feat(aws): add encryption fields and DAX/AppSync resources for finops policies (#67)

Author: liamg

pkg/tree/aws/appsync/api_cache.go

@@ -0,0 +1,12 @@
+package appsync
+
+import (
+	"github.com/infracost/go-proto/pkg/tree/resource"
+	"github.com/infracost/go-proto/pkg/tree/value"
+)
+
+type APICache struct {
+	resource.Resource        `tree:"-"`
+	AtRestEncryptionEnabled  value.Bool `tree:"at_rest_encryption_enabled"`
+	TransitEncryptionEnabled value.Bool `tree:"transit_encryption_enabled"`
+}

pkg/tree/aws/appsync/appsync.go

@@ -0,0 +1,5 @@
+package appsync
+
+type AppSync struct {
+	APICaches []APICache `tree:"api_caches"`
+}

pkg/tree/aws/aws.go

@@ -8,6 +8,7 @@ import (
 	"github.com/infracost/go-proto/pkg/tree/aws/apigateway"
 	"github.com/infracost/go-proto/pkg/tree/aws/apigatewayv2"
 	"github.com/infracost/go-proto/pkg/tree/aws/appautoscaling"
+	"github.com/infracost/go-proto/pkg/tree/aws/appsync"
 	"github.com/infracost/go-proto/pkg/tree/aws/backup"
 	"github.com/infracost/go-proto/pkg/tree/aws/batch"
 	"github.com/infracost/go-proto/pkg/tree/aws/cloudformation"
@@ -69,6 +70,7 @@ type AWS struct {
 	APIGateway              apigateway.APIGateway                 `tree:"apigateway"`
 	APIGatewayV2            apigatewayv2.APIGatewayV2             `tree:"apigatewayv2"`
 	AppAutoScaling          appautoscaling.AppAutoScaling         `tree:"appautoscaling"`
+	AppSync                 appsync.AppSync                       `tree:"appsync"`
 	Backup                  backup.Backup                         `tree:"backup"`
 	Batch                   batch.Batch                           `tree:"batch"`
 	CloudFormation          cloudformation.CloudFormation         `tree:"cloudformation"`

pkg/tree/aws/backup/vault.go

@@ -1,7 +1,11 @@
 package backup
 
-import "github.com/infracost/go-proto/pkg/tree/resource"
+import (
+	"github.com/infracost/go-proto/pkg/tree/resource"
+	"github.com/infracost/go-proto/pkg/tree/value"
+)
 
 type Vault struct {
 	resource.Resource `tree:"-"`
+	KmsKeyArn         value.String `tree:"kms_key_arn"`
 }

pkg/tree/aws/docdb/cluster.go

@@ -7,5 +7,6 @@ import (
 
 type Cluster struct {
 	resource.Resource     `tree:"-"`
-	BackupRetentionPeriod value.Int `tree:"backup_retention_period"`
+	BackupRetentionPeriod value.Int  `tree:"backup_retention_period"`
+	StorageEncrypted      value.Bool `tree:"storage_encrypted"`
 }

pkg/tree/aws/dynamodb/dax_cluster.go

@@ -0,0 +1,12 @@
+package dynamodb
+
+import (
+	"github.com/infracost/go-proto/pkg/tree/resource"
+	"github.com/infracost/go-proto/pkg/tree/value"
+)
+
+type DAXCluster struct {
+	resource.Resource             `tree:"-"`
+	ClusterEndpointEncryptionType value.String `tree:"cluster_endpoint_encryption_type"`
+	ServerSideEncryptionEnabled   value.Bool   `tree:"server_side_encryption_enabled"`
+}

pkg/tree/aws/dynamodb/dynamodb.go

@@ -1,5 +1,6 @@
 package dynamodb
 
 type DynamoDB struct {
-	Tables []Table `tree:"tables"`
+	Tables      []Table      `tree:"tables"`
+	DAXClusters []DAXCluster `tree:"dax_clusters"`
 }

pkg/tree/aws/ec2/ebs_volume.go

@@ -12,6 +12,7 @@ type EBSVolume struct {
 	SizeGB            value.Int                  `tree:"size"`
 	ThroughputMiBperS value.Int                  `tree:"throughput"`
 	MultiAttach       value.Bool                 `tree:"multi_attach"`
+	Encrypted         value.Bool                 `tree:"encrypted"`
 }
 
 type EBSVolumeType uint32

pkg/tree/aws/neptune/cluster.go

@@ -6,11 +6,12 @@ import (
 )
 
 type Cluster struct {
-	resource.Resource            `tree:"-"`
-	Identifier                   value.String                    `tree:"identifier"`
-	BackupRetentionPeriod        value.Int                       `tree:"backup_retention_period"`
-	StorageType                  value.Value[NeptuneStorageType] `tree:"storage_type"`
-	EnableCloudwatchLogsExports  value.List[string]              `tree:"enable_cloudwatch_logs_exports"`
+	resource.Resource           `tree:"-"`
+	Identifier                  value.String                    `tree:"identifier"`
+	BackupRetentionPeriod       value.Int                       `tree:"backup_retention_period"`
+	StorageType                 value.Value[NeptuneStorageType] `tree:"storage_type"`
+	EnableCloudwatchLogsExports value.List[string]              `tree:"enable_cloudwatch_logs_exports"`
+	StorageEncrypted            value.Bool                      `tree:"storage_encrypted"`
 }
 
 type NeptuneStorageType uint32

pkg/tree/aws/redshift/cluster.go

@@ -9,4 +9,5 @@ type Cluster struct {
 	resource.Resource `tree:"-"`
 	NodeType          value.String `tree:"node_type"`
 	NumberOfNodes     value.Int    `tree:"number_of_nodes"`
+	Encrypted         value.Bool   `tree:"encrypted"`
 }