unit block

unit "resource_type" "name" {
  attribute = value
}

unit "aws_rds_instance" "db" {
  engine              = "postgres"
  engine_version      = "15"
  instance_class      = "db.t3.micro"
  allocated_storage   = 20
  username            = "admin"
  password            = secret("aws_secrets_manager", "prod/db/password")
  skip_final_snapshot = true
}

const db = new aws.rds.Instance("db", {
    engine: "postgres",
    instanceClass: "db.t3.micro",
    allocatedStorage: 20,
    // ...
});

unit "aws_s3_bucket_v2" "backup" {
  bucket = "${~unit.aws_rds_instance.db.identifier}-backups"
}

unit "aws_s3_bucket_v2" "replicas" {
  count  = 3
  bucket = "replica-${count.index}"   # 0-based
}

unit "aws_s3_bucket_v2" "regional" {
  for_each = { "us-east-1" = "primary", "eu-west-1" = "secondary" }
  bucket   = "${each.key}-assets"
  tags     = { role = each.value }
}

unit "aws_rds_instance" "db" {
  engine         = "postgres"
  instance_class = "db.t3.micro"

  lifecycle {
    prevent_destroy       = true
    ignore_changes        = ["password"]
    create_before_destroy = false
  }
}

unit "aws_s3_bucket_v2" "logs" {
  bucket     = "app-logs"
  depends_on = [unit.aws_iam_role.logger]
}

input "enable_logging" { default = "true" }

unit "aws_s3_bucket_v2" "logs" {
  when   = input.enable_logging == "true"
  bucket = "app-logs"
}

unit "aws_rds_instance" "db" {
  instance_class = "db.r6g.4xlarge"
  cost_limit     = 500   # $500/month maximum
}

unit "aws_security_group" "web" {
  name = "web-sg"

  dynamic "ingress" {
    for_each = [80, 443]
    content {
      from_port = val
      to_port   = val
      protocol  = "tcp"
    }
  }
}

unit "aws_rds_instance" "db" {
  password = secret("aws_secrets_manager", "prod/db/password")
  api_key  = secret("vault", "secret/prod/api#key")
  debug    = secret("env", "DEBUG_MODE")
}

ubx docs aws_s3_bucket_v2 --list
ubx docs aws_rds_instance --list
ubx schema list