pangea 0.0.45 → 0.0.46

data/lib/pangea/resources/aws_sns_subscription/resource.rb

@@ -1,99 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-require 'pangea/resources/aws_sns_subscription/types'
-require 'pangea/resource_registry'
-
-module Pangea
-  module Resources
-    module AWS
-      # Create an AWS SNS Subscription with type-safe attributes
-      #
-      # @param name [Symbol] The resource name
-      # @param attributes [Hash] SNS subscription attributes
-      # @return [ResourceReference] Reference object with outputs and computed properties
-      def aws_sns_subscription(name, attributes = {})
-        # Validate attributes using dry-struct
-        subscription_attrs = Types::SNSSubscriptionAttributes.new(attributes)
-        
-        # Generate terraform resource block via terraform-synthesizer
-        resource(:aws_sns_subscription, name) do
-          topic_arn subscription_attrs.topic_arn
-          protocol subscription_attrs.protocol
-          endpoint subscription_attrs.endpoint
-          
-          # Set raw message delivery if not default
-          if subscription_attrs.raw_message_delivery
-            raw_message_delivery subscription_attrs.raw_message_delivery
-          end
-          
-          # Set filter policy if provided
-          if subscription_attrs.filter_policy
-            filter_policy subscription_attrs.filter_policy
-            filter_policy_scope subscription_attrs.filter_policy_scope
-          end
-          
-          # Set redrive policy if provided
-          redrive_policy subscription_attrs.redrive_policy if subscription_attrs.redrive_policy
-          
-          # Set subscription role ARN if provided (required for Firehose)
-          subscription_role_arn subscription_attrs.subscription_role_arn if subscription_attrs.subscription_role_arn
-          
-          # Set delivery policy if provided (HTTP/S only)
-          delivery_policy subscription_attrs.delivery_policy if subscription_attrs.delivery_policy
-          
-          # Set auto-confirmation if true
-          endpoint_auto_confirms subscription_attrs.endpoint_auto_confirms if subscription_attrs.endpoint_auto_confirms
-          
-          # Set confirmation timeout if provided
-          confirmation_timeout_in_minutes subscription_attrs.confirmation_timeout_in_minutes if subscription_attrs.confirmation_timeout_in_minutes
-        end
-        
-        # Return resource reference with available outputs
-        ResourceReference.new(
-          type: 'aws_sns_subscription',
-          name: name,
-          resource_attributes: subscription_attrs.to_h,
-          outputs: {
-            id: "${aws_sns_subscription.#{name}.id}",
-            arn: "${aws_sns_subscription.#{name}.arn}",
-            topic_arn: subscription_attrs.topic_arn,
-            protocol: subscription_attrs.protocol,
-            endpoint: subscription_attrs.endpoint,
-            owner_id: "${aws_sns_subscription.#{name}.owner_id}",
-            confirmation_was_authenticated: "${aws_sns_subscription.#{name}.confirmation_was_authenticated}",
-            pending_confirmation: "${aws_sns_subscription.#{name}.pending_confirmation}"
-          },
-          computed: {
-            requires_confirmation: subscription_attrs.requires_confirmation?,
-            supports_filter_policy: subscription_attrs.supports_filter_policy?,
-            supports_raw_delivery: subscription_attrs.supports_raw_delivery?,
-            supports_dlq: subscription_attrs.supports_dlq?,
-            is_email_subscription: subscription_attrs.is_email_subscription?,
-            is_webhook_subscription: subscription_attrs.is_webhook_subscription?,
-            filter_policy_attributes: subscription_attrs.filter_policy_attributes,
-            has_numeric_filters: subscription_attrs.has_numeric_filters?
-          }
-        )
-      end
-    end
-  end
-end
-
-# Auto-register this module when it's loaded
-Pangea::ResourceRegistry.register(:aws, Pangea::Resources::AWS)

data/lib/pangea/resources/aws_sns_subscription/types.rb

@@ -1,218 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'dry-struct'
-require 'pangea/resources/types'
-
-module Pangea
-  module Resources
-    module AWS
-      module Types
-      # Type-safe attributes for AWS SNS Subscription resources
-      class SNSSubscriptionAttributes < Dry::Struct
-        transform_keys(&:to_sym)
-
-        # Topic ARN to subscribe to
-        attribute :topic_arn, Resources::Types::String
-
-        # Protocol for receiving notifications
-        attribute :protocol, Resources::Types::String.enum(
-          'email',          # Email notifications
-          'email-json',     # Email with JSON format
-          'sms',           # SMS text messages
-          'sqs',           # SQS queue
-          'lambda',        # Lambda function
-          'http',          # HTTP endpoint
-          'https',         # HTTPS endpoint
-          'application',   # Mobile app endpoint
-          'firehose'       # Kinesis Data Firehose
-        )
-
-        # Endpoint to receive notifications
-        attribute :endpoint, Resources::Types::String
-
-        # Subscription filter policy (JSON string)
-        attribute? :filter_policy, Resources::Types::String.optional
-
-        # Filter policy scope - MessageAttributes (default) or MessageBody
-        attribute :filter_policy_scope, Resources::Types::String.default('MessageAttributes').enum('MessageAttributes', 'MessageBody')
-
-        # Raw message delivery (no JSON wrapper)
-        attribute :raw_message_delivery, Resources::Types::Bool.default(false)
-
-        # Redrive policy for DLQ (JSON string)
-        attribute? :redrive_policy, Resources::Types::String.optional
-
-        # Subscription role ARN (for Kinesis Data Firehose)
-        attribute? :subscription_role_arn, Resources::Types::String.optional
-
-        # Delivery policy (JSON string) - for HTTP/S endpoints
-        attribute? :delivery_policy, Resources::Types::String.optional
-
-        # Endpoint auto-confirms subscription
-        attribute :endpoint_auto_confirms, Resources::Types::Bool.default(false)
-
-        # Confirmation timeout in seconds
-        attribute? :confirmation_timeout_in_minutes, Resources::Types::Integer.constrained(gteq: 1).optional
-
-        # Custom validation
-        def self.new(attributes = {})
-          attrs = super(attributes)
-
-          # Validate filter policy is valid JSON if provided
-          if attrs.filter_policy
-            begin
-              filter_doc = JSON.parse(attrs.filter_policy)
-              
-              # Basic validation - should be a hash
-              unless filter_doc.is_a?(Hash)
-                raise Dry::Struct::Error, "filter_policy must be a JSON object"
-              end
-            rescue JSON::ParserError => e
-              raise Dry::Struct::Error, "filter_policy must be valid JSON: #{e.message}"
-            end
-          end
-
-          # Validate redrive policy is valid JSON if provided
-          if attrs.redrive_policy
-            begin
-              redrive_doc = JSON.parse(attrs.redrive_policy)
-              unless redrive_doc.is_a?(Hash) && redrive_doc['deadLetterTargetArn']
-                raise Dry::Struct::Error, "redrive_policy must contain deadLetterTargetArn"
-              end
-            rescue JSON::ParserError => e
-              raise Dry::Struct::Error, "redrive_policy must be valid JSON: #{e.message}"
-            end
-          end
-
-          # Validate delivery policy is valid JSON if provided
-          if attrs.delivery_policy
-            begin
-              JSON.parse(attrs.delivery_policy)
-            rescue JSON::ParserError => e
-              raise Dry::Struct::Error, "delivery_policy must be valid JSON: #{e.message}"
-            end
-          end
-
-          # Protocol-specific validations
-          case attrs.protocol
-          when 'email', 'email-json'
-            unless attrs.endpoint.match?(/\A[\w+\-.]+@[a-z\d\-]+(\.[a-z\d\-]+)*\.[a-z]+\z/i)
-              raise Dry::Struct::Error, "Email protocol requires valid email address"
-            end
-          when 'sms'
-            unless attrs.endpoint.match?(/\A\+?[1-9]\d{1,14}\z/)
-              raise Dry::Struct::Error, "SMS protocol requires valid phone number (E.164 format)"
-            end
-          when 'http'
-            unless attrs.endpoint.start_with?('http://')
-              raise Dry::Struct::Error, "HTTP protocol requires endpoint starting with http://"
-            end
-          when 'https'
-            unless attrs.endpoint.start_with?('https://')
-              raise Dry::Struct::Error, "HTTPS protocol requires endpoint starting with https://"
-            end
-          when 'sqs'
-            unless attrs.endpoint.match?(/\Aarn:aws:sqs:[\w-]+:\d{12}:[\w-]+\z/)
-              raise Dry::Struct::Error, "SQS protocol requires valid SQS queue ARN"
-            end
-          when 'lambda'
-            unless attrs.endpoint.match?(/\Aarn:aws:lambda:[\w-]+:\d{12}:function:[\w-]+/)
-              raise Dry::Struct::Error, "Lambda protocol requires valid Lambda function ARN"
-            end
-          when 'firehose'
-            unless attrs.endpoint.match?(/\Aarn:aws:firehose:[\w-]+:\d{12}:deliverystream\/[\w-]+\z/)
-              raise Dry::Struct::Error, "Firehose protocol requires valid delivery stream ARN"
-            end
-            unless attrs.subscription_role_arn
-              raise Dry::Struct::Error, "Firehose protocol requires subscription_role_arn"
-            end
-          end
-
-          # Raw message delivery validations
-          if attrs.raw_message_delivery
-            unless %w[sqs lambda http https firehose].include?(attrs.protocol)
-              raise Dry::Struct::Error, "raw_message_delivery is only valid for sqs, lambda, http, https, and firehose protocols"
-            end
-          end
-
-          # Filter policy scope validation
-          if attrs.filter_policy_scope == 'MessageBody' && !%w[sqs lambda firehose].include?(attrs.protocol)
-            raise Dry::Struct::Error, "MessageBody filter scope is only valid for sqs, lambda, and firehose protocols"
-          end
-
-          # Delivery policy validation
-          if attrs.delivery_policy && !%w[http https].include?(attrs.protocol)
-            raise Dry::Struct::Error, "delivery_policy is only valid for http and https protocols"
-          end
-
-          attrs
-        end
-
-        # Helper methods
-        def requires_confirmation?
-          %w[email email-json http https].include?(protocol) && !endpoint_auto_confirms
-        end
-
-        def supports_filter_policy?
-          %w[sqs lambda http https firehose].include?(protocol)
-        end
-
-        def supports_raw_delivery?
-          %w[sqs lambda http https firehose].include?(protocol)
-        end
-
-        def supports_dlq?
-          %w[sqs lambda http https firehose].include?(protocol)
-        end
-
-        def is_email_subscription?
-          %w[email email-json].include?(protocol)
-        end
-
-        def is_webhook_subscription?
-          %w[http https].include?(protocol)
-        end
-
-        def filter_policy_attributes
-          return [] unless filter_policy
-          
-          begin
-            policy = JSON.parse(filter_policy)
-            policy.keys
-          rescue
-            []
-          end
-        end
-
-        def has_numeric_filters?
-          return false unless filter_policy
-          
-          begin
-            policy = JSON.parse(filter_policy)
-            policy.values.any? do |filter|
-              filter.is_a?(Hash) && filter.key?('numeric')
-            end
-          rescue
-            false
-          end
-        end
-      end
-    end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws_sns_topic/CLAUDE.md

@@ -1,249 +0,0 @@
-# AWS SNS Topic Implementation
-
-## Overview
-
-The `aws_sns_topic` resource provides a type-safe implementation for AWS Simple Notification Service (SNS) topics, supporting both Standard and FIFO topic types with comprehensive configuration for messaging, encryption, delivery feedback, and data protection.
-
-## Implementation Details
-
-### Type System (types.rb)
-
-The `SNSTopicAttributes` class uses dry-struct for runtime validation with extensive validations:
-
-1. **Topic Naming Validation**:
-   - FIFO topics must end with `.fifo` suffix
-   - Standard topics cannot end with `.fifo` suffix
-   - Names are optional (AWS can auto-generate)
-
-2. **JSON Policy Validations**:
-   - `delivery_policy` - Must be valid JSON
-   - `policy` - Must be valid JSON (IAM policy)
-   - `message_data_protection_policy` - Must be valid JSON
-
-3. **FIFO-Specific Validations**:
-   - `content_based_deduplication` only valid for FIFO topics
-   - Enforces FIFO naming convention
-
-4. **Feedback Configuration Validations**:
-   - Sample rates require corresponding role ARNs
-   - Sample rates constrained to 0-100
-   - Separate configuration per protocol
-
-### Resource Function (resource.rb)
-
-The `aws_sns_topic` function:
-
-1. **Validates Input**: Uses `SNSTopicAttributes` for comprehensive validation
-2. **Generates Terraform**: Creates `aws_sns_topic` resource block
-3. **Conditional Attributes**: Only adds non-nil optional attributes
-4. **Returns Reference**: Provides typed reference with extensive outputs
-
-Key implementation details:
-- Handles 15+ feedback configuration attributes
-- Supports all SNS protocols for feedback
-- Manages FIFO-specific features conditionally
-- Provides rich computed properties
-
-### Helper Methods
-
-The type class provides numerous helper methods:
-- `is_fifo?` - Check if FIFO topic
-- `is_encrypted?` - Check if KMS encryption is enabled
-- `has_delivery_policy?` - Check for retry configuration
-- `has_access_policy?` - Check for access control
-- `has_data_protection?` - Check for PII protection
-- `has_feedback_enabled?` - Check any feedback configuration
-- `feedback_protocols` - List protocols with feedback
-- `topic_type` - Return "Standard" or "FIFO"
-- `tracing_enabled?` - Check if X-Ray is active
-
-## Design Decisions
-
-### 1. Optional Topic Names
-We allow topics without names, letting AWS auto-generate them. This supports dynamic topic creation patterns.
-
-### 2. Comprehensive Feedback Support
-All five SNS delivery protocols have individual feedback configuration:
-- Application (mobile push)
-- HTTP/HTTPS endpoints
-- Lambda functions
-- SQS queues
-- Kinesis Data Firehose
-
-Each protocol has success/failure role ARNs and success sample rates.
-
-### 3. Policy Handling
-Three separate policies are supported:
-- `policy` - IAM resource policy for access control
-- `delivery_policy` - Retry and throttling configuration
-- `message_data_protection_policy` - PII/sensitive data protection
-
-All are validated as JSON but not deeply parsed to maintain flexibility.
-
-### 4. Tracing Configuration
-X-Ray tracing uses an enum to ensure valid values:
-- "Active" - Generate trace segments
-- "PassThrough" - Honor upstream trace headers
-
-### 5. Computed Properties
-Rich computed properties enable:
-- Infrastructure analysis
-- Security auditing
-- Cost optimization
-- Monitoring setup
-
-## Testing Considerations
-
-When testing SNS topics:
-
-1. **Topic Type Tests**:
-   ```ruby
-   # FIFO naming validation
-   expect { 
-     aws_sns_topic(:test, { 
-       name: "test", 
-       fifo_topic: true 
-     }) 
-   }.to raise_error(Dry::Struct::Error, /must end with '.fifo'/)
-   ```
-
-2. **Feedback Configuration Tests**:
-   ```ruby
-   # Sample rate requires role ARN
-   expect {
-     aws_sns_topic(:test, {
-       name: "test",
-       http_success_feedback_sample_rate: 100
-       # Missing http_success_feedback_role_arn
-     })
-   }.to raise_error(Dry::Struct::Error, /requires.*role_arn/)
-   ```
-
-3. **Policy Validation Tests**:
-   ```ruby
-   # Invalid JSON policy
-   expect {
-     aws_sns_topic(:test, {
-       name: "test",
-       policy: "invalid json"
-     })
-   }.to raise_error(Dry::Struct::Error, /valid JSON/)
-   ```
-
-## Integration Patterns
-
-### With SQS Queues (Fan-out)
-```ruby
-topic = aws_sns_topic(:events, { name: "events" })
-
-# Create multiple queues
-queues = ["orders", "inventory", "shipping"].map do |service|
-  queue = aws_sqs_queue(:"#{service}_queue", {
-    name: "#{service}-queue"
-  })
-  
-  # Subscribe queue to topic
-  aws_sns_subscription(:"#{service}_sub", {
-    topic_arn: topic.arn,
-    protocol: "sqs",
-    endpoint: queue.arn
-  })
-  
-  queue
-end
-```
-
-### With Lambda Functions
-```ruby
-topic = aws_sns_topic(:triggers, { name: "lambda-triggers" })
-
-aws_lambda_permission(:sns_invoke, {
-  function_name: lambda_function.name,
-  principal: "sns.amazonaws.com",
-  source_arn: topic.arn
-})
-
-aws_sns_subscription(:lambda_sub, {
-  topic_arn: topic.arn,
-  protocol: "lambda",
-  endpoint: lambda_function.arn
-})
-```
-
-### With CloudWatch Logs
-```ruby
-# Topic with delivery feedback
-topic = aws_sns_topic(:monitored, {
-  name: "monitored-topic",
-  http_failure_feedback_role_arn: feedback_role.arn,
-  lambda_failure_feedback_role_arn: feedback_role.arn
-})
-
-# Logs will be created in CloudWatch Logs groups:
-# - sns/us-east-1/123456789012/monitored-topic/http/failure
-# - sns/us-east-1/123456789012/monitored-topic/lambda/failure
-```
-
-## Performance Considerations
-
-1. **FIFO vs Standard**: 
-   - Standard topics: Higher throughput, at-least-once delivery
-   - FIFO topics: Exactly-once, ordered delivery, lower throughput
-
-2. **Content-Based Deduplication**:
-   - Reduces duplicate messages in FIFO topics
-   - Adds processing overhead
-   - 5-minute deduplication window
-
-3. **Feedback Sampling**:
-   - 100% sampling for critical applications
-   - Lower rates for high-volume topics
-   - Balance between visibility and cost
-
-4. **Message Size**:
-   - 256KB maximum per message
-   - Use S3 for larger payloads with SNS notifications
-
-## Security Best Practices
-
-1. **Always Enable Encryption**: Use KMS for sensitive data
-2. **Implement Access Policies**: Restrict publish/subscribe permissions
-3. **Use Data Protection**: Block PII/sensitive data patterns
-4. **Enable Feedback**: Monitor delivery failures
-5. **Tag Resources**: Enable compliance and cost tracking
-6. **Validate Publishers**: Use conditions in policies
-
-## Monitoring Integration
-
-The resource enables comprehensive monitoring:
-```ruby
-topic = aws_sns_topic(:critical, {
-  name: "critical-events",
-  lambda_failure_feedback_role_arn: role.arn
-})
-
-# CloudWatch alarm on publish failures
-aws_cloudwatch_metric_alarm(:publish_failures, {
-  alarm_name: "#{topic.name}-publish-failures",
-  metric_name: "NumberOfMessagesFailed",
-  namespace: "AWS/SNS",
-  dimensions: {
-    TopicName: topic.name
-  },
-  threshold: 5
-})
-```
-
-## Data Protection Patterns
-
-Message data protection policies can:
-- Block credit card numbers
-- Redact social security numbers
-- Audit sensitive data usage
-- Deny messages with PII
-
-Example identifiers:
-- `arn:aws:dataprotection::aws:data-identifier/CreditCardNumber`
-- `arn:aws:dataprotection::aws:data-identifier/SocialSecurityNumber`
-- `arn:aws:dataprotection::aws:data-identifier/EmailAddress`
-- `arn:aws:dataprotection::aws:data-identifier/PhoneNumber`

data/lib/pangea/resources/aws_sns_topic/resource.rb

@@ -1,126 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-require 'pangea/resources/aws_sns_topic/types'
-require 'pangea/resource_registry'
-
-module Pangea
-  module Resources
-    module AWS
-      # Create an AWS SNS Topic with type-safe attributes
-      #
-      # @param name [Symbol] The resource name
-      # @param attributes [Hash] SNS topic attributes
-      # @return [ResourceReference] Reference object with outputs and computed properties
-      def aws_sns_topic(name, attributes = {})
-        # Validate attributes using dry-struct
-        topic_attrs = AWS::Types::Types::SNSTopicAttributes.new(attributes)
-        
-        # Generate terraform resource block via terraform-synthesizer
-        resource(:aws_sns_topic, name) do
-          # Set topic name if provided
-          name topic_attrs.name if topic_attrs.name
-          
-          # Set display name if provided
-          display_name topic_attrs.display_name if topic_attrs.display_name
-          
-          # Set FIFO topic configuration
-          fifo_topic topic_attrs.fifo_topic
-          if topic_attrs.fifo_topic
-            content_based_deduplication topic_attrs.content_based_deduplication
-          end
-          
-          # Set KMS encryption if provided
-          kms_master_key_id topic_attrs.kms_master_key_id if topic_attrs.kms_master_key_id
-          
-          # Set delivery policy if provided
-          delivery_policy topic_attrs.delivery_policy if topic_attrs.delivery_policy
-          
-          # Set topic policy if provided
-          policy topic_attrs.policy if topic_attrs.policy
-          
-          # Set message data protection policy if provided
-          message_data_protection_policy topic_attrs.message_data_protection_policy if topic_attrs.message_data_protection_policy
-          
-          # Set tracing configuration if provided
-          tracing_config topic_attrs.tracing_config if topic_attrs.tracing_config
-          
-          # Set application feedback attributes
-          application_success_feedback_role_arn topic_attrs.application_success_feedback_role_arn if topic_attrs.application_success_feedback_role_arn
-          application_success_feedback_sample_rate topic_attrs.application_success_feedback_sample_rate if topic_attrs.application_success_feedback_sample_rate
-          application_failure_feedback_role_arn topic_attrs.application_failure_feedback_role_arn if topic_attrs.application_failure_feedback_role_arn
-          
-          # Set HTTP feedback attributes
-          http_success_feedback_role_arn topic_attrs.http_success_feedback_role_arn if topic_attrs.http_success_feedback_role_arn
-          http_success_feedback_sample_rate topic_attrs.http_success_feedback_sample_rate if topic_attrs.http_success_feedback_sample_rate
-          http_failure_feedback_role_arn topic_attrs.http_failure_feedback_role_arn if topic_attrs.http_failure_feedback_role_arn
-          
-          # Set Lambda feedback attributes
-          lambda_success_feedback_role_arn topic_attrs.lambda_success_feedback_role_arn if topic_attrs.lambda_success_feedback_role_arn
-          lambda_success_feedback_sample_rate topic_attrs.lambda_success_feedback_sample_rate if topic_attrs.lambda_success_feedback_sample_rate
-          lambda_failure_feedback_role_arn topic_attrs.lambda_failure_feedback_role_arn if topic_attrs.lambda_failure_feedback_role_arn
-          
-          # Set SQS feedback attributes
-          sqs_success_feedback_role_arn topic_attrs.sqs_success_feedback_role_arn if topic_attrs.sqs_success_feedback_role_arn
-          sqs_success_feedback_sample_rate topic_attrs.sqs_success_feedback_sample_rate if topic_attrs.sqs_success_feedback_sample_rate
-          sqs_failure_feedback_role_arn topic_attrs.sqs_failure_feedback_role_arn if topic_attrs.sqs_failure_feedback_role_arn
-          
-          # Set Firehose feedback attributes
-          firehose_success_feedback_role_arn topic_attrs.firehose_success_feedback_role_arn if topic_attrs.firehose_success_feedback_role_arn
-          firehose_success_feedback_sample_rate topic_attrs.firehose_success_feedback_sample_rate if topic_attrs.firehose_success_feedback_sample_rate
-          firehose_failure_feedback_role_arn topic_attrs.firehose_failure_feedback_role_arn if topic_attrs.firehose_failure_feedback_role_arn
-          
-          # Apply tags
-          if topic_attrs.tags.any?
-            tags topic_attrs.tags
-          end
-        end
-        
-        # Return resource reference with available outputs
-        ref = ResourceReference.new(
-          type: 'aws_sns_topic',
-          name: name,
-          resource_attributes: topic_attrs.to_h,
-          outputs: {
-            id: "${aws_sns_topic.#{name}.id}",
-            arn: "${aws_sns_topic.#{name}.arn}",
-            name: "${aws_sns_topic.#{name}.name}",
-            owner: "${aws_sns_topic.#{name}.owner}",
-            beginning_archive_time: "${aws_sns_topic.#{name}.beginning_archive_time}"
-          }
-        )
-        
-        # Add computed properties via method delegation
-        ref.define_singleton_method(:topic_type) { topic_attrs.topic_type }
-        ref.define_singleton_method(:is_fifo?) { topic_attrs.is_fifo? }
-        ref.define_singleton_method(:is_encrypted?) { topic_attrs.is_encrypted? }
-        ref.define_singleton_method(:has_delivery_policy?) { topic_attrs.has_delivery_policy? }
-        ref.define_singleton_method(:has_access_policy?) { topic_attrs.has_access_policy? }
-        ref.define_singleton_method(:has_data_protection?) { topic_attrs.has_data_protection? }
-        ref.define_singleton_method(:has_feedback_enabled?) { topic_attrs.has_feedback_enabled? }
-        ref.define_singleton_method(:feedback_protocols) { topic_attrs.feedback_protocols }
-        ref.define_singleton_method(:tracing_enabled?) { topic_attrs.tracing_enabled? }
-        
-        ref
-      end
-    end
-  end
-end
-
-# Auto-register this module when it's loaded
-Pangea::ResourceRegistry.register(:aws, Pangea::Resources::AWS)