pangea 0.0.45 → 0.0.46

data/lib/pangea/resources/aws/security_lake/aws_log_source.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module SecurityLake
-        # AWS SecurityLake AwsLogSource resource
-        module AwsLogSource
-          def aws_security_lake_aws_log_source(name, attributes = {})
-            resource(:aws_security_lake_aws_log_source, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_security_lake_aws_log_source',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_security_lake_aws_log_source.#{name}.id}",
-                arn: "${aws_security_lake_aws_log_source.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/security_lake/custom_log_source.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module SecurityLake
-        # AWS SecurityLake CustomLogSource resource
-        module CustomLogSource
-          def aws_security_lake_custom_log_source(name, attributes = {})
-            resource(:aws_security_lake_custom_log_source, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_security_lake_custom_log_source',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_security_lake_custom_log_source.#{name}.id}",
-                arn: "${aws_security_lake_custom_log_source.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/security_lake/data_lake.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module SecurityLake
-        # AWS SecurityLake DataLake resource
-        module DataLake
-          def aws_security_lake_data_lake(name, attributes = {})
-            resource(:aws_security_lake_data_lake, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_security_lake_data_lake',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_security_lake_data_lake.#{name}.id}",
-                arn: "${aws_security_lake_data_lake.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/security_lake/data_lake_exception_subscription.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module SecurityLake
-        # AWS SecurityLake DataLakeExceptionSubscription resource
-        module DataLakeExceptionSubscription
-          def aws_security_lake_data_lake_exception_subscription(name, attributes = {})
-            resource(:aws_security_lake_data_lake_exception_subscription, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_security_lake_data_lake_exception_subscription',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_security_lake_data_lake_exception_subscription.#{name}.id}",
-                arn: "${aws_security_lake_data_lake_exception_subscription.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/security_lake/organization_configuration.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module SecurityLake
-        # AWS SecurityLake OrganizationConfiguration resource
-        module OrganizationConfiguration
-          def aws_security_lake_organization_configuration(name, attributes = {})
-            resource(:aws_security_lake_organization_configuration, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_security_lake_organization_configuration',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_security_lake_organization_configuration.#{name}.id}",
-                arn: "${aws_security_lake_organization_configuration.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/security_lake/subscriber.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module SecurityLake
-        # AWS SecurityLake Subscriber resource
-        module Subscriber
-          def aws_security_lake_subscriber(name, attributes = {})
-            resource(:aws_security_lake_subscriber, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_security_lake_subscriber',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_security_lake_subscriber.#{name}.id}",
-                arn: "${aws_security_lake_subscriber.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/security_lake/subscriber_notification.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module SecurityLake
-        # AWS SecurityLake SubscriberNotification resource
-        module SubscriberNotification
-          def aws_security_lake_subscriber_notification(name, attributes = {})
-            resource(:aws_security_lake_subscriber_notification, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_security_lake_subscriber_notification',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_security_lake_subscriber_notification.#{name}.id}",
-                arn: "${aws_security_lake_subscriber_notification.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/security_lake.rb

@@ -1,138 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require_relative 'security_lake/data_lake'
-require_relative 'security_lake/custom_log_source'
-require_relative 'security_lake/aws_log_source'
-require_relative 'security_lake/subscriber'
-require_relative 'security_lake/subscriber_notification'
-require_relative 'security_lake/data_lake_exception_subscription'
-require_relative 'security_lake/organization_configuration'
-
-module Pangea
-  module Resources
-    module AWS
-      # AWS Security Lake service module
-      # Provides type-safe resource functions for Security Lake centralized security data management
-      module SecurityLake
-        # Creates a Security Lake data lake for centralized security data storage
-        #
-        # @param name [Symbol] Unique name for the data lake resource
-        # @param attributes [Hash] Configuration attributes for the data lake
-        # @return [SecurityLake::DataLake::DataLakeReference] Reference to the created data lake
-        def aws_securitylake_data_lake(name, attributes = {})
-          resource = SecurityLake::DataLake.new(
-            name: name,
-            synthesizer: synthesizer,
-            attributes: SecurityLake::DataLake::Attributes.new(attributes)
-          )
-          resource.synthesize
-          resource.reference
-        end
-
-        # Creates a custom log source for Security Lake
-        #
-        # @param name [Symbol] Unique name for the custom log source resource
-        # @param attributes [Hash] Configuration attributes for the custom log source
-        # @return [SecurityLake::CustomLogSource::CustomLogSourceReference] Reference to the created log source
-        def aws_securitylake_custom_log_source(name, attributes = {})
-          resource = SecurityLake::CustomLogSource.new(
-            name: name,
-            synthesizer: synthesizer,
-            attributes: SecurityLake::CustomLogSource::Attributes.new(attributes)
-          )
-          resource.synthesize
-          resource.reference
-        end
-
-        # Enables AWS native log sources for Security Lake
-        #
-        # @param name [Symbol] Unique name for the AWS log source resource
-        # @param attributes [Hash] Configuration attributes for the AWS log source
-        # @return [SecurityLake::AwsLogSource::AwsLogSourceReference] Reference to the created log source
-        def aws_securitylake_aws_log_source(name, attributes = {})
-          resource = SecurityLake::AwsLogSource.new(
-            name: name,
-            synthesizer: synthesizer,
-            attributes: SecurityLake::AwsLogSource::Attributes.new(attributes)
-          )
-          resource.synthesize
-          resource.reference
-        end
-
-        # Creates a Security Lake subscriber for data access
-        #
-        # @param name [Symbol] Unique name for the subscriber resource
-        # @param attributes [Hash] Configuration attributes for the subscriber
-        # @return [SecurityLake::Subscriber::SubscriberReference] Reference to the created subscriber
-        def aws_securitylake_subscriber(name, attributes = {})
-          resource = SecurityLake::Subscriber.new(
-            name: name,
-            synthesizer: synthesizer,
-            attributes: SecurityLake::Subscriber::Attributes.new(attributes)
-          )
-          resource.synthesize
-          resource.reference
-        end
-
-        # Configures notifications for Security Lake subscribers
-        #
-        # @param name [Symbol] Unique name for the subscriber notification resource
-        # @param attributes [Hash] Configuration attributes for the notification
-        # @return [SecurityLake::SubscriberNotification::SubscriberNotificationReference] Reference to the created notification
-        def aws_securitylake_subscriber_notification(name, attributes = {})
-          resource = SecurityLake::SubscriberNotification.new(
-            name: name,
-            synthesizer: synthesizer,
-            attributes: SecurityLake::SubscriberNotification::Attributes.new(attributes)
-          )
-          resource.synthesize
-          resource.reference
-        end
-
-        # Creates an exception subscription for Security Lake error handling
-        #
-        # @param name [Symbol] Unique name for the exception subscription resource
-        # @param attributes [Hash] Configuration attributes for the exception subscription
-        # @return [SecurityLake::DataLakeExceptionSubscription::DataLakeExceptionSubscriptionReference] Reference to the created subscription
-        def aws_securitylake_data_lake_exception_subscription(name, attributes = {})
-          resource = SecurityLake::DataLakeExceptionSubscription.new(
-            name: name,
-            synthesizer: synthesizer,
-            attributes: SecurityLake::DataLakeExceptionSubscription::Attributes.new(attributes)
-          )
-          resource.synthesize
-          resource.reference
-        end
-
-        # Configures Security Lake for AWS Organizations
-        #
-        # @param name [Symbol] Unique name for the organization configuration resource
-        # @param attributes [Hash] Configuration attributes for the organization settings
-        # @return [SecurityLake::OrganizationConfiguration::OrganizationConfigurationReference] Reference to the created configuration
-        def aws_securitylake_organization_configuration(name, attributes = {})
-          resource = SecurityLake::OrganizationConfiguration.new(
-            name: name,
-            synthesizer: synthesizer,
-            attributes: SecurityLake::OrganizationConfiguration::Attributes.new(attributes)
-          )
-          resource.synthesize
-          resource.reference
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/servicecatalog/constraint.rb

@@ -1,93 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-module Pangea
-  module Resources
-    module AWS
-      module ServiceCatalog
-        # AWS Service Catalog Constraint resource
-        # This resource manages constraints on Service Catalog products within a portfolio.
-        # Constraints control the deployment options and parameters for products when they
-        # are launched by end users.
-        #
-        # @see https://docs.aws.amazon.com/servicecatalog/latest/adminguide/constraints.html
-        module Constraint
-          # Creates an AWS Service Catalog Constraint
-          #
-          # @param name [Symbol] The unique name for this resource instance
-          # @param attributes [Hash] The configuration options for the constraint
-          # @option attributes [String] :portfolio_id The portfolio identifier (required)
-          # @option attributes [String] :product_id The product identifier (required)
-          # @option attributes [String] :type The type of constraint (required)
-          # @option attributes [String] :parameters JSON string of constraint parameters (required for most types)
-          # @option attributes [String] :description A description of the constraint
-          # @option attributes [String] :accept_language The language code (default: "en")
-          #
-          # @example Launch constraint
-          #   aws_servicecatalog_constraint(:launch_role_constraint, {
-          #     portfolio_id: ref(:aws_servicecatalog_portfolio, :main, :id),
-          #     product_id: ref(:aws_servicecatalog_product, :web_app, :id),
-          #     type: "LAUNCH",
-          #     parameters: JSON.generate({
-          #       RoleArn: ref(:aws_iam_role, :launch_role, :arn)
-          #     })
-          #   })
-          #
-          # @example Template constraint
-          #   aws_servicecatalog_constraint(:parameter_constraint, {
-          #     portfolio_id: ref(:aws_servicecatalog_portfolio, :main, :id),
-          #     product_id: ref(:aws_servicecatalog_product, :database, :id),
-          #     type: "TEMPLATE",
-          #     description: "Restrict database instance types",
-          #     parameters: JSON.generate({
-          #       Rules: {
-          #         InstanceTypeRule: {
-          #           Assertions: [{
-          #             Assert: { "Fn::Contains": [["db.t3.micro", "db.t3.small"], { "Ref": "InstanceType" }] },
-          #             AssertDescription: "Instance type must be db.t3.micro or db.t3.small"
-          #           }]
-          #         }
-          #       }
-          #     })
-          #   })
-          #
-          # @example Notification constraint
-          #   aws_servicecatalog_constraint(:notification_constraint, {
-          #     portfolio_id: ref(:aws_servicecatalog_portfolio, :main, :id),
-          #     product_id: ref(:aws_servicecatalog_product, :web_app, :id),
-          #     type: "NOTIFICATION",
-          #     description: "Send notifications on stack events",
-          #     parameters: JSON.generate({
-          #       NotificationArns: [ref(:aws_sns_topic, :service_catalog_events, :arn)]
-          #     })
-          #   })
-          #
-          # @return [ConstraintResource] The constraint resource
-          def aws_servicecatalog_constraint(name, attributes = {})
-            resource :aws_servicecatalog_constraint, name do
-              portfolio_id attributes[:portfolio_id] if attributes[:portfolio_id]
-              product_id attributes[:product_id] if attributes[:product_id]
-              type attributes[:type] if attributes[:type]
-              parameters attributes[:parameters] if attributes[:parameters]
-              description attributes[:description] if attributes[:description]
-              accept_language attributes[:accept_language] if attributes[:accept_language]
-            end
-          end
-        end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws/servicecatalog/constraint_resource.rb

@@ -1,55 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-
-module Pangea
-  module Resources
-    module AWS
-      module Servicecatalog
-        # AWS Servicecatalog ConstraintResource resource
-        module ConstraintResource
-          def aws_servicecatalog_constraint_resource(name, attributes = {})
-            resource(:aws_servicecatalog_constraint_resource, name) do
-              attributes.each do |key, value|
-                if value.is_a?(Hash) && !value.empty?
-                  send(key) do
-                    value.each { |k, v| send(k, v) if v }
-                  end
-                elsif value.is_a?(Array) && !value.empty?
-                  value.each { |item| send(key, item) }
-                elsif value && !value.is_a?(Array) && !value.is_a?(Hash)
-                  send(key, value)
-                end
-              end
-            end
-            
-            ResourceReference.new(
-              type: 'aws_servicecatalog_constraint_resource',
-              name: name,
-              resource_attributes: attributes,
-              outputs: {
-                id: "${aws_servicecatalog_constraint_resource.#{name}.id}",
-                arn: "${aws_servicecatalog_constraint_resource.#{name}.arn}"
-              }
-            )
-          end
-        end
-      end
-    end
-  end
-end