generator.yaml

operations:
  CreateBackupPlan:
    input_wrapper_field_path: BackupPlan
  UpdateBackupPlan:
    input_wrapper_field_path: BackupPlan
  GetBackupPlan:
    output_wrapper_field_path: BackupPlan
  CreateBackupSelection:
    input_wrapper_field_path: BackupSelection
  GetBackupSelection:
    output_wrapper_field_path: BackupSelection

ignore:
  resource_names:
    - Framework
    - LegalHold
    - LogicallyAirGappedBackupVault
    - ReportPlan
    - RestoreAccessBackupVault
    - RestoreTestingPlan
    - RestoreTestingSelection
    - TieringConfiguration
  field_paths: []

resources:
  BackupVault:
    ignore_idempotency_token: true
    fields:
      Name:
        is_primary_key: true
        is_immutable: true
      # Cross-resource reference to KMS Key for encryption.
      # Set at vault creation time and cannot be changed afterward.
      EncryptionKeyARN:
        is_immutable: true
        references:
          resource: Key
          service_name: kms
          path: Status.ACKResourceMetadata.ARN
      # Read-only status fields from DescribeBackupVault
      EncryptionKeyType:
        is_read_only: true
        from:
          operation: DescribeBackupVault
          path: EncryptionKeyType
      LockDate:
        is_read_only: true
        from:
          operation: DescribeBackupVault
          path: LockDate
      Locked:
        is_read_only: true
        from:
          operation: DescribeBackupVault
          path: Locked
      MaxRetentionDays:
        is_read_only: true
        from:
          operation: DescribeBackupVault
          path: MaxRetentionDays
      MinRetentionDays:
        is_read_only: true
        from:
          operation: DescribeBackupVault
          path: MinRetentionDays
      NumberOfRecoveryPoints:
        is_read_only: true
        from:
          operation: DescribeBackupVault
          path: NumberOfRecoveryPoints
      # NOTE: VaultState is intentionally excluded. The DescribeBackupVault
      # API only returns it for logically air-gapped vaults (which are in the
      # ignore list). For standard BACKUP_VAULT types it is always empty.
      VaultType:
        is_read_only: true
        from:
          operation: DescribeBackupVault
          path: VaultType
    # There is no UpdateBackupVault API. Fields must be updated via separate APIs.
    update_operation:
      custom_method_name: customUpdateBackupVault
    hooks:
      sdk_read_one_post_set_output:
        template_path: hooks/backup_vault/sdk_read_one_post_set_output.go.tpl
    renames:
      operations:
        CreateBackupVault:
          input_fields:
            BackupVaultName: Name
            BackupVaultTags: Tags
        DeleteBackupVault:
          input_fields:
            BackupVaultName: Name
        DescribeBackupVault:
          input_fields:
            BackupVaultName: Name
          output_fields:
            BackupVaultName: Name
    exceptions:
      errors:
        404:
          code: AccessDeniedException
      terminal_codes:
        - InvalidParameterValueException
        - MissingParameterValueException
        - InvalidRequestException
  BackupPlan:
    ignore_idempotency_token: true
    hooks:
      sdk_create_post_build_request:
        template_path: hooks/backup_plan/sdk_create_post_build_request.go.tpl
      sdk_read_one_post_set_output:
        template_path: hooks/backup_plan/sdk_read_one_post_set_output.go.tpl
      sdk_update_pre_build_request:
        template_path: hooks/backup_plan/sdk_update_pre_build_request.go.tpl
      sdk_update_post_build_request:
        template_path: hooks/backup_plan/sdk_update_post_build_request.go.tpl
    fields:
      ID:
        is_primary_key: true
        is_immutable: true
      LastExecutionDate:
        is_read_only: true
        from:
          operation: GetBackupPlan
          path: LastExecutionDate
      Tags:
        type: "map[string]*string"
      Rules.TargetBackupVaultName:
        references:
          resource: BackupVault
          path: Spec.Name
      Rules.CopyActions.DestinationBackupVaultARN:
        references:
          resource: BackupVault
          path: Status.ACKResourceMetadata.ARN
    renames:
      operations:
        CreateBackupPlan:
          input_fields:
            BackupPlanName: Name
            BackupPlanTags: Tags
          output_fields:
            BackupPlanId: ID
        UpdateBackupPlan:
          input_fields:
            BackupPlanName: Name
            BackupPlanId: ID
        GetBackupPlan:
          input_fields:
            BackupPlanId: ID
          output_fields:
            BackupPlanName: Name
            BackupPlanId: ID
        DeleteBackupPlan:
          input_fields:
            BackupPlanId: ID
    exceptions:
      errors:
        404:
          code: ResourceNotFoundException
      terminal_codes:
        - InvalidParameterValueException
        - MissingParameterValueException
  BackupSelection:
    ignore_idempotency_token: true
    # No UpdateBackupSelection API — selections are immutable (create/delete only)
    update_operation:
      custom_method_name: customUpdateBackupSelection
    hooks:
      sdk_create_post_build_request:
        template_path: hooks/backup_selection/sdk_create_post_build_request.go.tpl
      sdk_delete_post_build_request:
        template_path: hooks/backup_selection/sdk_delete_post_build_request.go.tpl
      sdk_read_one_post_set_output:
        template_path: hooks/backup_selection/sdk_read_one_post_set_output.go.tpl
    fields:
      ID:
        is_primary_key: true
      # BackupPlanId is outside the input_wrapper_field_path (BackupSelection),
      # so it's not automatically flattened into the spec. Define as a custom
      # field with type so it appears in the spec.
      BackupPlanID:
        is_immutable: true
        is_required: true
        type: string
        references:
          resource: BackupPlan
          path: Status.ID
      IamRoleARN:
        references:
          resource: Role
          service_name: iam
          path: Status.ACKResourceMetadata.ARN
      Conditions:
        late_initialize:
          skip_incomplete_check: {}
    renames:
      operations:
        CreateBackupSelection:
          input_fields:
            SelectionName: Name
          output_fields:
            SelectionId: ID
        GetBackupSelection:
          output_fields:
            SelectionName: Name
            SelectionId: ID
    exceptions:
      errors:
        404:
          code: ResourceNotFoundException
      terminal_codes:
        - InvalidParameterValueException
        - MissingParameterValueException
    tags:
      ignore: true