High-level EventBridge Rule builder following AWS best practices. **Default Security Settings:** - Enabled = true (rules are active by default) - Event bus = default event bus - Dead letter queue = not configured (opt-in for production) **Rationale:** These defaults follow AWS Well-Architected Framework: - Active rules by default to prevent misconfiguration - Default event bus for simplicity - DLQ opt-in allows users to handle failures explicitly **Escape Hatch:** Access the underlying CDK Rule via the `Rule` property on the returned resource for advanced scenarios not covered by this builder.