runtime_environment]
+          
+          if app_attrs[:application_configuration].any?
+            application_configuration app_attrs[:application_configuration]
+          end
+          
+          if app_attrs[:network_configuration].any?
+            network_configuration app_attrs[:network_configuration]
+          end
+          
+          if app_attrs[:tags].any?
+            tags app_attrs[:tags]
+          end
+        end
+        
+        ResourceReference.new(
+          type: 'aws_wavelength_application_deployment',
+          name: name,
+          resource_attributes: app_attrs,
+          outputs: {
+            id: "${aws_wavelength_application_deployment.#{name}.id}",
+            arn: "${aws_wavelength_application_deployment.#{name}.arn}",
+            endpoint_url: "${aws_wavelength_application_deployment.#{name}.endpoint_url}",
+            status: "${aws_wavelength_application_deployment.#{name}.status}"
+          }
+        )
+      end
+      
+      # Create a Wavelength network interface
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Network interface attributes
+      # @option attributes [String] :subnet_id (required) The subnet ID (must be in Wavelength zone)
+      # @option attributes [String] :description Interface description
+      # @option attributes [Array<String>] :security_groups Security group IDs
+      # @option attributes [String] :private_ip Private IP address
+      # @option attributes [Boolean] :source_dest_check Source/destination check (default: true)
+      # @option attributes [Hash<String,String>] :tags Resource tags
+      # @return [ResourceReference] Reference object with outputs
+      def aws_wavelength_network_interface(name, attributes = {})
+        required_attrs = %i[subnet_id]
+        optional_attrs = {
+          description: nil,
+          security_groups: [],
+          private_ip: nil,
+          source_dest_check: true,
+          tags: {}
+        }
+        
+        eni_attrs = optional_attrs.merge(attributes)
+        
+        required_attrs.each do |attr|
+          raise ArgumentError, "Missing required attribute: #{attr}" unless eni_attrs.key?(attr)
+        end
+        
+        resource(:aws_network_interface, name) do
+          subnet_id eni_attrs[:subnet_id]
+          description eni_attrs[:description] if eni_attrs[:description]
+          security_groups eni_attrs[:security_groups] if eni_attrs[:security_groups].any?
+          private_ip eni_attrs[:private_ip] if eni_attrs[:private_ip]
+          source_dest_check eni_attrs[:source_dest_check]
+          
+          if eni_attrs[:tags].any?
+            tags eni_attrs[:tags]
+          end
+        end
+        
+        ResourceReference.new(
+          type: 'aws_network_interface',
+          name: name,
+          resource_attributes: eni_attrs,
+          outputs: {
+            id: "${aws_network_interface.#{name}.id}",
+            arn: "${aws_network_interface.#{name}.arn}",
+            mac_address: "${aws_network_interface.#{name}.mac_address}",
+            private_dns_name: "${aws_network_interface.#{name}.private_dns_name}",
+            private_ip: "${aws_network_interface.#{name}.private_ip}",
+            private_ips: "${aws_network_interface.#{name}.private_ips}",
+            security_groups: "${aws_network_interface.#{name}.security_groups}",
+            subnet_id: "${aws_network_interface.#{name}.subnet_id}"
+          }
+        )
+      end
+      
+      # Query Wavelength edge location mappings
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Edge location attributes
+      # @option attributes [String] :region The AWS region
+      # @option attributes [String] :carrier_name The carrier name (e.g., "verizon", "att")
+      # @return [ResourceReference] Reference object with outputs
+      def aws_wavelength_edge_location_mapping(name, attributes = {})
+        optional_attrs = {
+          region: nil,
+          carrier_name: nil
+        }
+        
+        edge_attrs = optional_attrs.merge(attributes)
+        
+        data(:aws_availability_zones, name) do
+          state "available"
+          
+          # Filter for Wavelength zones
+          filter do
+            name "zone-type"
+            values ["wavelength-zone"]
+          end
+          
+          if edge_attrs[:region]
+            filter do
+              name "region-name"
+              values [edge_attrs[:region]]
+            end
+          end
+        end
+        
+        ResourceReference.new(
+          type: 'aws_availability_zones',
+          name: name,
+          resource_attributes: edge_attrs,
+          outputs: {
+            id: "${data.aws_availability_zones.#{name}.id}",
+            names: "${data.aws_availability_zones.#{name}.names}",
+            zone_ids: "${data.aws_availability_zones.#{name}.zone_ids}",
+            group_names: "${data.aws_availability_zones.#{name}.group_names}"
+          }
+        )
+      end
+    end
+  end
+end