-
Notifications
You must be signed in to change notification settings - Fork 9.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
6 changed files
with
482 additions
and
23 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| ```release-note:new-resource | ||
| aws_iam_service_specific_credential | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,171 @@ | ||
| package iam | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "log" | ||
| "strings" | ||
|
|
||
| "github.com/aws/aws-sdk-go/aws" | ||
| "github.com/aws/aws-sdk-go/service/iam" | ||
| "github.com/hashicorp/aws-sdk-go-base/v2/awsv1shim/v2/tfawserr" | ||
| "github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema" | ||
| "github.com/hashicorp/terraform-plugin-sdk/v2/helper/validation" | ||
| "github.com/hashicorp/terraform-provider-aws/internal/conns" | ||
| "github.com/hashicorp/terraform-provider-aws/internal/tfresource" | ||
| ) | ||
|
|
||
| func ResourceServiceSpecificCredential() *schema.Resource { | ||
| return &schema.Resource{ | ||
| Create: resourceServiceSpecificCredentialCreate, | ||
| Read: resourceServiceSpecificCredentialRead, | ||
| Update: resourceServiceSpecificCredentialUpdate, | ||
| Delete: resourceServiceSpecificCredentialDelete, | ||
| Importer: &schema.ResourceImporter{ | ||
| State: schema.ImportStatePassthrough, | ||
| }, | ||
|
|
||
| Schema: map[string]*schema.Schema{ | ||
| "service_name": { | ||
| Type: schema.TypeString, | ||
| Required: true, | ||
| ForceNew: true, | ||
| }, | ||
| "user_name": { | ||
| Type: schema.TypeString, | ||
| Required: true, | ||
| ForceNew: true, | ||
| ValidateFunc: validation.StringLenBetween(1, 64), | ||
| }, | ||
| "status": { | ||
| Type: schema.TypeString, | ||
| Optional: true, | ||
| Default: iam.StatusTypeActive, | ||
| ValidateFunc: validation.StringInSlice(iam.StatusType_Values(), false), | ||
| }, | ||
| "service_password": { | ||
| Type: schema.TypeString, | ||
| Sensitive: true, | ||
| Computed: true, | ||
| }, | ||
| "service_user_name": { | ||
| Type: schema.TypeString, | ||
| Computed: true, | ||
| }, | ||
| "service_specific_credential_id": { | ||
| Type: schema.TypeString, | ||
| Computed: true, | ||
| }, | ||
| }, | ||
| } | ||
| } | ||
|
|
||
| func resourceServiceSpecificCredentialCreate(d *schema.ResourceData, meta interface{}) error { | ||
| conn := meta.(*conns.AWSClient).IAMConn | ||
|
|
||
| input := &iam.CreateServiceSpecificCredentialInput{ | ||
| ServiceName: aws.String(d.Get("service_name").(string)), | ||
| UserName: aws.String(d.Get("user_name").(string)), | ||
| } | ||
|
|
||
| out, err := conn.CreateServiceSpecificCredential(input) | ||
| if err != nil { | ||
| return fmt.Errorf("error creating IAM Service Specific Credential: %w", err) | ||
| } | ||
|
|
||
| cred := out.ServiceSpecificCredential | ||
|
|
||
| d.SetId(fmt.Sprintf("%s:%s", aws.StringValue(cred.ServiceName), aws.StringValue(cred.UserName))) | ||
| d.Set("service_password", cred.ServicePassword) | ||
|
|
||
| if v, ok := d.GetOk("status"); ok && v.(string) != iam.StatusTypeActive { | ||
| updateInput := &iam.UpdateServiceSpecificCredentialInput{ | ||
| ServiceSpecificCredentialId: cred.ServiceSpecificCredentialId, | ||
| UserName: cred.UserName, | ||
| Status: aws.String(v.(string)), | ||
| } | ||
|
|
||
| _, err := conn.UpdateServiceSpecificCredential(updateInput) | ||
| if err != nil { | ||
| return fmt.Errorf("error settings IAM Service Specific Credential status: %w", err) | ||
| } | ||
| } | ||
|
|
||
| return resourceServiceSpecificCredentialRead(d, meta) | ||
| } | ||
|
|
||
| func resourceServiceSpecificCredentialRead(d *schema.ResourceData, meta interface{}) error { | ||
| conn := meta.(*conns.AWSClient).IAMConn | ||
|
|
||
| serviceName, userName, err := DecodeServiceSpecificCredentialId(d.Id()) | ||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| outputRaw, err := tfresource.RetryWhenNewResourceNotFound(PropagationTimeout, func() (interface{}, error) { | ||
| return FindServiceSpecificCredential(conn, serviceName, userName) | ||
| }, d.IsNewResource()) | ||
|
|
||
| if !d.IsNewResource() && tfresource.NotFound(err) { | ||
| log.Printf("[WARN] IAM Role (%s) not found, removing from state", d.Id()) | ||
| d.SetId("") | ||
| return nil | ||
| } | ||
|
|
||
| if err != nil { | ||
| return fmt.Errorf("error reading IAM Service Specific Credential (%s): %w", d.Id(), err) | ||
| } | ||
|
|
||
| cred := outputRaw.(*iam.ServiceSpecificCredentialMetadata) | ||
|
|
||
| d.Set("service_specific_credential_id", cred.ServiceSpecificCredentialId) | ||
| d.Set("service_user_name", cred.ServiceUserName) | ||
| d.Set("service_name", cred.ServiceName) | ||
| d.Set("user_name", cred.UserName) | ||
| d.Set("status", cred.Status) | ||
|
|
||
| return nil | ||
| } | ||
|
|
||
| func resourceServiceSpecificCredentialUpdate(d *schema.ResourceData, meta interface{}) error { | ||
| conn := meta.(*conns.AWSClient).IAMConn | ||
|
|
||
| request := &iam.UpdateServiceSpecificCredentialInput{ | ||
| ServiceSpecificCredentialId: aws.String(d.Get("service_specific_credential_id").(string)), | ||
| UserName: aws.String(d.Get("user_name").(string)), | ||
| Status: aws.String(d.Get("status").(string)), | ||
| } | ||
| _, err := conn.UpdateServiceSpecificCredential(request) | ||
| if err != nil { | ||
| return fmt.Errorf("Error updating IAM Service Specific Credential %s: %s", d.Id(), err) | ||
| } | ||
|
|
||
| return resourceServiceSpecificCredentialRead(d, meta) | ||
| } | ||
|
|
||
| func resourceServiceSpecificCredentialDelete(d *schema.ResourceData, meta interface{}) error { | ||
| conn := meta.(*conns.AWSClient).IAMConn | ||
|
|
||
| request := &iam.DeleteServiceSpecificCredentialInput{ | ||
| ServiceSpecificCredentialId: aws.String(d.Get("service_specific_credential_id").(string)), | ||
| UserName: aws.String(d.Get("user_name").(string)), | ||
| } | ||
|
|
||
| if _, err := conn.DeleteServiceSpecificCredential(request); err != nil { | ||
| if tfawserr.ErrCodeEquals(err, iam.ErrCodeNoSuchEntityException) { | ||
| return nil | ||
| } | ||
| return fmt.Errorf("Error deleting IAM Service Specific Credential %s: %s", d.Id(), err) | ||
| } | ||
| return nil | ||
| } | ||
|
|
||
| func DecodeServiceSpecificCredentialId(id string) (string, string, error) { | ||
| creds := strings.Split(id, ":") | ||
| if len(creds) != 2 { | ||
| return "", "", fmt.Errorf("unknown IAM Service Specific Credential ID format") | ||
| } | ||
| serviceName := creds[0] | ||
| userName := creds[1] | ||
|
|
||
| return serviceName, userName, nil | ||
| } |
Oops, something went wrong.