specweave 0.21.2 → 0.22.0

package/plugins/specweave/iac-templates/aws-lambda/main.tf.hbs

@@ -0,0 +1,241 @@
+# AWS Lambda Function with API Gateway and DynamoDB
+# Generated by SpecWeave Serverless Intelligence
+# Platform: AWS Lambda
+# Project: {{projectName}}
+# Environment: {{environment}}
+
+terraform {
+  required_version = ">= 1.0"
+  required_providers {
+    aws = {
+      source  = "hashicorp/aws"
+      version = "~> 5.0"
+    }
+  }
+}
+
+###############################
+# Lambda Function
+###############################
+
+resource "aws_lambda_function" "{{snakeCase functionName}}" {
+  function_name = "{{functionName}}-{{environment}}"
+  role          = aws_iam_role.lambda_role.arn
+  runtime       = "{{runtime}}"
+  handler       = "{{#if handler}}{{handler}}{{else}}index.handler{{/if}}"
+  filename      = "{{functionName}}.zip"
+
+  memory_size = {{#if memorySize}}{{memorySize}}{{else}}256{{/if}}
+  timeout     = {{#if timeout}}{{timeout}}{{else}}30{{/if}}
+
+  environment {
+    variables = {
+      ENVIRONMENT = "{{environment}}"
+      {{#if databaseName}}
+      DYNAMODB_TABLE = aws_dynamodb_table.{{snakeCase databaseName}}.name
+      {{/if}}
+      {{#if apiName}}
+      API_ENDPOINT = aws_apigatewayv2_api.{{snakeCase apiName}}.api_endpoint
+      {{/if}}
+    }
+  }
+
+  tags = {
+    Name        = "{{functionName}}-{{environment}}"
+    Environment = "{{environment}}"
+    Project     = "{{projectName}}"
+    ManagedBy   = "Terraform"
+  }
+}
+
+###############################
+# IAM Role and Policies
+###############################
+
+resource "aws_iam_role" "lambda_role" {
+  name = "{{snakeCase functionName}}-lambda-role-{{environment}}"
+
+  assume_role_policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Action = "sts:AssumeRole"
+        Effect = "Allow"
+        Principal = {
+          Service = "lambda.amazonaws.com"
+        }
+      }
+    ]
+  })
+
+  tags = {
+    Name        = "{{functionName}}-lambda-role"
+    Environment = "{{environment}}"
+    Project     = "{{projectName}}"
+  }
+}
+
+# Basic Lambda execution policy
+resource "aws_iam_role_policy_attachment" "lambda_basic" {
+  role       = aws_iam_role.lambda_role.name
+  policy_arn = "arn:aws:iam::aws:policy/service-role/AWSLambdaBasicExecutionRole"
+}
+
+{{#if databaseName}}
+# DynamoDB access policy
+resource "aws_iam_role_policy" "dynamodb_policy" {
+  name = "{{snakeCase functionName}}-dynamodb-policy"
+  role = aws_iam_role.lambda_role.id
+
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Effect = "Allow"
+        Action = [
+          "dynamodb:GetItem",
+          "dynamodb:PutItem",
+          "dynamodb:UpdateItem",
+          "dynamodb:DeleteItem",
+          "dynamodb:Query",
+          "dynamodb:Scan"
+        ]
+        Resource = aws_dynamodb_table.{{snakeCase databaseName}}.arn
+      }
+    ]
+  })
+}
+{{/if}}
+
+###############################
+# CloudWatch Logs
+###############################
+
+resource "aws_cloudwatch_log_group" "lambda_logs" {
+  name              = "/aws/lambda/{{functionName}}-{{environment}}"
+  retention_in_days = {{#if (eq environment "prod")}}30{{else}}7{{/if}}
+
+  tags = {
+    Name        = "{{functionName}}-logs"
+    Environment = "{{environment}}"
+    Project     = "{{projectName}}"
+  }
+}
+
+{{#if apiName}}
+###############################
+# API Gateway HTTP API
+###############################
+
+resource "aws_apigatewayv2_api" "{{snakeCase apiName}}" {
+  name          = "{{apiName}}-{{environment}}"
+  protocol_type = "HTTP"
+  description   = "API for {{projectName}} ({{environment}})"
+
+  cors_configuration {
+    allow_origins = {{#if (eq environment "prod")}}["https://{{projectName}}.com"]{{else}}["*"]{{/if}}
+    allow_methods = ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
+    allow_headers = ["content-type", "authorization"]
+    max_age       = 300
+  }
+
+  tags = {
+    Name        = "{{apiName}}-{{environment}}"
+    Environment = "{{environment}}"
+    Project     = "{{projectName}}"
+  }
+}
+
+resource "aws_apigatewayv2_stage" "{{snakeCase apiName}}_stage" {
+  api_id      = aws_apigatewayv2_api.{{snakeCase apiName}}.id
+  name        = "{{#if apiStageName}}{{apiStageName}}{{else}}$default{{/if}}"
+  auto_deploy = true
+
+  access_log_settings {
+    destination_arn = aws_cloudwatch_log_group.api_logs.arn
+    format = jsonencode({
+      requestId      = "$context.requestId"
+      ip             = "$context.identity.sourceIp"
+      requestTime    = "$context.requestTime"
+      httpMethod     = "$context.httpMethod"
+      routeKey       = "$context.routeKey"
+      status         = "$context.status"
+      protocol       = "$context.protocol"
+      responseLength = "$context.responseLength"
+    })
+  }
+
+  tags = {
+    Name        = "{{apiName}}-stage-{{environment}}"
+    Environment = "{{environment}}"
+    Project     = "{{projectName}}"
+  }
+}
+
+resource "aws_apigatewayv2_integration" "lambda_integration" {
+  api_id             = aws_apigatewayv2_api.{{snakeCase apiName}}.id
+  integration_type   = "AWS_PROXY"
+  integration_uri    = aws_lambda_function.{{snakeCase functionName}}.invoke_arn
+  integration_method = "POST"
+  payload_format_version = "2.0"
+}
+
+resource "aws_apigatewayv2_route" "proxy_route" {
+  api_id    = aws_apigatewayv2_api.{{snakeCase apiName}}.id
+  route_key = "ANY /{proxy+}"
+  target    = "integrations/${aws_apigatewayv2_integration.lambda_integration.id}"
+}
+
+resource "aws_lambda_permission" "api_gateway" {
+  statement_id  = "AllowExecutionFromAPIGateway"
+  action        = "lambda:InvokeFunction"
+  function_name = aws_lambda_function.{{snakeCase functionName}}.function_name
+  principal     = "apigateway.amazonaws.com"
+  source_arn    = "${aws_apigatewayv2_api.{{snakeCase apiName}}.execution_arn}/*/*"
+}
+
+resource "aws_cloudwatch_log_group" "api_logs" {
+  name              = "/aws/apigateway/{{apiName}}-{{environment}}"
+  retention_in_days = {{#if (eq environment "prod")}}30{{else}}7{{/if}}
+
+  tags = {
+    Name        = "{{apiName}}-logs"
+    Environment = "{{environment}}"
+    Project     = "{{projectName}}"
+  }
+}
+{{/if}}
+
+{{#if databaseName}}
+###############################
+# DynamoDB Table
+###############################
+
+resource "aws_dynamodb_table" "{{snakeCase databaseName}}" {
+  name           = "{{databaseName}}-{{environment}}"
+  billing_mode   = "PAY_PER_REQUEST" # On-demand pricing for variable workloads
+  hash_key       = "id"
+  stream_enabled = false
+
+  attribute {
+    name = "id"
+    type = "S"
+  }
+
+  ttl {
+    enabled        = false
+    attribute_name = ""
+  }
+
+  point_in_time_recovery {
+    enabled = {{#if (eq environment "prod")}}true{{else}}false{{/if}}
+  }
+
+  tags = {
+    Name        = "{{databaseName}}-{{environment}}"
+    Environment = "{{environment}}"
+    Project     = "{{projectName}}"
+    ManagedBy   = "Terraform"
+  }
+}
+{{/if}}

package/plugins/specweave/iac-templates/aws-lambda/outputs.tf.hbs

@@ -0,0 +1,61 @@
+# Terraform Outputs for AWS Lambda
+# Project: {{projectName}}
+
+output "lambda_function_arn" {
+  description = "ARN of the Lambda function"
+  value       = aws_lambda_function.{{snakeCase functionName}}.arn
+}
+
+output "lambda_function_name" {
+  description = "Name of the Lambda function"
+  value       = aws_lambda_function.{{snakeCase functionName}}.function_name
+}
+
+output "lambda_function_invoke_arn" {
+  description = "Invoke ARN of the Lambda function"
+  value       = aws_lambda_function.{{snakeCase functionName}}.invoke_arn
+}
+
+output "lambda_role_arn" {
+  description = "ARN of the Lambda IAM role"
+  value       = aws_iam_role.lambda_role.arn
+}
+
+output "lambda_role_name" {
+  description = "Name of the Lambda IAM role"
+  value       = aws_iam_role.lambda_role.name
+}
+
+output "lambda_log_group" {
+  description = "CloudWatch Log Group for Lambda function"
+  value       = aws_cloudwatch_log_group.lambda_logs.name
+}
+
+{{#if apiName}}
+output "api_endpoint" {
+  description = "API Gateway endpoint URL"
+  value       = aws_apigatewayv2_api.{{snakeCase apiName}}.api_endpoint
+}
+
+output "api_id" {
+  description = "API Gateway ID"
+  value       = aws_apigatewayv2_api.{{snakeCase apiName}}.id
+}
+
+output "api_execution_arn" {
+  description = "API Gateway execution ARN"
+  value       = aws_apigatewayv2_api.{{snakeCase apiName}}.execution_arn
+}
+{{/if}}
+
+{{#if databaseName}}
+output "dynamodb_table_name" {
+  description = "DynamoDB table name"
+  value       = aws_dynamodb_table.{{snakeCase databaseName}}.name
+}
+
+output "dynamodb_table_arn" {
+  description = "DynamoDB table ARN"
+  value       = aws_dynamodb_table.{{snakeCase databaseName}}.arn
+}
+{{/if}}

package/plugins/specweave/iac-templates/aws-lambda/provider.tf.hbs

@@ -0,0 +1,15 @@
+# AWS Provider Configuration
+# Project: {{projectName}}
+
+provider "aws" {
+  region = var.aws_region
+
+  default_tags {
+    tags = {
+      Project     = "{{projectName}}"
+      Environment = var.environment
+      ManagedBy   = "Terraform"
+      CreatedBy   = "SpecWeave"
+    }
+  }
+}

package/plugins/specweave/iac-templates/aws-lambda/variables.tf.hbs

@@ -0,0 +1,88 @@
+# Terraform Variables for AWS Lambda
+# Project: {{projectName}}
+
+variable "aws_region" {
+  description = "AWS region for deployment"
+  type        = string
+  default     = "{{#if region}}{{region}}{{else}}us-east-1{{/if}}"
+}
+
+variable "environment" {
+  description = "Environment name (dev, staging, prod)"
+  type        = string
+  default     = "{{environment}}"
+  validation {
+    condition     = contains(["dev", "staging", "prod"], var.environment)
+    error_message = "Environment must be dev, staging, or prod."
+  }
+}
+
+variable "project_name" {
+  description = "Project name"
+  type        = string
+  default     = "{{projectName}}"
+}
+
+variable "function_name" {
+  description = "Lambda function name"
+  type        = string
+  default     = "{{functionName}}"
+}
+
+variable "runtime" {
+  description = "Lambda runtime (e.g., nodejs20.x, python3.12)"
+  type        = string
+  default     = "{{runtime}}"
+}
+
+variable "memory_size" {
+  description = "Lambda memory size in MB"
+  type        = number
+  default     = {{#if memorySize}}{{memorySize}}{{else}}256{{/if}}
+  validation {
+    condition     = var.memory_size >= 128 && var.memory_size <= 10240
+    error_message = "Memory size must be between 128 MB and 10240 MB."
+  }
+}
+
+variable "timeout" {
+  description = "Lambda timeout in seconds"
+  type        = number
+  default     = {{#if timeout}}{{timeout}}{{else}}30{{/if}}
+  validation {
+    condition     = var.timeout >= 1 && var.timeout <= 900
+    error_message = "Timeout must be between 1 and 900 seconds."
+  }
+}
+
+{{#if apiName}}
+variable "api_name" {
+  description = "API Gateway name"
+  type        = string
+  default     = "{{apiName}}"
+}
+
+variable "api_stage_name" {
+  description = "API Gateway stage name"
+  type        = string
+  default     = "{{#if apiStageName}}{{apiStageName}}{{else}}default{{/if}}"
+}
+{{/if}}
+
+{{#if databaseName}}
+variable "database_name" {
+  description = "DynamoDB table name"
+  type        = string
+  default     = "{{databaseName}}"
+}
+{{/if}}
+
+variable "tags" {
+  description = "Additional tags to apply to resources"
+  type        = map(string)
+  default     = {
+    Project     = "{{projectName}}"
+    Environment = "{{environment}}"
+    ManagedBy   = "Terraform"
+  }
+}