pangea 0.0.45 → 0.0.47

data/lib/pangea/resources/aws_eventbridge_bus/CLAUDE.md

@@ -1,208 +0,0 @@
-# AWS EventBridge Bus Implementation
-
-This implementation provides comprehensive EventBridge custom event bus creation for event-driven architectures with full validation and type safety.
-
-## Architecture
-
-### Type System
-- `EventBridgeBusAttributes` - Main configuration struct with bus-specific validation
-- `EventBridgeBusConfigs` - Pre-built templates for common event bus patterns
-- Comprehensive validation for AWS EventBridge naming and configuration rules
-
-### Key Validations
-
-**Bus Naming Rules**
-- Character validation (alphanumeric, dots, hyphens, underscores only)
-- Length constraints (1-256 characters)
-- Reserved name protection ("default" cannot be created)
-- AWS service prefix validation ("aws." prefix restricted)
-
-**Bus Type Classification**
-- **Default bus**: The AWS-provided default event bus
-- **Custom bus**: User-created buses for application isolation
-- **Partner bus**: Third-party integration buses
-- **AWS service bus**: Service-specific event buses
-
-**Partner Integration**
-- Event source name validation for partner buses
-- Character set restrictions for partner sources
-- Integration pattern enforcement
-
-### EventBridge Features
-
-**Event Routing**
-- Isolated event routing per bus
-- Cross-bus event forwarding capabilities
-- Rule organization and management
-
-**Security & Compliance**
-- KMS encryption for event data
-- IAM integration for access control
-- Event payload encryption at rest
-
-**Multi-Tenancy**
-- Tenant isolation through separate buses
-- Cost allocation per tenant
-- Security boundary enforcement
-
-## Implementation Patterns
-
-### Bus Organization Strategy
-1. **Domain separation** - One bus per business domain
-2. **Environment isolation** - Separate buses per environment
-3. **Service boundaries** - Microservice communication isolation
-4. **Security zones** - Different buses for different security requirements
-
-### Validation Approach
-- **Name format validation** - AWS naming conventions
-- **Type consistency** - Proper configuration for bus type
-- **Security requirements** - Encryption and access patterns
-- **Integration rules** - Partner and service integration validation
-
-### Helper Methods
-- Bus type identification and classification
-- Cost estimation based on usage patterns
-- Rule limit calculation per bus type
-- Feature capability detection
-
-## Terraform Integration
-
-### Resource Generation
-- Uses `aws_cloudwatch_event_bus` resource type
-- Conditional encryption configuration
-- Partner integration setup
-- Comprehensive tagging support
-
-### Output Management
-- Bus identifiers and ARNs
-- Metadata for rule creation
-- Integration endpoints for applications
-
-## Event-Driven Architecture Patterns
-
-**Microservices Communication**
-- Service-to-service event routing
-- Loose coupling through event contracts
-- Async communication patterns
-
-**CQRS Implementation**
-- Command/query separation
-- Event sourcing integration
-- Read model projection events
-
-**Saga Pattern**
-- Distributed transaction orchestration
-- Compensation event handling
-- State machine coordination
-
-**Event Sourcing**
-- Domain event capture
-- Event stream management
-- Replay and projection capabilities
-
-## Integration Strategies
-
-**AWS Service Integration**
-- Native AWS service event routing
-- Infrastructure event processing
-- Automated workflow triggers
-
-**Third-Party Integration**
-- Partner event bus configuration
-- SaaS platform webhook handling
-- External system event ingestion
-
-**Custom Application Events**
-- Domain-specific event routing
-- Business process coordination
-- Real-time data synchronization
-
-## Cost Optimization
-
-**Bus Selection Strategy**
-- Use default bus for simple scenarios
-- Custom buses for isolation requirements
-- Cost-effective rule distribution
-
-**Event Volume Management**
-- Monitor events per bus
-- Optimize rule placement
-- Batch processing considerations
-
-**Resource Allocation**
-- Per-bus cost tracking
-- Tenant cost allocation
-- Environment-specific budgeting
-
-## Security Implementation
-
-**Encryption Configuration**
-- Event payload encryption
-- KMS key management
-- Cross-region encryption
-
-**Access Control**
-- IAM policy integration
-- Resource-based policies
-- Service-to-service authentication
-
-**Compliance Requirements**
-- Audit trail maintenance
-- Event retention policies
-- Regulatory compliance support
-
-## Operational Excellence
-
-**Monitoring & Observability**
-- Bus-level metrics collection
-- Event flow monitoring
-- Error tracking and alerting
-
-**Disaster Recovery**
-- Cross-region event replication
-- Backup and restore procedures
-- Failover automation
-
-**Performance Optimization**
-- Event throughput monitoring
-- Latency optimization
-- Rule efficiency analysis
-
-## Configuration Templates
-
-**Application Patterns**
-- Single-domain event buses
-- Multi-service communication hubs
-- Event-driven workflow coordination
-
-**Tenant Isolation**
-- Per-tenant event buses
-- Cost allocation and tracking
-- Security boundary enforcement
-
-**Service Mesh Integration**
-- Service discovery events
-- Health check coordination
-- Configuration change propagation
-
-## Best Practices Implementation
-
-**Naming Conventions**
-- Descriptive bus names
-- Environment prefixes
-- Domain identification
-
-**Event Schema Management**
-- Consistent event formats
-- Version compatibility
-- Schema evolution strategies
-
-**Rule Organization**
-- Logical rule grouping
-- Performance optimization
-- Maintenance simplification
-
-**Security Hardening**
-- Encryption by default
-- Least privilege access
-- Event data sanitization

data/lib/pangea/resources/aws_eventbridge_rule/CLAUDE.md

@@ -1,232 +0,0 @@
-# AWS EventBridge Rule Implementation
-
-This implementation provides comprehensive EventBridge rule creation for both scheduled and event-driven patterns with full validation and type safety.
-
-## Architecture
-
-### Type System
-- `EventBridgeRuleAttributes` - Main configuration struct with rule-specific validation
-- `EventPattern` - JSON event pattern validation with AWS EventBridge schema compliance
-- `ScheduleExpression` - Rate and cron expression validation with AWS limits
-- `EventBridgeRuleConfigs` - Pre-built templates for common rule patterns
-
-### Key Validations
-
-**Event Pattern Validation**
-- JSON format validation and parsing
-- EventBridge schema compliance (allowed keys: source, detail-type, detail, etc.)
-- Pattern structure validation for effective event matching
-- Cross-service event pattern consistency
-
-**Schedule Expression Validation**
-- Rate expression format: `rate(value unit)` with minimum constraints
-- Cron expression format: 6-field AWS cron format validation
-- Minimum frequency enforcement (1 minute for rate expressions)
-- Business logic validation for reasonable schedules
-
-**Mutual Exclusivity**
-- Event pattern and schedule expression cannot coexist
-- Exactly one pattern type required
-- Clear error messages for configuration conflicts
-
-**IAM Integration**
-- Role ARN format validation
-- Cross-account role pattern support
-- Service-linked role compatibility
-
-### EventBridge Features
-
-**Event-Driven Processing**
-- AWS service event integration (S3, EC2, Lambda, etc.)
-- Custom application event routing
-- Multi-source event aggregation
-- Event filtering and transformation
-
-**Scheduled Execution**
-- Cron-based scheduling with AWS 6-field format
-- Rate-based execution with configurable intervals
-- Business hours scheduling patterns
-- Maintenance window automation
-
-**Custom Bus Integration**
-- Application-specific event bus routing
-- Multi-tenant event isolation
-- Service boundary enforcement
-
-## Implementation Patterns
-
-### Rule Organization Strategy
-1. **Event type classification** - Scheduled vs event-driven
-2. **Bus organization** - Rules grouped by business domain
-3. **Pattern specificity** - Start specific, broaden as needed
-4. **Role management** - Appropriate IAM roles for target invocation
-
-### Validation Approach
-- **Format validation** - JSON and expression syntax
-- **Semantic validation** - AWS service compliance
-- **Business rule validation** - Reasonable frequencies and patterns
-- **Integration validation** - Role and target compatibility
-
-### Helper Methods
-- Event pattern parsing and analysis
-- Schedule frequency interpretation
-- Cost estimation based on rule type and frequency
-- Rule capability detection
-
-## Terraform Integration
-
-### Resource Generation
-- Uses `aws_cloudwatch_event_rule` resource type
-- Conditional pattern/schedule configuration
-- IAM role integration
-- Event bus assignment
-
-### Output Management
-- Rule identifiers and ARNs
-- State and configuration metadata
-- Integration points for target creation
-
-## Event Pattern Design
-
-**AWS Service Integration**
-- Standardized AWS service event patterns
-- Service-specific event filtering
-- Cross-service event correlation
-- Infrastructure automation triggers
-
-**Custom Application Events**
-- Domain-specific event schemas
-- Business process event patterns
-- Microservice communication events
-- State change notifications
-
-**Multi-Source Aggregation**
-- Cross-service event collection
-- Event correlation and causation
-- Workflow orchestration events
-- System-wide monitoring patterns
-
-## Schedule Design Patterns
-
-**Business Process Automation**
-- End-of-day batch processing
-- Business hours operations
-- Weekend maintenance windows
-- Monthly/quarterly reporting
-
-**System Maintenance**
-- Log rotation and cleanup
-- Health check execution
-- Resource optimization
-- Backup and archival processes
-
-**Monitoring and Alerting**
-- High-frequency health checks
-- Performance metric collection
-- Cost optimization analysis
-- Security audit triggers
-
-## Cost Optimization
-
-**Schedule Frequency Management**
-- Minimum viable frequency selection
-- Business hours scheduling
-- Batch processing optimization
-- Resource utilization monitoring
-
-**Event Volume Optimization**
-- Specific event pattern design
-- Early filtering strategies
-- Batch event processing
-- Rule consolidation opportunities
-
-**Rule Distribution**
-- Optimal rule placement across buses
-- Cost-effective pattern matching
-- Resource sharing strategies
-
-## Security Implementation
-
-**IAM Role Integration**
-- Least privilege role assignment
-- Cross-account access patterns
-- Service-to-service authentication
-- Audit trail maintenance
-
-**Event Data Security**
-- Sensitive data handling patterns
-- Event payload encryption
-- Access control enforcement
-- Compliance requirement support
-
-## Operational Excellence
-
-**Rule Management**
-- State management (ENABLED/DISABLED)
-- Rule lifecycle automation
-- Configuration drift detection
-- Performance monitoring
-
-**Error Handling**
-- Rule execution error tracking
-- Dead letter queue integration
-- Retry strategy implementation
-- Failure notification patterns
-
-**Monitoring & Observability**
-- Rule execution metrics
-- Event matching analytics
-- Performance optimization insights
-- Cost tracking and optimization
-
-## Configuration Templates
-
-**AWS Service Patterns**
-- EC2 state change monitoring
-- S3 object lifecycle events
-- Lambda execution tracking
-- Auto Scaling events
-
-**Application Patterns**
-- User lifecycle events
-- Order processing workflows
-- Payment transaction events
-- Inventory management events
-
-**System Patterns**
-- Health check automation
-- Backup and recovery triggers
-- Performance monitoring
-- Security event processing
-
-**Disaster Recovery Patterns**
-- Regional failure detection
-- Automated failover triggers
-- Recovery process initiation
-- Business continuity events
-
-## Best Practices Implementation
-
-**Event Schema Design**
-- Consistent event structures
-- Version-compatible schemas
-- Meaningful event metadata
-- Correlation ID patterns
-
-**Rule Optimization**
-- Pattern specificity balancing
-- Performance vs flexibility trade-offs
-- Rule consolidation strategies
-- Maintenance cost minimization
-
-**Integration Patterns**
-- Loose coupling through events
-- Async communication patterns
-- Event-driven workflow design
-- Service boundary respect
-
-**Operational Patterns**
-- Environment-specific rules
-- Feature flag integration
-- Gradual rollout support
-- A/B testing enablement

data/lib/pangea/resources/aws_eventbridge_target/CLAUDE.md

@@ -1,260 +0,0 @@
-# AWS EventBridge Target Implementation
-
-This implementation provides comprehensive EventBridge target creation with support for all AWS service integrations, advanced reliability features, and type-safe configuration validation.
-
-## Architecture
-
-### Type System
-- `EventBridgeTargetAttributes` - Main configuration struct with comprehensive target validation
-- Service-specific parameter types (`EcsParameters`, `BatchParameters`, etc.)
-- Input transformation validation (`InputTransformer`)
-- Reliability configuration types (`RetryPolicy`, `DeadLetterConfig`)
-- `EventBridgeTargetConfigs` - Pre-built templates for common target patterns
-
-### Key Validations
-
-**Target Type Detection**
-- ARN-based service detection and classification
-- Service-specific parameter requirements
-- IAM role requirements per service type
-- Cross-account target validation
-
-**Service-Specific Requirements**
-- **Lambda**: Optional role for cross-account, no required parameters
-- **SQS**: FIFO queue message group ID validation
-- **Kinesis**: Required role ARN and optional partition key path
-- **ECS**: Required role and task definition, network configuration
-- **Batch**: Required role and job parameters, array processing support
-- **API Gateway**: Required role for invocation
-
-**Input Configuration Validation**
-- Mutual exclusivity of input, input_path, and input_transformer
-- JSONPath validation for input transformations
-- Template format validation for input_transformer
-- Service-specific input requirements
-
-### EventBridge Target Features
-
-**Multi-Service Integration**
-- Native AWS service support (Lambda, SQS, SNS, Kinesis, ECS, Batch)
-- API Gateway and Step Functions integration
-- Custom destination support
-- Cross-account target capabilities
-
-**Reliability & Error Handling**
-- Configurable retry policies with attempt and age limits
-- Dead letter queue integration for failed events
-- Event age management and expiration
-- Circuit breaker pattern support
-
-**Input Processing**
-- JSONPath-based input transformation
-- Template-based payload restructuring
-- Static input injection
-- Input path extraction
-
-## Implementation Patterns
-
-### Target Classification Strategy
-1. **Service identification** - ARN pattern matching
-2. **Parameter requirement mapping** - Service-specific needs
-3. **IAM role enforcement** - Security and cross-account access
-4. **Validation rule application** - Service constraints
-
-### Validation Approach
-- **ARN format validation** - Service and resource identification
-- **Parameter coherence** - Service-specific configuration requirements
-- **Security validation** - Required IAM roles and permissions
-- **Input format validation** - Transformation and template syntax
-
-### Helper Methods
-- Target type detection and classification
-- Service capability assessment
-- Reliability feature detection
-- Cost estimation per service type
-
-## Terraform Integration
-
-### Resource Generation
-- Uses `aws_cloudwatch_event_target` resource type
-- Service-specific parameter blocks
-- Conditional configuration based on target type
-- Complex nested structures for ECS and Batch parameters
-
-### Output Management
-- Target identifiers and metadata
-- Rule association information
-- Service-specific output attributes
-
-## Service Integration Patterns
-
-**Serverless Architecture**
-- Lambda function invocation with optional input transformation
-- SQS queue message delivery with FIFO support
-- SNS topic publishing for fan-out patterns
-
-**Container Orchestration**
-- ECS task execution with Fargate/EC2 launch types
-- Network configuration for VPC-based tasks
-- Capacity provider and placement strategies
-
-**Batch Processing**
-- AWS Batch job scheduling and execution
-- Array job processing for parallel workloads
-- Retry strategies and job queue management
-
-**Streaming Data**
-- Kinesis stream data ingestion
-- Partition key management for data distribution
-- Real-time data processing pipeline integration
-
-## Reliability Implementation
-
-**Retry Strategy**
-- Exponential backoff with configurable attempts
-- Maximum event age constraints
-- Service-specific retry behavior
-- Cost optimization through retry limits
-
-**Dead Letter Queue Integration**
-- Failed event capture and analysis
-- Error debugging and forensics
-- Replay capability for recovered services
-- Alert integration for operational awareness
-
-**Input Transformation Reliability**
-- Template validation and error handling
-- JSONPath expression validation
-- Fallback strategies for transformation failures
-- Input sanitization and security
-
-## Cost Optimization
-
-**Target Selection Strategy**
-- Service cost comparison and optimization
-- Throughput and latency trade-offs
-- Reserved capacity considerations
-- Multi-target cost aggregation
-
-**Processing Efficiency**
-- Input transformation overhead minimization
-- Batch processing optimization
-- Resource utilization monitoring
-- Auto-scaling integration
-
-**Retry Cost Management**
-- Retry attempt cost calculation
-- Dead letter queue storage costs
-- Failed event processing optimization
-
-## Security Implementation
-
-**IAM Role Management**
-- Least privilege principle enforcement
-- Cross-account access patterns
-- Service-to-service authentication
-- Resource-based policy integration
-
-**Input Data Security**
-- Sensitive data handling in transformations
-- Event payload encryption
-- Input sanitization and validation
-- Audit trail maintenance
-
-**Network Security**
-- VPC endpoint utilization
-- Private subnet routing
-- Security group configuration
-- TLS encryption enforcement
-
-## Operational Excellence
-
-**Target Health Monitoring**
-- Execution success rate tracking
-- Latency and performance metrics
-- Error rate analysis and alerting
-- Capacity utilization monitoring
-
-**Configuration Management**
-- Target lifecycle automation
-- Configuration drift detection
-- Version control and rollback
-- Environment-specific configurations
-
-**Troubleshooting Support**
-- Event tracing and correlation
-- Error message enrichment
-- Debug mode capabilities
-- Performance profiling
-
-## Service-Specific Optimizations
-
-**Lambda Targets**
-- Cold start mitigation strategies
-- Memory and timeout optimization
-- Concurrent execution management
-- Cost-effective invocation patterns
-
-**ECS Targets**
-- Launch type selection optimization
-- Network configuration best practices
-- Resource allocation strategies
-- Auto-scaling integration
-
-**Batch Targets**
-- Job queue optimization
-- Compute environment management
-- Array job sizing strategies
-- Cost-effective scheduling
-
-**Streaming Targets**
-- Partition strategy optimization
-- Throughput scaling considerations
-- Data serialization efficiency
-- Real-time processing patterns
-
-## Configuration Templates
-
-**Reliability Patterns**
-- High-availability target configurations
-- Multi-region failover setups
-- Circuit breaker implementations
-- Graceful degradation strategies
-
-**Processing Patterns**
-- Fan-out event distribution
-- Sequential processing chains
-- Parallel processing workflows
-- Batch aggregation patterns
-
-**Integration Patterns**
-- Microservice communication
-- Legacy system integration
-- Third-party service connectivity
-- Hybrid cloud architectures
-
-## Best Practices Implementation
-
-**Target Design Principles**
-- Single responsibility per target
-- Loose coupling through events
-- Idempotent target operations
-- Error boundary establishment
-
-**Performance Optimization**
-- Target selection based on requirements
-- Input transformation efficiency
-- Resource allocation optimization
-- Monitoring and alerting integration
-
-**Operational Patterns**
-- Blue/green deployment support
-- Feature flag integration
-- Canary release patterns
-- A/B testing capabilities
-
-**Security Hardening**
-- Minimal permission policies
-- Input validation and sanitization
-- Output data protection
-- Compliance requirement support