pangea 0.0.45 → 0.0.47

data/lib/pangea/resources/aws_budgets_budget/CLAUDE.md

@@ -1,304 +0,0 @@
-# AWS Budgets Budget - Cost Management and Financial Governance
-
-## Resource Overview
-
-The `aws_budgets_budget` resource provides comprehensive AWS cost management capabilities through intelligent budget creation, monitoring, and financial governance. This resource enables proactive cost control with advanced features including anomaly detection integration, multi-dimensional filtering, and automated adjustment capabilities.
-
-## Cost Management Architecture
-
-### Budget Types and Use Cases
-
-**Cost Budgets**: Track actual spending against defined limits
-- Monitor overall AWS spending across services and regions
-- Set department or project-specific spending limits
-- Implement cost center accounting and chargeback models
-
-**Usage Budgets**: Monitor service usage patterns
-- Track compute hours, storage consumption, or data transfer
-- Identify usage inefficiencies and optimization opportunities
-- Implement usage quotas for development environments
-
-**Reserved Instance Budgets**: Optimize Reserved Instance investments
-- Monitor RI utilization rates and coverage percentages
-- Identify underutilized reservations for optimization
-- Track savings from RI adoption across instance families
-
-**Savings Plans Budgets**: Maximize Savings Plans effectiveness
-- Monitor Savings Plans utilization and coverage
-- Identify opportunities for additional Savings Plans purchases
-- Track cost optimization from commitment-based pricing
-
-### Financial Governance Patterns
-
-**Progressive Alerting System**:
-```ruby
-# Implement escalating alert thresholds
-budget = aws_budgets_budget(:progressive_alerts, {
-  notifications: [
-    { threshold: 50.0, subscribers: [team_email] },      # Early warning
-    { threshold: 80.0, subscribers: [manager_email] },   # Management alert  
-    { threshold: 95.0, subscribers: [executive_email] }, # Executive escalation
-    { threshold: 100.0, notification_type: "FORECASTED", subscribers: [sns_topic] } # Proactive forecast
-  ]
-})
-```
-
-**Multi-Dimensional Cost Filtering**:
-```ruby
-# Granular cost attribution and tracking
-budget = aws_budgets_budget(:granular_tracking, {
-  cost_filters: {
-    dimensions: {
-      "SERVICE" => ["Amazon EC2", "Amazon RDS"],
-      "REGION" => ["us-east-1", "us-west-2"],
-      "INSTANCE_TYPE" => ["m5.large", "m5.xlarge"]
-    },
-    tags: {
-      "Environment" => ["production"],
-      "CostCenter" => ["engineering"],
-      "Project" => ["alpha", "beta"]
-    },
-    cost_categories: {
-      "BusinessUnit" => ["product", "platform"],
-      "Application" => ["web", "api", "batch"]
-    }
-  }
-})
-```
-
-## Cost Optimization Features
-
-### Automated Budget Adjustments
-
-**Historical Auto-Adjustment**: Dynamically adjust budgets based on historical spending patterns
-- Analyzes past 12 months of spending data
-- Automatically adjusts budget limits based on trends
-- Accounts for seasonal variations and growth patterns
-- Reduces manual budget management overhead
-
-**Forecast-Based Adjustment**: Leverage AWS Cost Explorer forecasting
-- Uses machine learning for budget prediction
-- Adjusts limits based on projected spending
-- Incorporates service usage growth trends
-- Enables proactive cost management
-
-### Planned Budget Limits
-
-Accommodate known spending variations:
-```ruby
-seasonal_budget = aws_budgets_budget(:seasonal, {
-  planned_budget_limits: {
-    "2024-11-01" => { amount: "12000.00", unit: "USD" }, # Black Friday scaling
-    "2024-12-01" => { amount: "18000.00", unit: "USD" }, # Holiday peak
-    "2025-01-01" => { amount: "8000.00", unit: "USD" }   # Post-holiday reduction
-  }
-})
-```
-
-### Cost Attribution and Chargeback
-
-**Department-Level Budgets**:
-```ruby
-# Engineering department budget with granular tracking
-engineering_budget = aws_budgets_budget(:engineering_dept, {
-  budget_name: "Engineering-Department-FY2024",
-  cost_filters: {
-    tags: {
-      "Department" => ["engineering"],
-      "Team" => ["backend", "frontend", "mobile", "devops"]
-    }
-  },
-  planned_budget_limits: quarterly_allocations
-})
-```
-
-**Project-Based Cost Tracking**:
-```ruby
-# Individual project cost tracking
-project_budget = aws_budgets_budget(:project_alpha, {
-  budget_name: "Project-Alpha-Q1-2024",
-  cost_filters: {
-    tags: {
-      "Project" => ["alpha"],
-      "Environment" => ["development", "staging", "production"]
-    }
-  }
-})
-```
-
-## Financial Insights and Analytics
-
-### Cost Optimization Scoring
-
-The resource automatically calculates a cost optimization score (0-100) based on:
-- **Budget Configuration** (20 points): Having any budget provides baseline governance
-- **Notification Setup** (35 points): Email (15) + SNS (10) + multiple thresholds (10)
-- **Cost Filtering** (15 points): Granular cost attribution and tracking
-- **Planned Limits** (10 points): Proactive seasonal/project planning
-- **Auto-Adjustment** (20 points): Dynamic budget optimization
-
-### Governance Compliance Levels
-
-**EXCELLENT (80+ points)**:
-- Comprehensive notification system with multiple thresholds
-- Granular cost filtering with multi-dimensional attribution
-- Auto-adjustment enabled for dynamic optimization
-- Planned budget limits for predictable variations
-
-**GOOD (60-79 points)**:
-- Basic notification system with email and SNS alerts
-- Some cost filtering for attribution
-- Either auto-adjustment OR planned limits configured
-
-**BASIC (40-59 points)**:
-- Email notifications configured
-- Basic budget limits without advanced features
-
-**POOR (0-39 points)**:
-- Budget exists but lacks governance features
-- No notifications or cost attribution
-
-## Integration Patterns
-
-### Cost Anomaly Detection Integration
-
-```ruby
-# Budget designed to work with anomaly detection
-anomaly_integrated_budget = aws_budgets_budget(:anomaly_integration, {
-  budget_name: "Anomaly-Detection-Budget",
-  notifications: [
-    {
-      notification_type: "ACTUAL",
-      threshold: 110.0, # Alert when budget exceeded (potential anomaly)
-      subscribers: [
-        { subscription_type: "SNS", address: anomaly_detection_topic_arn }
-      ]
-    }
-  ]
-})
-```
-
-### Reserved Instance Optimization
-
-```ruby
-# RI utilization optimization budget
-ri_optimization = aws_budgets_budget(:ri_optimization, {
-  budget_type: "RI_UTILIZATION",
-  limit_amount: "85.00", # Target 85% utilization
-  cost_filters: {
-    dimensions: {
-      "PURCHASE_TYPE" => ["Reserved"],
-      "SERVICE" => ["Amazon Elastic Compute Cloud - Compute"]
-    }
-  },
-  auto_adjust_data: {
-    auto_adjust_type: "HISTORICAL",
-    historical_options: { budget_adjustment_period: 6 }
-  }
-})
-```
-
-### Multi-Account Organization Budgets
-
-```ruby
-# Organization-wide consolidated budget
-org_wide_budget = aws_budgets_budget(:organization, {
-  budget_name: "Organization-Consolidated-Budget",
-  cost_filters: {
-    dimensions: {
-      "LINKED_ACCOUNT" => organization_account_ids
-    }
-  },
-  notifications: executive_notifications
-})
-
-# Individual account budgets
-organization_account_ids.each do |account_id|
-  aws_budgets_budget(:"account_#{account_id}", {
-    budget_name: "Account-#{account_id}-Budget",
-    cost_filters: {
-      dimensions: { "LINKED_ACCOUNT" => [account_id] }
-    }
-  })
-end
-```
-
-## Advanced Use Cases
-
-### Cost Center Chargeback Model
-
-```ruby
-cost_centers = {
-  "engineering" => { limit: "40000.00", teams: ["backend", "frontend", "mobile"] },
-  "product" => { limit: "25000.00", teams: ["design", "product-management"] },
-  "sales" => { limit: "15000.00", teams: ["sales", "marketing"] },
-  "operations" => { limit: "20000.00", teams: ["devops", "security", "compliance"] }
-}
-
-cost_centers.each do |center, config|
-  aws_budgets_budget(:"#{center}_budget", {
-    budget_name: "#{center.capitalize}-Cost-Center-Budget",
-    limit_amount: config[:limit],
-    cost_filters: {
-      tags: {
-        "CostCenter" => [center],
-        "Team" => config[:teams]
-      }
-    },
-    notifications: [
-      { threshold: 75.0, subscribers: [{ subscription_type: "EMAIL", address: "#{center}@company.com" }] },
-      { threshold: 90.0, subscribers: [{ subscription_type: "EMAIL", address: "finance@company.com" }] }
-    ]
-  })
-end
-```
-
-### Environment-Specific Budget Controls
-
-```ruby
-environments = {
-  "production" => { limit: "50000.00", strict: true },
-  "staging" => { limit: "10000.00", strict: false },
-  "development" => { limit: "5000.00", strict: false }
-}
-
-environments.each do |env, config|
-  aws_budgets_budget(:"#{env}_budget", {
-    budget_name: "#{env.capitalize}-Environment-Budget",
-    limit_amount: config[:limit],
-    cost_filters: {
-      tags: { "Environment" => [env] }
-    },
-    notifications: config[:strict] ? strict_notifications : standard_notifications
-  })
-end
-```
-
-### Savings Optimization Dashboard
-
-```ruby
-# Comprehensive savings tracking
-savings_dashboard = {
-  ri_utilization: aws_budgets_budget(:ri_utilization, {
-    budget_type: "RI_UTILIZATION",
-    limit_amount: "90.00"
-  }),
-  
-  ri_coverage: aws_budgets_budget(:ri_coverage, {
-    budget_type: "RI_COVERAGE", 
-    limit_amount: "80.00"
-  }),
-  
-  sp_utilization: aws_budgets_budget(:sp_utilization, {
-    budget_type: "SAVINGS_PLANS_UTILIZATION",
-    limit_amount: "95.00"
-  }),
-  
-  sp_coverage: aws_budgets_budget(:sp_coverage, {
-    budget_type: "SAVINGS_PLANS_COVERAGE",
-    limit_amount: "70.00" 
-  })
-}
-```
-
-This resource enables sophisticated AWS cost management with comprehensive financial governance, automated optimization, and detailed cost attribution for effective cloud financial operations.

data/lib/pangea/resources/aws_budgets_budget_action/CLAUDE.md

@@ -1,357 +0,0 @@
-# AWS Budgets Budget Action - Automated Cost Control and Governance
-
-## Resource Overview
-
-The `aws_budgets_budget_action` resource enables sophisticated automated responses to budget threshold breaches, providing comprehensive cost control with built-in risk assessment, governance compliance, and progressive escalation capabilities. This resource transforms passive budget monitoring into active cost management with intelligent automation safeguards.
-
-## Automated Cost Control Architecture
-
-### Action Types and Strategic Applications
-
-**IAM Policy Actions (APPLY_IAM_POLICY)**:
-- **Preventive Cost Control**: Restrict access to expensive services before costs escalate
-- **Granular Permission Management**: Target specific roles, groups, or users
-- **Service-Level Controls**: Block access to costly instance types or regions
-- **Development Environment Restrictions**: Limit non-production resource creation
-
-**Service Control Policy Actions (APPLY_SCP_POLICY)**:  
-- **Organization-Wide Governance**: Apply cost controls across multiple AWS accounts
-- **Compliance Enforcement**: Ensure adherence to cost management policies
-- **Emergency Cost Containment**: Rapid organization-wide service restrictions
-- **Account Segmentation**: Different policies for development, staging, and production
-
-**Systems Manager Document Actions (RUN_SSM_DOCUMENTS)**:
-- **Resource State Management**: Stop, start, or modify AWS resources
-- **Automated Scaling**: Reduce instance sizes or terminate unused resources  
-- **Service Optimization**: Automatically optimize database or compute configurations
-- **Emergency Response**: Immediate resource shutdown for cost containment
-
-### Risk Assessment and Safety Framework
-
-**Automation Risk Scoring Algorithm**:
-```ruby
-def automation_risk_score
-  score = 0
-  
-  # Base automation risk
-  score += 30 if automatic?
-  
-  # Action type risk weighting
-  score += case action_type
-    when 'APPLY_IAM_POLICY' then 25      # Medium risk
-    when 'APPLY_SCP_POLICY' then 40      # High risk - affects entire org
-    when 'RUN_SSM_DOCUMENTS' then 35     # Medium-high risk - changes resources
-  end
-  
-  # Threshold risk assessment
-  score += 10 if action_threshold < 90   # Aggressive thresholds increase risk
-  score -= 5 if action_threshold > 120   # Conservative thresholds reduce risk
-  
-  # Target scope risk
-  score += [target_count * 2, 20].min   # More targets = higher risk (capped)
-  
-  # Risk mitigation factors
-  score -= 10 if has_notifications?      # Notifications reduce risk
-  score -= 5 if manual_approval?         # Manual approval reduces risk
-  
-  [score, 100].min
-end
-```
-
-**Risk Levels and Governance**:
-- **CRITICAL (80+ points)**: Requires extensive safeguards and manual oversight
-- **HIGH (60-79 points)**: Needs approval workflows and comprehensive monitoring
-- **MEDIUM (40-59 points)**: Standard automation with notification requirements
-- **LOW (20-39 points)**: Safe for full automation with basic notifications
-- **MINIMAL (0-19 points)**: Low-impact actions suitable for automatic execution
-
-## Progressive Cost Control Strategies
-
-### Multi-Tier Escalation Framework
-
-**Tier 1 - Early Warning (70-80% threshold)**:
-```ruby
-early_warning = aws_budgets_budget_action(:tier1_warning, {
-  action_threshold: 75.0,
-  approval_model: "AUTOMATIC",
-  action_type: "RUN_SSM_DOCUMENTS",
-  definition: {
-    ssm_action_definition: {
-      ssm_action_type: "STOP_EC2_INSTANCES",
-      instance_ids: development_instances # Stop non-critical resources first
-    }
-  }
-})
-```
-
-**Tier 2 - Service Restrictions (85-95% threshold)**:
-```ruby
-service_restriction = aws_budgets_budget_action(:tier2_restriction, {
-  action_threshold: 90.0,
-  approval_model: "AUTOMATIC",
-  action_type: "APPLY_IAM_POLICY",
-  definition: {
-    iam_action_definition: {
-      policy_arn: "arn:aws:iam::account:policy/RestrictExpensiveServices",
-      roles: ["arn:aws:iam::account:role/DeveloperRole"]
-    }
-  }
-})
-```
-
-**Tier 3 - Emergency Controls (95-100% threshold)**:
-```ruby
-emergency_control = aws_budgets_budget_action(:tier3_emergency, {
-  action_threshold: 100.0,
-  approval_model: "MANUAL", # Critical actions require approval
-  action_type: "APPLY_SCP_POLICY",
-  definition: {
-    scp_action_definition: {
-      policy_id: "p-emergency-cost-control",
-      target_ids: ["ou-development", "ou-testing"]
-    }
-  }
-})
-```
-
-## Advanced Governance Patterns
-
-### Environment-Based Action Strategies
-
-**Development Environment Automation**:
-```ruby
-dev_automation = aws_budgets_budget_action(:dev_cost_control, {
-  approval_model: "AUTOMATIC",     # Safe for full automation
-  action_threshold: 100.0,         # Allow full budget utilization
-  action_type: "RUN_SSM_DOCUMENTS",
-  definition: {
-    ssm_action_definition: {
-      ssm_action_type: "STOP_EC2_INSTANCES",
-      instance_ids: dev_instance_list
-    }
-  },
-  risk_level: "LOW"               # Development has minimal business impact
-})
-```
-
-**Production Environment Safeguards**:
-```ruby
-prod_safeguards = aws_budgets_budget_action(:prod_cost_control, {
-  approval_model: "MANUAL",        # Require human oversight
-  action_threshold: 95.0,          # Conservative threshold
-  action_type: "APPLY_IAM_POLICY", # Less disruptive than resource changes
-  subscribers: [
-    { subscription_type: "EMAIL", address: "production-team@company.com" },
-    { subscription_type: "SNS", address: production_alerts_topic }
-  ],
-  risk_level: "HIGH"              # Production changes need careful review
-})
-```
-
-### Cost Center and Department Controls
-
-**Department-Specific Actions**:
-```ruby
-departments = {
-  "engineering" => {
-    budget: "Engineering-Department-Budget",
-    policy: "EngineeringCostRestrictions",
-    threshold: 95.0,
-    approval: "AUTOMATIC"
-  },
-  "marketing" => {
-    budget: "Marketing-Department-Budget", 
-    policy: "MarketingCostRestrictions",
-    threshold: 90.0,
-    approval: "MANUAL" # Marketing spend needs more oversight
-  }
-}
-
-departments.each do |dept, config|
-  aws_budgets_budget_action(:"#{dept}_cost_action", {
-    budget_name: config[:budget],
-    action_type: "APPLY_IAM_POLICY",
-    approval_model: config[:approval],
-    action_threshold: config[:threshold],
-    definition: {
-      iam_action_definition: {
-        policy_arn: "arn:aws:iam::account:policy/#{config[:policy]}",
-        roles: ["arn:aws:iam::account:role/#{dept.capitalize}Role"]
-      }
-    }
-  })
-end
-```
-
-## Integration with AWS Cost Management Ecosystem
-
-### Cost Explorer Integration
-
-Budget actions complement Cost Explorer analytics by providing automated responses to identified cost anomalies:
-
-```ruby
-# Action triggered by Cost Explorer insights
-explorer_action = aws_budgets_budget_action(:explorer_response, {
-  budget_name: "Cost-Explorer-Insights-Budget",
-  action_type: "APPLY_IAM_POLICY",
-  notification_type: "FORECASTED", # Proactive based on forecasting
-  action_threshold: 110.0,         # Act on projected overruns
-  definition: {
-    iam_action_definition: {
-      policy_arn: "arn:aws:iam::account:policy/RestrictAnomalousServices"
-    }
-  }
-})
-```
-
-### Reserved Instance and Savings Plans Optimization
-
-```ruby
-# RI utilization optimization action
-ri_optimization_action = aws_budgets_budget_action(:ri_optimization, {
-  budget_name: "RI-Utilization-Budget",
-  action_type: "RUN_SSM_DOCUMENTS",
-  notification_type: "ACTUAL",
-  action_threshold: 75.0, # Below 75% RI utilization triggers action
-  definition: {
-    ssm_action_definition: {
-      ssm_action_type: "START_EC2_INSTANCES", # Start additional instances to improve RI utilization
-      parameters: [
-        { name: "InstanceType", value: "reserved_instance_type" },
-        { name: "OptimizeFor", value: "ReservedInstanceUtilization" }
-      ]
-    }
-  }
-})
-```
-
-### Multi-Account Organization Controls
-
-```ruby
-# Organization-wide emergency cost controls
-org_emergency_controls = aws_budgets_budget_action(:org_emergency, {
-  budget_name: "Organization-Master-Budget",
-  action_type: "APPLY_SCP_POLICY",
-  approval_model: "MANUAL", # Organization-wide changes need approval
-  action_threshold: 100.0,
-  definition: {
-    scp_action_definition: {
-      policy_id: "p-emergency-spend-controls",
-      target_ids: [
-        "ou-development-accounts",    # Development organizational unit
-        "ou-testing-accounts",        # Testing organizational unit
-        "123456789012",               # Specific account ID
-        "234567890123"                # Another specific account
-      ]
-    }
-  },
-  subscribers: [
-    { subscription_type: "EMAIL", address: "cloud-governance@company.com" },
-    { subscription_type: "SNS", address: "arn:aws:sns:us-east-1:account:org-alerts" }
-  ]
-})
-```
-
-## Compliance and Audit Framework
-
-### Governance Compliance Scoring
-
-The resource automatically calculates governance compliance based on:
-
-1. **Manual Approval for High-Risk Actions** (25 points)
-2. **Comprehensive Notification System** (25 points)
-3. **Reasonable Threshold Configuration** (20 points) 
-4. **Risk Mitigation Safeguards** (15 points)
-5. **Documentation and Tagging** (15 points)
-
-**Compliance Levels**:
-- **EXCELLENT (90-100%)**: Full governance framework with all safeguards
-- **GOOD (70-89%)**: Strong governance with minor improvements needed
-- **ADEQUATE (50-69%)**: Basic governance requirements met
-- **POOR (0-49%)**: Significant governance gaps requiring attention
-
-### Audit Trail and Monitoring
-
-```ruby
-# Comprehensive audit configuration
-audit_compliant_action = aws_budgets_budget_action(:audit_compliant, {
-  # ... action configuration
-  subscribers: [
-    { subscription_type: "EMAIL", address: "audit-team@company.com" },
-    { subscription_type: "SNS", address: "arn:aws:sns:us-east-1:account:audit-trail" }
-  ],
-  tags: {
-    AuditRequired: "true",
-    ComplianceLevel: "high",
-    ReviewFrequency: "monthly",
-    DataClassification: "internal",
-    BusinessCriticality: "high"
-  }
-})
-```
-
-## Advanced Use Cases
-
-### AI/ML Cost Optimization Integration
-
-```ruby
-# ML-driven cost optimization actions
-ml_cost_optimization = aws_budgets_budget_action(:ml_optimization, {
-  budget_name: "ML-Training-Budget",
-  action_type: "RUN_SSM_DOCUMENTS", 
-  approval_model: "AUTOMATIC",
-  action_threshold: 90.0,
-  definition: {
-    ssm_action_definition: {
-      ssm_action_type: "STOP_EC2_INSTANCES",
-      parameters: [
-        { name: "InstanceFilter", value: "ml-training-*" },
-        { name: "PreserveCheckpoints", value: "true" },
-        { name: "NotificationChannel", value: "ml-team-slack" }
-      ]
-    }
-  }
-})
-```
-
-### Disaster Recovery Cost Controls
-
-```ruby
-# DR environment cost management
-dr_cost_controls = aws_budgets_budget_action(:dr_cost_management, {
-  budget_name: "Disaster-Recovery-Budget",
-  action_type: "APPLY_SCP_POLICY",
-  approval_model: "AUTOMATIC", # DR resources can be scaled down automatically
-  action_threshold: 120.0,     # Higher threshold due to DR criticality
-  definition: {
-    scp_action_definition: {
-      policy_id: "p-dr-cost-optimization",
-      target_ids: ["ou-disaster-recovery"]
-    }
-  }
-})
-```
-
-### Development Lifecycle Cost Management
-
-```ruby
-# Feature branch cost controls
-feature_branch_controls = aws_budgets_budget_action(:feature_branch_cleanup, {
-  budget_name: "Feature-Development-Budget",
-  action_type: "RUN_SSM_DOCUMENTS",
-  approval_model: "AUTOMATIC",
-  action_threshold: 85.0,
-  definition: {
-    ssm_action_definition: {
-      ssm_action_type: "STOP_EC2_INSTANCES",
-      parameters: [
-        { name: "TagFilter", value: "Environment:feature-*" },
-        { name: "AgeFilter", value: "older-than-7-days" },
-        { name: "PreservePersistentData", value: "true" }
-      ]
-    }
-  }
-})
-```
-
-This resource enables intelligent, risk-aware automated cost controls that maintain business continuity while enforcing financial discipline across complex AWS environments.