module "dynamodb_table" {
  source = "github.com/islamelkadi/terraform-aws-dynamodb"
  namespace   = "example"
  environment = "prod"
  name        = "events"
  region      = "us-east-1"
  
  # Table schema
  hash_key = "event_id"
  range_key = "timestamp"
  
  attributes = [
    {
      name = "event_id"
      type = "S"
    },
    {
      name = "timestamp"
      type = "N"
    }
  ]
  
  # Encryption
  kms_key_arn = module.kms.key_arn
  
  tags = {
    Project = "CorporateActions"
  }
}

module "dynamodb_table" {
  source = "github.com/islamelkadi/terraform-aws-dynamodb"
  security_controls = module.metadata.security_controls
  
  namespace   = "example"
  environment = "prod"
  name        = "corporate-actions-events"
  region      = "us-east-1"
  
  # Table schema
  hash_key  = "event_id"
  range_key = "timestamp"
  
  attributes = [
    {
      name = "event_id"
      type = "S"
    },
    {
      name = "timestamp"
      type = "N"
    },
    {
      name = "cusip"
      type = "S"
    }
  ]
  
  # Global secondary index
  global_secondary_indexes = [
    {
      name            = "cusip-timestamp-index"
      hash_key        = "cusip"
      range_key       = "timestamp"
      projection_type = "ALL"
    }
  ]
  
  # KMS encryption (required by security controls)
  kms_key_arn = module.kms.key_arn
  
  # Point-in-time recovery (required by security controls)
  enable_point_in_time_recovery = true
  
  # Deletion protection (required by security controls)
  deletion_protection_enabled = true
  
  # DynamoDB Streams for change data capture
  stream_enabled   = true
  stream_view_type = "NEW_AND_OLD_IMAGES"
  
  # TTL for automatic data expiration
  ttl_enabled        = true
  ttl_attribute_name = "expires_at"
  
  tags = {
    Project     = "CorporateActions"
    Compliance  = "PCI-DSS"
    DataClass   = "Confidential"
  }
}

module "dynamodb_table" {
  source = "github.com/islamelkadi/terraform-aws-dynamodb"
  security_controls = module.metadata.security_controls
  
  # Override security controls for development
  security_control_overrides = {
    disable_pitr_requirement    = true
    disable_deletion_protection = true
    justification = "Development table for testing. Data is disposable and recreated from seed scripts. PITR adds unnecessary cost. Deletion protection disabled for easy environment teardown."
  }
  
  namespace   = "example"
  environment = "dev"
  name        = "test-events"
  region      = "us-east-1"
  
  hash_key = "id"
  
  attributes = [
    {
      name = "id"
      type = "S"
    }
  ]
  
  # Still use KMS encryption
  kms_key_arn = module.kms.key_arn
  
  # Overrides allow these to be disabled
  enable_point_in_time_recovery = false
  deletion_protection_enabled    = false
  
  tags = {
    Project     = "CorporateActions"
    Environment = "Development"
  }
}

module "events_table" {
  source = "github.com/islamelkadi/terraform-aws-dynamodb"
  security_controls = module.metadata.security_controls
  
  namespace   = "example"
  environment = "prod"
  name        = "events"
  region      = "us-east-1"
  
  hash_key  = "event_id"
  range_key = "timestamp"
  
  attributes = [
    {
      name = "event_id"
      type = "S"
    },
    {
      name = "timestamp"
      type = "N"
    }
  ]
  
  kms_key_arn                    = module.kms.key_arn
  enable_point_in_time_recovery  = true
  deletion_protection_enabled    = true
  
  # Enable streams for Lambda processing
  stream_enabled   = true
  stream_view_type = "NEW_AND_OLD_IMAGES"
  
  tags = {
    Project = "CorporateActions"
    Purpose = "EventSourcing"
  }
}

# Lambda to process DynamoDB stream
module "stream_processor" {
  source = "github.com/islamelkadi/terraform-aws-dynamodb"
  namespace   = "example"
  environment = "prod"
  name        = "events-stream-processor"
  region      = "us-east-1"
  
  runtime = "python3.13"
  handler = "index.handler"
  filename = "processor.zip"
  
  # Grant Lambda permission to read from stream
  managed_policy_arns = [
    "arn:aws:iam::aws:policy/service-role/AWSLambdaDynamoDBExecutionRole"
  ]
}

# Event source mapping
resource "aws_lambda_event_source_mapping" "dynamodb_stream" {
  event_source_arn  = module.events_table.stream_arn
  function_name     = module.stream_processor.function_name
  starting_position = "LATEST"
  
  batch_size = 100
  maximum_batching_window_in_seconds = 5
}

# DynamoDB Module Example
# Demonstrates table creation with GSI, TTL, and streams

module "dynamodb_table" {
  source = "github.com/islamelkadi/terraform-aws-dynamodb"
  namespace   = var.namespace
  environment = var.environment
  name        = var.name
  region      = var.region

  # Composite key
  hash_key  = var.hash_key
  range_key = var.range_key

  # Attributes
  attributes = var.attributes

  # Global Secondary Indexes
  global_secondary_indexes = var.global_secondary_indexes

  # TTL configuration
  ttl_enabled        = var.ttl_enabled
  ttl_attribute_name = var.ttl_attribute_name

  # Streams configuration
  stream_enabled   = var.stream_enabled
  stream_view_type = var.stream_view_type

  # Recovery and protection
  enable_point_in_time_recovery = var.enable_point_in_time_recovery
  deletion_protection_enabled   = var.deletion_protection_enabled

  # Encryption
  kms_key_arn = var.kms_key_arn

  tags = var.tags
}