Files
acdl/modules/l1/ecr/interface.json
T
Jon Chery 8145eee8fc feat(P32): deletion-protection-by-default + L2 feature flag (REQ-86, REQ-87)
---ci---
project: acdl
phase: 32
milestone: v1.8
status: execute
---/ci---

- All 11 L1 primitives now have deletion_protection NFR (boolean, default true).
- Adapter emits `lifecycle { prevent_destroy = true }` when NFR is true;
  omits it when false. Default is true when NFR is absent.
- L2 composition resolver propagates inputs.deletion_protection to all
  children NFRs. When false, all resources get deletion_protection=false.
- Stack schema updated with optional features object (deletion_protection,
  uptime_enabled).
- Contract schema description updated to document deletion_protection
  and uptime_enabled inputs.

Tests: +5 (307 -> 312). All pass.
2026-07-22 22:12:42 +00:00

51 lines
1.3 KiB
JSON

{
"name": "ecr",
"version": "1.0.0",
"kind": "l1",
"type": "aws:ecr:repository",
"description": "ECR repository primitive (substrate-agnostic stack type aws:ecr:repository; the Terraform adapter translates to aws_ecr_repository).",
"inputs": {
"name": {
"type": "string",
"description": "The ECR repository name.",
"required": true
},
"region": {
"type": "string",
"description": "AWS region the repository is created in.",
"required": true
},
"kms_key_arn": {
"type": "string",
"description": "ARN of the CMK for repository encryption; if absent, uses AWS-managed key.",
"required": false
}
},
"outputs": {
"repository_url": {
"type": "string",
"description": "The ECR repository URL."
},
"repository_arn": {
"type": "arn",
"description": "The ECR repository ARN."
}
},
"nfrs": {
"encryption_enabled": {
"type": "boolean",
"description": "Enable repository encryption (KMS).",
"default": true
},
"encryption_type": {
"type": "string",
"description": "Encryption type.",
"default": "KMS"
},
"deletion_protection": {
"type": "boolean",
"description": "Prevent resource destruction via Terraform lifecycle prevent_destroy",
"default": true
}
}
}