ResiLien
/
terraform
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
terraform/builtin/providers/aws/provider.go

684 lines
34 KiB
Go
Raw Normal View History

providers/aws: create an empty schema.Provider
2014-08-20 00:40:48 +02:00
package aws
import (
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
"bytes"
"fmt"
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
"log"
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
"github.com/hashicorp/terraform/helper/hashcode"
provider/aws: serialize SG rule access to fix race condition Because `aws_security_group_rule` resources are an abstraction on top of Security Groups, they must interact with the AWS Security Group APIs in a pattern that often results in lots of parallel requests interacting with the same security group. We've found that this pattern can trigger race conditions resulting in inconsistent behavior, including: * Rules that report as created but don't actually exist on AWS's side * Rules that show up in AWS but don't register as being created locally, resulting in follow up attempts to authorize the rule failing w/ Duplicate errors Here, we introduce a per-SG mutex that must be held by any security group before it is allowed to interact with AWS APIs. This protects the space between `DescribeSecurityGroup` and `Authorize*` / `Revoke*` calls, ensuring that no other rules interact with the SG during that span. The included test exposes the race by applying a security group with lots of rules, which based on the dependency graph can all be handled in parallel. This fails most of the time without the new locking behavior. I've omitted the mutex from `Read`, since it is only called during the Refresh walk when no changes are being made, meaning a bunch of parallel `DescribeSecurityGroup` API calls should be consistent in that case.
2015-08-24 15:59:54 +02:00
"github.com/hashicorp/terraform/helper/mutexkv"
providers/aws: create an empty schema.Provider
2014-08-20 00:40:48 +02:00
"github.com/hashicorp/terraform/helper/schema"
Refactored the last two resources
2014-11-24 14:04:48 +01:00
"github.com/hashicorp/terraform/terraform"
providers/aws: create an empty schema.Provider
2014-08-20 00:40:48 +02:00
)
Refactored the last two resources
2014-11-24 14:04:48 +01:00
// Provider returns a terraform.ResourceProvider.
func Provider() terraform.ResourceProvider {
providers/aws: create an empty schema.Provider
2014-08-20 00:40:48 +02:00
// TODO: Move the validation to this, requires conditional schemas
// TODO: Move the configuration to this, requires validation
providers/aws: style nitpick
2015-06-29 07:46:49 +02:00
// The actual provider
providers/aws: create an empty schema.Provider
2014-08-20 00:40:48 +02:00
return &schema.Provider{
providers/aws: convert validation to helper/schema
2014-09-10 06:44:31 +02:00
Schema: map[string]*schema.Schema{
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"access_key": {
provider/aws: Refactor AWS Authentication chain - update auth checking to check metadata header - refactor tests to not export os env vars
2015-12-10 22:43:13 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Add descriptions for AWS inputs
2014-09-29 22:30:28 +02:00
Description: descriptions["access_key"],
providers/aws: convert validation to helper/schema
2014-09-10 06:44:31 +02:00
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"secret_key": {
provider/aws: Refactor AWS Authentication chain - update auth checking to check metadata header - refactor tests to not export os env vars
2015-12-10 22:43:13 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Add descriptions for AWS inputs
2014-09-29 22:30:28 +02:00
Description: descriptions["secret_key"],
providers/aws: convert validation to helper/schema
2014-09-10 06:44:31 +02:00
},
Refactored about 90% Still need to update 2 resources and check the acceptance tests, but overall we’re nearly there :smiley:
2014-11-21 17:58:34 +01:00
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"profile": {
provider/aws: Add profile to provider config This allows specification of the profile for the shared credentials provider for AWS to be specified in Terraform configuration. This is useful if defining providers with aliases, or if you don't want to set environment variables. Example: $ aws configure --profile this_is_dog ... enter keys $ cat main.tf provider "aws" { profile = "this_is_dog" # Optionally also specify the path to the credentials file shared_credentials_file = "/tmp/credentials" } This is equivalent to specifying AWS_PROFILE or AWS_SHARED_CREDENTIALS_FILE in the environment.
2016-01-11 16:22:09 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["profile"],
},
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
"assume_role": assumeRoleSchema(),
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"shared_credentials_file": {
provider/aws: Add profile to provider config This allows specification of the profile for the shared credentials provider for AWS to be specified in Terraform configuration. This is useful if defining providers with aliases, or if you don't want to set environment variables. Example: $ aws configure --profile this_is_dog ... enter keys $ cat main.tf provider "aws" { profile = "this_is_dog" # Optionally also specify the path to the credentials file shared_credentials_file = "/tmp/credentials" } This is equivalent to specifying AWS_PROFILE or AWS_SHARED_CREDENTIALS_FILE in the environment.
2016-01-11 16:22:09 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["shared_credentials_file"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"token": {
provider/aws: Refactor AWS Authentication chain - update auth checking to check metadata header - refactor tests to not export os env vars
2015-12-10 22:43:13 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Support session token in AWS credentials Session tokens are necessary to utilize temporary credentials. http://docs.aws.amazon.com/STS/latest/UsingSTS/Welcome.html
2015-04-20 20:26:59 +02:00
Description: descriptions["token"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"region": {
Read the "standard" AWS environment variables This is 100% backwards-compatible
2015-01-22 21:30:27 +01:00
Type: schema.TypeString,
Required: true,
DefaultFunc: schema.MultiEnvDefaultFunc([]string{
"AWS_REGION",
"AWS_DEFAULT_REGION",
}, nil),
Refactored about 90% Still need to update 2 resources and check the acceptance tests, but overall we’re nearly there :smiley:
2014-11-21 17:58:34 +01:00
Description: descriptions["region"],
InputDefault: "us-east-1",
},
AWS account ID protection added
2015-04-20 00:54:42 +02:00
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"max_retries": {
aws: make MaxRetries for API calls configurable - Make it configurable in the AWS provider by add an option 'max_retries'. - Set the default from 3 to 11 retries.
2015-05-03 11:08:47 +02:00
Type: schema.TypeInt,
Optional: true,
Default: 11,
Description: descriptions["max_retries"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"allowed_account_ids": {
AWS account ID protection added
2015-04-20 00:54:42 +02:00
Type: schema.TypeSet,
Elem: &schema.Schema{Type: schema.TypeString},
Optional: true,
ConflictsWith: []string{"forbidden_account_ids"},
Use built-in schema.HashString.
2016-02-08 00:51:26 +01:00
Set: schema.HashString,
AWS account ID protection added
2015-04-20 00:54:42 +02:00
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"forbidden_account_ids": {
AWS account ID protection added
2015-04-20 00:54:42 +02:00
Type: schema.TypeSet,
Elem: &schema.Schema{Type: schema.TypeString},
Optional: true,
ConflictsWith: []string{"allowed_account_ids"},
Use built-in schema.HashString.
2016-02-08 00:51:26 +01:00
Set: schema.HashString,
AWS account ID protection added
2015-04-20 00:54:42 +02:00
},
dynamodb-local Add `dynamodb_endpoint` allowing to change the DynamoDB Endpoint for example to connect to dynamodb-local
2015-07-22 23:57:29 +02:00
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"dynamodb_endpoint": {
provider/aws: Remove deprecated DynamoDB & Kinesis endpoint fields (#11778)
2017-02-08 14:29:08 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["dynamodb_endpoint"],
Removed: "Use `dynamodb` inside `endpoints` block instead",
dynamodb-local Add `dynamodb_endpoint` allowing to change the DynamoDB Endpoint for example to connect to dynamodb-local
2015-07-22 23:57:29 +02:00
},
provider/aws: allow local kinesis
2015-09-16 18:58:46 +02:00
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"kinesis_endpoint": {
provider/aws: Remove deprecated DynamoDB & Kinesis endpoint fields (#11778)
2017-02-08 14:29:08 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["kinesis_endpoint"],
Removed: "Use `kinesis` inside `endpoints` block instead",
provider/aws: allow local kinesis
2015-09-16 18:58:46 +02:00
},
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
"endpoints": endpointsSchema(),
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"insecure": {
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
Type: schema.TypeBool,
Optional: true,
Default: false,
Description: descriptions["insecure"],
},
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"skip_credentials_validation": {
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
Type: schema.TypeBool,
Optional: true,
Default: false,
aws: Change field names + desc according to reality - skip_iam_creds_validation => skip_credentials_validation - skip_iam_account_id => skip_requesting_account_id
2016-08-10 17:46:02 +02:00
Description: descriptions["skip_credentials_validation"],
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
},
provider/aws: Allow bypassing region validation
2017-01-23 16:01:22 +01:00
"skip_region_validation": {
Type: schema.TypeBool,
Optional: true,
Default: false,
Description: descriptions["skip_region_validation"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"skip_requesting_account_id": {
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
Type: schema.TypeBool,
Optional: true,
Default: false,
aws: Change field names + desc according to reality - skip_iam_creds_validation => skip_credentials_validation - skip_iam_account_id => skip_requesting_account_id
2016-08-10 17:46:02 +02:00
Description: descriptions["skip_requesting_account_id"],
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"skip_metadata_api_check": {
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
Type: schema.TypeBool,
Optional: true,
Default: false,
Description: descriptions["skip_metadata_api_check"],
},
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"s3_force_path_style": {
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
Type: schema.TypeBool,
Optional: true,
Default: false,
Description: descriptions["s3_force_path_style"],
},
providers/aws: convert validation to helper/schema
2014-09-10 06:44:31 +02:00
},
provider/aws: Add aws_availability_zones source This commit adds a data source with a single list, `instance` for the schema which gets populated with the availability zones to which an account has access.
2016-05-14 20:18:51 +02:00
DataSourcesMap: map[string]*schema.Resource{
provider/aws: New Data Source: aws_acm_certificate Use this data source to get the ARN of a certificate in AWS Certificate Manager (ACM). The process of requesting and verifying a certificate in ACM requires some manual steps, which means that Terraform cannot automate the creation of ACM certificates. But using this data source, you can reference them by domain without having to hard code the ARNs as input. The acceptance test included requires an ACM certificate be pre-created in and information about it passed in via environment variables. It's a bit sad but there's really no other way to do it.
2016-08-22 00:17:19 +02:00
"aws_acm_certificate": dataSourceAwsAcmCertificate(),
provider/aws: Add aws_alb data source (#10196) * provider/aws: Add aws_alb data source This adds the aws_alb data source for getting information on an AWS Application Load Balancer. The schema is nearly the same as the resource of the same name, with most of the resource population logic de-coupled into its own function so that they can be shared between the resource and data source. * provider/aws: aws_alb data source language revisions * Multiple/zero result error slightly updated to be a bit more specific. * Fixed relic of the copy of the resource docs (resource -> data source)
2016-11-21 09:27:44 +01:00
"aws_alb": dataSourceAwsAlb(),
provider/aws: Add aws_alb_listener data source (#10181) * provider/aws: Add aws_alb_listener data source This adds the aws_alb_listener data source to get information on an AWS Application Load Balancer listener. The schema is slightly modified (only option-wise, attributes are the same) and we use the aws_alb_listener resource read function to get the data. Note that the HTTPS test here may fail due until hashicorp/terraform#10180 is merged. * provider/aws: Add aws_alb_listener data source docs Now documented.
2016-11-18 12:01:21 +01:00
"aws_alb_listener": dataSourceAwsAlbListener(),
Add aws_ecs_container_definition data source this datasource allows terraform to work with externally modified state, e.g. when you're using an ECS service which is continously updated by your CI via the AWS CLI. right now you'd have to wrap terraform into a shell script which looks up the current image digest, so running terraform won't change the updated service. using the aws_ecs_container_definition data source you can now leverage terraform, removing the wrapper entirely.
2016-06-15 19:55:45 +02:00
"aws_ami": dataSourceAwsAmi(),
provider/aws: Add DataSource to get a list of Autoscaling groups in a (#11303) region
2017-01-20 14:21:12 +01:00
"aws_autoscaling_groups": dataSourceAwsAutoscalingGroups(),
provider/aws: availability zone data source This adds a singular data source in addition to the existing plural one. This allows retrieving data about a specific AZ. As a helper for writing reusable modules, the AZ letter (without its usual region name prefix) is exposed so that it can be used in region-agnostic mappings where a different value is used per AZ, such as for subnet numbering schemes.
2016-05-22 19:21:02 +02:00
"aws_availability_zone": dataSourceAwsAvailabilityZone(),
Add aws_ecs_container_definition data source this datasource allows terraform to work with externally modified state, e.g. when you're using an ECS service which is continously updated by your CI via the AWS CLI. right now you'd have to wrap terraform into a shell script which looks up the current image digest, so running terraform won't change the updated service. using the aws_ecs_container_definition data source you can now leverage terraform, removing the wrapper entirely.
2016-06-15 19:55:45 +02:00
"aws_availability_zones": dataSourceAwsAvailabilityZones(),
Add AWS Billing & Cost Management service account This adds a very simple data source for the AWS Billing account ID magic number. Used to allow AWS to dump detailed billing reports into an S3 bucket you control. http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-getting-started.html#step-2
2016-09-07 07:43:45 +02:00
"aws_billing_service_account": dataSourceAwsBillingServiceAccount(),
provider/aws: Add aws_caller_identity data source This data source provides access during configuration to the ID of the AWS account for the connection to AWS. It is primarily useful for interpolating into policy documents, for example when creating the policy for an ELB or ALB access log bucket. This will need revisiting and further testing once the work for AssumeRole is integrated.
2016-08-15 23:43:24 +02:00
"aws_caller_identity": dataSourceAwsCallerIdentity(),
Add 'aws_canonical_user_id' data source. (#11332)
2017-01-23 22:44:42 +01:00
"aws_canonical_user_id": dataSourceAwsCanonicalUserId(),
provider/aws: Add cloudformation_stack data source
2016-06-02 11:08:12 +02:00
"aws_cloudformation_stack": dataSourceAwsCloudFormationStack(),
provider/aws: data_aws_db_instance resource (#11717)
2017-02-10 15:58:31 +01:00
"aws_db_instance": dataSourceAwsDbInstance(),
provider/aws: New Resource aws_ebs_snapshot (#10017) * provider/aws: Add ability to create aws_ebs_snapshot ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSEBSSnapshot_' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/11/10 14:18:36 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSEBSSnapshot_ -timeout 120m === RUN TestAccAWSEBSSnapshot_basic --- PASS: TestAccAWSEBSSnapshot_basic (31.56s) === RUN TestAccAWSEBSSnapshot_withDescription --- PASS: TestAccAWSEBSSnapshot_withDescription (189.35s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws220.928s ``` * docs/aws: Addition of the docs for aws_ebs_snapshot resource * provider/aws: Creation of shared schema funcs for common AWS data source patterns * provider/aws: Create aws_ebs_snapshot datasource Fixes #8828 This data source will use a number of filters, owner_ids, snapshot_ids and restorable_by_user_ids in order to find the correct snapshot. The data source has no real use case for most_recent and will error on no snapshots found or greater than 1 snapshot found ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSEbsSnapshotDataSource_' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/11/10 14:34:33 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSEbsSnapshotDataSource_ -timeout 120m === RUN TestAccAWSEbsSnapshotDataSource_basic --- PASS: TestAccAWSEbsSnapshotDataSource_basic (192.66s) === RUN TestAccAWSEbsSnapshotDataSource_multipleFilters --- PASS: TestAccAWSEbsSnapshotDataSource_multipleFilters (33.84s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws226.522s ``` * docs/aws: Addition of docs for the aws_ebs_snapshot data source Adds the new resource `aws_ebs_snapshot`
2016-11-21 11:40:22 +01:00
"aws_ebs_snapshot": dataSourceAwsEbsSnapshot(),
provider/aws: Adding a datasource for aws_ebs_volume (#9753) This will allows us to filter a specific ebs_volume for attachment to an aws_instance ``` make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSEbsVolumeDataSource_'✹ ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/11/01 12:39:19 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSEbsVolumeDataSource_ -timeout 120m === RUN TestAccAWSEbsVolumeDataSource_basic --- PASS: TestAccAWSEbsVolumeDataSource_basic (28.74s) === RUN TestAccAWSEbsVolumeDataSource_multipleFilters --- PASS: TestAccAWSEbsVolumeDataSource_multipleFilters (28.37s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws57.145s ```
2016-11-01 15:15:31 +01:00
"aws_ebs_volume": dataSourceAwsEbsVolume(),
provider/aws: add aws_ecs_cluster datasource since remove state is deprecated one needs a way to import an ecs_cluster
2017-01-31 17:27:58 +01:00
"aws_ecs_cluster": dataSourceAwsEcsCluster(),
provider/aws: DataSource for RedShift Account ID (#8224) When you need to enable monitoring for Redshift, you need to create the correct policy in the bucket for logging. This needs to have the Redshift Account ID for a given region. This data source provides a handy lookup for this http://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-enable-logging % make testacc TEST=./builtin/providers/aws % TESTARGS='-run=TestAccAWSRedshiftAccountId_basic' 2 ↵ ✹ ✭ ==> Checking that code complies with gofmt requirements... /Users/stacko/Code/go/bin/stringer go generate $(go list ./... | grep -v /terraform/vendor/) 2016/08/16 14:39:35 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSRedshiftAccountId_basic -timeout 120m === RUN TestAccAWSRedshiftAccountId_basic --- PASS: TestAccAWSRedshiftAccountId_basic (19.47s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 19.483s
2016-08-16 18:58:46 +02:00
"aws_ecs_container_definition": dataSourceAwsEcsContainerDefinition(),
provider/aws: add `aws_ecs_task_definition` datasource (#8509)
2017-01-31 18:28:11 +01:00
"aws_ecs_task_definition": dataSourceAwsEcsTaskDefinition(),
provider/aws: Add aws_eip data source (#9833) * provider/aws: Add the aws_eip data source * Document the aws_eip data source on the website * provider/aws: support query by public_ip for aws_eip data source
2016-12-13 13:09:21 +01:00
"aws_eip": dataSourceAwsEip(),
provider/aws: New DataSource: aws_elb_hosted_zone_id (#11027) * provider/aws: New DataSource: aws_elb_hosted_zone_id This datasource is a list of all of the ELB DualStack Hosted Zone IDs. This will allow us to reference the correct hosted zone id when creating route53 alias records There are many bugs for this - this is just the beginning of fixing them ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSElbHostedZoneId_basic' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2017/01/04 13:04:32 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSElbHostedZoneId_basic -timeout 120m === RUN TestAccAWSElbHostedZoneId_basic --- PASS: TestAccAWSElbHostedZoneId_basic (20.46s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 20.484s ``` * Update elb_hosted_zone_id.html.markdown
2017-01-12 15:50:58 +01:00
"aws_elb_hosted_zone_id": dataSourceAwsElbHostedZoneId(),
aws: Implement naming changes for aws_elb_service_account
2016-08-16 22:05:27 +02:00
"aws_elb_service_account": dataSourceAwsElbServiceAccount(),
Add 'aws_iam_account_alias' data source. (#10804)
2016-12-18 15:17:19 +01:00
"aws_iam_account_alias": dataSourceAwsIamAccountAlias(),
Add aws_ecs_container_definition data source this datasource allows terraform to work with externally modified state, e.g. when you're using an ECS service which is continously updated by your CI via the AWS CLI. right now you'd have to wrap terraform into a shell script which looks up the current image digest, so running terraform won't change the updated service. using the aws_ecs_container_definition data source you can now leverage terraform, removing the wrapper entirely.
2016-06-15 19:55:45 +02:00
"aws_iam_policy_document": dataSourceAwsIamPolicyDocument(),
Create AWS IAM Role data source, acceptance tests, documentation, and website link
2017-03-30 18:09:11 +02:00
"aws_iam_role": dataSourceAwsIAMRole(),
feat/aws: add iam_server_certificate data source (#10558) useful if you have an automatic process creating certs for you, e.g. let's lambda
2016-12-07 11:40:53 +01:00
"aws_iam_server_certificate": dataSourceAwsIAMServerCertificate(),
provider/aws: Add aws_instance data source Adds the `aws_instance` data source, tests, and documentation. ``` ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2017/01/18 11:49:09 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSInstanceDataSource -timeout 120m === RUN TestAccAWSInstanceDataSource_basic --- PASS: TestAccAWSInstanceDataSource_basic (106.24s) === RUN TestAccAWSInstanceDataSource_AzUserData --- PASS: TestAccAWSInstanceDataSource_AzUserData (108.52s) === RUN TestAccAWSInstanceDataSource_gp2IopsDevice --- PASS: TestAccAWSInstanceDataSource_gp2IopsDevice (80.71s) === RUN TestAccAWSInstanceDataSource_blockDevices --- PASS: TestAccAWSInstanceDataSource_blockDevices (94.07s) === RUN TestAccAWSInstanceDataSource_rootInstanceStore --- PASS: TestAccAWSInstanceDataSource_rootInstanceStore (95.17s) === RUN TestAccAWSInstanceDataSource_privateIP --- PASS: TestAccAWSInstanceDataSource_privateIP (241.75s) === RUN TestAccAWSInstanceDataSource_keyPair --- PASS: TestAccAWSInstanceDataSource_keyPair (208.77s) === RUN TestAccAWSInstanceDataSource_VPC --- PASS: TestAccAWSInstanceDataSource_VPC (109.89s) === RUN TestAccAWSInstanceDataSource_SecurityGroups --- PASS: TestAccAWSInstanceDataSource_SecurityGroups (118.66s) === RUN TestAccAWSInstanceDataSource_VPCSecurityGroups --- PASS: TestAccAWSInstanceDataSource_VPCSecurityGroups (136.79s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 1300.625s ```
2017-01-18 18:19:44 +01:00
"aws_instance": dataSourceAwsInstance(),
Added IP ranges from AWS
2016-08-04 19:20:14 +02:00
"aws_ip_ranges": dataSourceAwsIPRanges(),
Add 'aws_vpn_gateway' data source. (#11886)
2017-02-13 17:24:55 +01:00
"aws_kms_secret": dataSourceAwsKmsSecret(),
provider/aws: New DataSource: aws_partition (#11675)
2017-02-04 12:54:45 +01:00
"aws_partition": dataSourceAwsPartition(),
provider/aws: Data source to provides details about a specific AWS prefix list (#9566) * Add AWS Prefix List data source. AWS Prefix List data source acceptance test. AWS Prefix List data source documentation. * Improve error message when PL not matched.
2016-10-27 15:58:24 +02:00
"aws_prefix_list": dataSourceAwsPrefixList(),
provider/aws: DataSource for RedShift Account ID (#8224) When you need to enable monitoring for Redshift, you need to create the correct policy in the bucket for logging. This needs to have the Redshift Account ID for a given region. This data source provides a handy lookup for this http://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-enable-logging % make testacc TEST=./builtin/providers/aws % TESTARGS='-run=TestAccAWSRedshiftAccountId_basic' 2 ↵ ✹ ✭ ==> Checking that code complies with gofmt requirements... /Users/stacko/Code/go/bin/stringer go generate $(go list ./... | grep -v /terraform/vendor/) 2016/08/16 14:39:35 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSRedshiftAccountId_basic -timeout 120m === RUN TestAccAWSRedshiftAccountId_basic --- PASS: TestAccAWSRedshiftAccountId_basic (19.47s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 19.483s
2016-08-16 18:58:46 +02:00
"aws_redshift_service_account": dataSourceAwsRedshiftServiceAccount(),
provider/aws: aws_region data source The primary purpose of this data source is to ask the question "what is my current region?", but it can also be used to retrieve the endpoint hostname for a particular (possibly non-current) region, should that be useful for some esoteric case.
2016-05-22 19:22:09 +02:00
"aws_region": dataSourceAwsRegion(),
provider/aws: data source for AWS Route Table
2016-11-22 22:16:23 +01:00
"aws_route_table": dataSourceAwsRouteTable(),
Add 'aws_iam_account_alias' data source. (#10804)
2016-12-18 15:17:19 +01:00
"aws_route53_zone": dataSourceAwsRoute53Zone(),
Add aws_ecs_container_definition data source this datasource allows terraform to work with externally modified state, e.g. when you're using an ECS service which is continously updated by your CI via the AWS CLI. right now you'd have to wrap terraform into a shell script which looks up the current image digest, so running terraform won't change the updated service. using the aws_ecs_container_definition data source you can now leverage terraform, removing the wrapper entirely.
2016-06-15 19:55:45 +02:00
"aws_s3_bucket_object": dataSourceAwsS3BucketObject(),
provider/aws: data_aws_sns_topic (#11752) * Initial commit of provider/aws: data_aws_sns_topic * Pull-request fixes
2017-02-21 16:47:48 +01:00
"aws_sns_topic": dataSourceAwsSnsTopic(),
provider/aws: aws_subnet data source
2016-05-22 17:23:25 +02:00
"aws_subnet": dataSourceAwsSubnet(),
provider/aws: data source for AWS Security Group (#9604) * provider/aws: data source for AWS Security Group * provider/aws: add documentation for data source for AWS Security Group * provider/aws: data source for AWS Security Group (improve if condition and syntax) * fix fmt
2016-10-27 19:17:58 +02:00
"aws_security_group": dataSourceAwsSecurityGroup(),
provider/aws: aws_vpc data source
2016-05-22 17:25:30 +02:00
"aws_vpc": dataSourceAwsVpc(),
Add 'aws_vpc_endpoint' data source. (#11323)
2017-01-23 22:50:38 +01:00
"aws_vpc_endpoint": dataSourceAwsVpcEndpoint(),
provider/aws Add aws_vpc_endpoint_service data source (#10261) * provider/aws Add aws_vpc_endpoint_services data source. * Rename 'aws_vpc_endpoint_services' to 'aws_vpc_endpoint_service'.
2016-12-13 11:40:35 +01:00
"aws_vpc_endpoint_service": dataSourceAwsVpcEndpointService(),
provider/aws: Add 'aws_vpc_peering_connection' data source (#10913) * Add 'aws_vpc_peering_connection' data source. * Changes after code review. * Add 'accepter' and 'requester' blocks to aws_vpc_peering_connection data source output attributes.
2016-12-30 01:30:51 +01:00
"aws_vpc_peering_connection": dataSourceAwsVpcPeeringConnection(),
Add 'aws_vpn_gateway' data source. (#11886)
2017-02-13 17:24:55 +01:00
"aws_vpn_gateway": dataSourceAwsVpnGateway(),
provider/aws: Add aws_availability_zones source This commit adds a data source with a single list, `instance` for the schema which gets populated with the availability zones to which an account has access.
2016-05-14 20:18:51 +02:00
},
providers/aws: resource_aws_eip is in new framework
2014-08-20 01:56:23 +02:00
ResourcesMap: map[string]*schema.Resource{
provider/aws: Add `aws_alb` resource This commit adds a resource, acceptance tests and documentation for the new Application Load Balancer (aws_alb). We choose to use the name alb over the package name, elbv2, in order to avoid confusion. This is the first in a series of commits to fully support the new resources necessary for Application Load Balancers.
2016-08-15 23:09:40 +02:00
"aws_alb": resourceAwsAlb(),
provider/aws: Add aws_alb_listener resource This commit adds the `aws_alb_listener` resource and associated acceptance tests and documentation.
2016-08-17 19:42:18 +02:00
"aws_alb_listener": resourceAwsAlbListener(),
provider/aws: Add aws_alb_listener_rule resource This commit adds the aws_alb_listener_rule resource along with acceptance tests and documentation.
2016-08-19 00:43:11 +02:00
"aws_alb_listener_rule": resourceAwsAlbListenerRule(),
provider/aws: Add aws_alb_target_group resource This commit adds a resource, acceptance tests and documentation for the Target Groups for Application Load Balancers. This is the second in a series of commits to fully support the new resources necessary for Application Load Balancers.
2016-08-15 23:10:54 +02:00
"aws_alb_target_group": resourceAwsAlbTargetGroup(),
provider/aws: Add aws_alb_target_group_attachment
2016-08-19 17:12:19 +02:00
"aws_alb_target_group_attachment": resourceAwsAlbTargetGroupAttachment(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_ami": resourceAwsAmi(),
"aws_ami_copy": resourceAwsAmiCopy(),
"aws_ami_from_instance": resourceAwsAmiFromInstance(),
Implementing aws_ami_launch_permission. (#7365)
2016-07-22 00:08:32 +02:00
"aws_ami_launch_permission": resourceAwsAmiLaunchPermission(),
provider/aws: Add support for api_gateway_account (#6321)
2016-04-27 14:08:59 +02:00
"aws_api_gateway_account": resourceAwsApiGatewayAccount(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_api_gateway_api_key": resourceAwsApiGatewayApiKey(),
provider/aws: Add support for api_gateway_authorizer (#6320)
2016-04-25 13:22:37 +02:00
"aws_api_gateway_authorizer": resourceAwsApiGatewayAuthorizer(),
provider/aws: aws_api_gateway_base_path_mapping resource implementation API Gateway allows users to "claim" a domain name for use as a custom hostname for deployed API endpoints, and then use this base path mapping resource to expose a particular API deployment at a path on such a domain. The acceptance tests use certificates from the aws_api_gateway_domain_name tests which expire in 2026; we'll need to generate some more certificates before we get there.
2016-08-21 22:41:59 +02:00
"aws_api_gateway_base_path_mapping": resourceAwsApiGatewayBasePathMapping(),
provider/aws: Add API Gateway Client Certificate
2016-09-11 16:14:10 +02:00
"aws_api_gateway_client_certificate": resourceAwsApiGatewayClientCertificate(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_api_gateway_deployment": resourceAwsApiGatewayDeployment(),
provider/aws: aws_api_gateway_domain_name resource implementation API Gateway allows users to "claim" a domain name for use as a custom hostname for deployed API endpoints. The domain name resource just claims the domain name; a user would then use a "base path mapping" resource (to be implemented in a later commit) to map a particular API to a particular path prefix on that domain. The acceptance tests contain some TLS certificates that expire in 2026; we'll need to generate some more certificates before we get there.
2016-08-21 18:19:48 +02:00
"aws_api_gateway_domain_name": resourceAwsApiGatewayDomainName(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_api_gateway_integration": resourceAwsApiGatewayIntegration(),
"aws_api_gateway_integration_response": resourceAwsApiGatewayIntegrationResponse(),
"aws_api_gateway_method": resourceAwsApiGatewayMethod(),
"aws_api_gateway_method_response": resourceAwsApiGatewayMethodResponse(),
"aws_api_gateway_model": resourceAwsApiGatewayModel(),
"aws_api_gateway_resource": resourceAwsApiGatewayResource(),
"aws_api_gateway_rest_api": resourceAwsApiGatewayRestApi(),
provider/aws: Added API Gateway Usage Plan (#12542) * Added api_gateway_usage_plan * Updated documentation * Fixed AWS usage plan review points
2017-03-18 15:18:19 +01:00
"aws_api_gateway_usage_plan": resourceAwsApiGatewayUsagePlan(),
provider/aws: Added Usage Plan Key resource (#12851) * provider/aws: Added Usage Plan Key resource * provider/aws: Added usage plan import documentation
2017-03-20 14:54:14 +01:00
"aws_api_gateway_usage_plan_key": resourceAwsApiGatewayUsagePlanKey(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_app_cookie_stickiness_policy": resourceAwsAppCookieStickinessPolicy(),
AWS Application AutoScaling Initial work on two new resource types: * `aws_appautoscaling_target` * `aws_appautoscaling_policy` Fix acc tests
2016-07-15 13:54:36 +02:00
"aws_appautoscaling_target": resourceAwsAppautoscalingTarget(),
"aws_appautoscaling_policy": resourceAwsAppautoscalingPolicy(),
provider/aws: aws_autoscaling_attachment resource (#9146) * GH-8755 - Adding in support to attach ASG to ELB as independent action * GH-8755 - Adding in docs * GH-8755 - Adjusting attribute name and responding to other PR feedback
2016-11-03 14:08:49 +01:00
"aws_autoscaling_attachment": resourceAwsAutoscalingAttachment(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_autoscaling_group": resourceAwsAutoscalingGroup(),
"aws_autoscaling_notification": resourceAwsAutoscalingNotification(),
"aws_autoscaling_policy": resourceAwsAutoscalingPolicy(),
"aws_autoscaling_schedule": resourceAwsAutoscalingSchedule(),
"aws_cloudformation_stack": resourceAwsCloudFormationStack(),
CloudFront distribution and origin access identity support (#5221) * CloudFront implementation v3 * Update tests * Refactor - new resource: aws_cloudfront_distribution * Includes a complete re-write of the old aws_cloudfront_web_distribution resource to bring it to feature parity with API and CloudFormation. * Also includes the aws_cloudfront_origin_access_identity resource to generate origin access identities for use with S3.
2016-04-14 21:55:11 +02:00
"aws_cloudfront_distribution": resourceAwsCloudFrontDistribution(),
"aws_cloudfront_origin_access_identity": resourceAwsCloudFrontOriginAccessIdentity(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_cloudtrail": resourceAwsCloudTrail(),
"aws_cloudwatch_event_rule": resourceAwsCloudWatchEventRule(),
"aws_cloudwatch_event_target": resourceAwsCloudWatchEventTarget(),
First stab at fixing hashicorp/terraform#9930 Add the following resources: * `aws_cloudwatch_log_destination` * `aws_cloudwatch_log_destination_policy`
2017-02-14 15:41:26 +01:00
"aws_cloudwatch_log_destination": resourceAwsCloudWatchLogDestination(),
"aws_cloudwatch_log_destination_policy": resourceAwsCloudWatchLogDestinationPolicy(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_cloudwatch_log_group": resourceAwsCloudWatchLogGroup(),
provider/aws: Add support for CloudWatch Log Metric Filter
2016-02-29 14:07:45 +01:00
"aws_cloudwatch_log_metric_filter": resourceAwsCloudWatchLogMetricFilter(),
provider/aws: `aws_cloudwatch_log_stream` resource This is a requirement for enabling CloudWatch Logging on Kinesis Firehost % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSCloudWatchLogStream_' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/09/02 16:19:14 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSCloudWatchLogStream_ -timeout 120m === RUN TestAccAWSCloudWatchLogStream_basic --- PASS: TestAccAWSCloudWatchLogStream_basic (22.31s) === RUN TestAccAWSCloudWatchLogStream_disappears --- PASS: TestAccAWSCloudWatchLogStream_disappears (21.21s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 43.538s
2016-09-02 13:29:48 +02:00
"aws_cloudwatch_log_stream": resourceAwsCloudWatchLogStream(),
Add cloudwatch_logs_subscription_filter provider (#5996)
2016-04-20 21:05:21 +02:00
"aws_cloudwatch_log_subscription_filter": resourceAwsCloudwatchLogSubscriptionFilter(),
provider/aws: Add aws_config_config_rule
2017-02-02 23:29:13 +01:00
"aws_config_config_rule": resourceAwsConfigConfigRule(),
provider/aws: Add aws_config_configuration_recorder
2017-02-02 23:32:09 +01:00
"aws_config_configuration_recorder": resourceAwsConfigConfigurationRecorder(),
provider/aws: Add aws_config_configuration_recorder_status
2017-02-02 23:33:26 +01:00
"aws_config_configuration_recorder_status": resourceAwsConfigConfigurationRecorderStatus(),
provider/aws: Add aws_config_delivery_channel
2017-02-02 23:33:55 +01:00
"aws_config_delivery_channel": resourceAwsConfigDeliveryChannel(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_autoscaling_lifecycle_hook": resourceAwsAutoscalingLifecycleHook(),
"aws_cloudwatch_metric_alarm": resourceAwsCloudWatchMetricAlarm(),
"aws_codedeploy_app": resourceAwsCodeDeployApp(),
provider/aws: New Resource aws_codedeploy_deployment_config (#11062) * provider/aws: New Resource - aws_codedeploy_deployment_config * provider/aws: Adding acceptance tests for new aws_codedeploy_deployment_config resource * provider/aws: Documentation for the aws_codedeploy_deployment_config resource * Update codedeploy_deployment_config.html.markdown
2017-01-09 20:17:09 +01:00
"aws_codedeploy_deployment_config": resourceAwsCodeDeployDeploymentConfig(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_codedeploy_deployment_group": resourceAwsCodeDeployDeploymentGroup(),
"aws_codecommit_repository": resourceAwsCodeCommitRepository(),
Added Codecommit Trigger
2016-09-08 10:54:54 +02:00
"aws_codecommit_trigger": resourceAwsCodeCommitTrigger(),
New resource aws_codebuild_project
2017-01-12 17:01:15 +01:00
"aws_codebuild_project": resourceAwsCodeBuildProject(),
provider/aws: New resource codepipeline (#11814) * provider/aws: New resource codepipeline * Vendor aws/codepipeline * Add tests * Add docs * Bump codepipeline to v1.6.25 * Adjustments based on feedback * Force new resource on ID change * Improve tests * Switch update to read Since we don't require a second pass, only do a read. * Skip tests if GITHUB_TOKEN is not set
2017-02-22 18:31:24 +01:00
"aws_codepipeline": resourceAwsCodePipeline(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_customer_gateway": resourceAwsCustomerGateway(),
Added RDS event subscriptions (#6367)
2016-05-05 12:14:25 +02:00
"aws_db_event_subscription": resourceAwsDbEventSubscription(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_db_instance": resourceAwsDbInstance(),
Scaffold the AWS DB Option Group resource Change the AWS DB Instance to now include the DB Option Group param. Adds a test to prove that it works Add acceptance tests for the AWS DB Option Group work. This ensures that Options can be added and updated Documentation for the AWS DB Option resource
2015-12-21 10:15:52 +01:00
"aws_db_option_group": resourceAwsDbOptionGroup(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_db_parameter_group": resourceAwsDbParameterGroup(),
"aws_db_security_group": resourceAwsDbSecurityGroup(),
"aws_db_subnet_group": resourceAwsDbSubnetGroup(),
"aws_directory_service_directory": resourceAwsDirectoryServiceDirectory(),
provider/aws: Add AWS DMS (data migration service) resources (#11122) * Add aws dms vendoring * Add aws dms endpoint resource * Add aws dms replication instance resource * Add aws dms replication subnet group resource * Add aws dms replication task resource * Fix aws dms resource go vet errors * Review fixes: Add id validators for all resources. Add validator for endpoint engine_name. * Add aws dms resources to importability list * Review fixes: Add aws dms iam role dependencies to test cases * Review fixes: Adjustments for handling input values * Add aws dms replication subnet group tagging * Fix aws dms subnet group doesn't use standard error for resource not found * Missed update of aws dms vendored version * Add aws dms certificate resource * Update aws dms resources to force new for immutable attributes * Fix tests failing on subnet deletion by adding explicit dependencies. Combine import tests with basic tests to cut down runtime.
2017-02-02 11:30:05 +01:00
"aws_dms_certificate": resourceAwsDmsCertificate(),
"aws_dms_endpoint": resourceAwsDmsEndpoint(),
"aws_dms_replication_instance": resourceAwsDmsReplicationInstance(),
"aws_dms_replication_subnet_group": resourceAwsDmsReplicationSubnetGroup(),
"aws_dms_replication_task": resourceAwsDmsReplicationTask(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_dynamodb_table": resourceAwsDynamoDbTable(),
provider/aws: New Resource aws_ebs_snapshot (#10017) * provider/aws: Add ability to create aws_ebs_snapshot ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSEBSSnapshot_' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/11/10 14:18:36 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSEBSSnapshot_ -timeout 120m === RUN TestAccAWSEBSSnapshot_basic --- PASS: TestAccAWSEBSSnapshot_basic (31.56s) === RUN TestAccAWSEBSSnapshot_withDescription --- PASS: TestAccAWSEBSSnapshot_withDescription (189.35s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws220.928s ``` * docs/aws: Addition of the docs for aws_ebs_snapshot resource * provider/aws: Creation of shared schema funcs for common AWS data source patterns * provider/aws: Create aws_ebs_snapshot datasource Fixes #8828 This data source will use a number of filters, owner_ids, snapshot_ids and restorable_by_user_ids in order to find the correct snapshot. The data source has no real use case for most_recent and will error on no snapshots found or greater than 1 snapshot found ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSEbsSnapshotDataSource_' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/11/10 14:34:33 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSEbsSnapshotDataSource_ -timeout 120m === RUN TestAccAWSEbsSnapshotDataSource_basic --- PASS: TestAccAWSEbsSnapshotDataSource_basic (192.66s) === RUN TestAccAWSEbsSnapshotDataSource_multipleFilters --- PASS: TestAccAWSEbsSnapshotDataSource_multipleFilters (33.84s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws226.522s ``` * docs/aws: Addition of docs for the aws_ebs_snapshot data source Adds the new resource `aws_ebs_snapshot`
2016-11-21 11:40:22 +01:00
"aws_ebs_snapshot": resourceAwsEbsSnapshot(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_ebs_volume": resourceAwsEbsVolume(),
"aws_ecr_repository": resourceAwsEcrRepository(),
"aws_ecr_repository_policy": resourceAwsEcrRepositoryPolicy(),
"aws_ecs_cluster": resourceAwsEcsCluster(),
"aws_ecs_service": resourceAwsEcsService(),
"aws_ecs_task_definition": resourceAwsEcsTaskDefinition(),
"aws_efs_file_system": resourceAwsEfsFileSystem(),
"aws_efs_mount_target": resourceAwsEfsMountTarget(),
provider/aws: Implement IPV6 Support for ec2 / VPC (#10538) * provider/aws: Add support for IPV6 enabled VPC ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSVpc' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/12/09 14:07:31 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSVpc -timeout 120m === RUN TestAccAWSVpc_importBasic --- PASS: TestAccAWSVpc_importBasic (43.03s) === RUN TestAccAWSVpc_basic --- PASS: TestAccAWSVpc_basic (36.32s) === RUN TestAccAWSVpc_enableIpv6 --- PASS: TestAccAWSVpc_enableIpv6 (29.37s) === RUN TestAccAWSVpc_dedicatedTenancy --- PASS: TestAccAWSVpc_dedicatedTenancy (36.63s) === RUN TestAccAWSVpc_tags --- PASS: TestAccAWSVpc_tags (67.54s) === RUN TestAccAWSVpc_update --- PASS: TestAccAWSVpc_update (66.16s) === RUN TestAccAWSVpc_bothDnsOptionsSet --- PASS: TestAccAWSVpc_bothDnsOptionsSet (16.82s) === RUN TestAccAWSVpc_DisabledDnsSupport --- PASS: TestAccAWSVpc_DisabledDnsSupport (36.52s) === RUN TestAccAWSVpc_classiclinkOptionSet --- PASS: TestAccAWSVpc_classiclinkOptionSet (38.13s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 739.543s ``` * provider/aws: New Resource: aws_egress_only_internet_gateway ``` make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSEgressOnlyInternetGateway_' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/12/09 14:22:16 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSEgressOnlyInternetGateway_ -timeout 120m === RUN TestAccAWSEgressOnlyInternetGateway_basic --- PASS: TestAccAWSEgressOnlyInternetGateway_basic (32.67s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 32.692s ``` * provider/aws: Add IPV6 support to aws_subnet ``` % make testacc TEST=./builtin/providers/aws % TESTARGS='-run=TestAccAWSSubnet_' % 1 ↵ ✹ ✭ ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2017/02/27 19:08:34 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSSubnet_ -timeout 120m === RUN TestAccAWSSubnet_importBasic --- PASS: TestAccAWSSubnet_importBasic (69.88s) === RUN TestAccAWSSubnet_basic --- PASS: TestAccAWSSubnet_basic (51.28s) === RUN TestAccAWSSubnet_ipv6 --- PASS: TestAccAWSSubnet_ipv6 (90.39s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws211.574s ``` * provider/aws: Add support for running aws_instances with ipv6 addresses
2017-03-01 17:16:59 +01:00
"aws_egress_only_internet_gateway": resourceAwsEgressOnlyInternetGateway(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_eip": resourceAwsEip(),
provider/aws: Change `aws_elastic_ip_association` to have computed parameters (#6552) * New top level AWS resource aws_eip_association * Add documentation for aws_eip_association * Add tests for aws_eip_association * provider/aws: Change `aws_elastic_ip_association` to have computed parameters The AWS API was send ing more parameters than we had set. Therefore, Terraform was showing constant changes when plans were being formed
2016-05-09 19:40:45 +02:00
"aws_eip_association": resourceAwsEipAssociation(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_elasticache_cluster": resourceAwsElasticacheCluster(),
"aws_elasticache_parameter_group": resourceAwsElasticacheParameterGroup(),
provider/aws: Implement the `aws_elasticache_replication_group` resource (#8275)
2016-08-18 20:42:29 +02:00
"aws_elasticache_replication_group": resourceAwsElasticacheReplicationGroup(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_elasticache_security_group": resourceAwsElasticacheSecurityGroup(),
"aws_elasticache_subnet_group": resourceAwsElasticacheSubnetGroup(),
"aws_elastic_beanstalk_application": resourceAwsElasticBeanstalkApplication(),
provider/aws: Elastic Beanstalk Application Version (#5770) * Added new resource aws_elastic_beanstalk_application_version. * Changing bucket and key to required. * Update to use d.Id() directly in DescribeApplicationVersions. * Checking err to make sure that the application version is successfully deleted. * Update `version_label` to `Computed: true`. * provider/aws: Updating to python solution stack * provider/aws: Beanstalk App Version delete source The Elastic Beanstalk API call to delete `application_version` resource should not delete the s3 bundle, as this object is managed by another Terraform resource * provider/aws: Update application version docs * Fix application version test * Add `version_label` update test Adds test that fails after rebasing branch onto v0.8.x. `version_label` changes do not update the `aws_elastic_beanstalk_environment` resource. * `version_label` changes to update environment * Prevent unintended delete of `application_version` Prevents an `application_version` used by multiple environments from being deleted. * Add `force_delete` attribute * Update documentation
2017-02-17 16:54:07 +01:00
"aws_elastic_beanstalk_application_version": resourceAwsElasticBeanstalkApplicationVersion(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_elastic_beanstalk_configuration_template": resourceAwsElasticBeanstalkConfigurationTemplate(),
"aws_elastic_beanstalk_environment": resourceAwsElasticBeanstalkEnvironment(),
"aws_elasticsearch_domain": resourceAwsElasticSearchDomain(),
provider/aws: Add aws_elasticsearch_domain_policy (#8648)
2017-02-08 14:20:57 +01:00
"aws_elasticsearch_domain_policy": resourceAwsElasticSearchDomainPolicy(),
Add support for Amazon Elastic Transcoder - Add resources for elastic transcoder pipelines and presets
2016-05-27 00:29:42 +02:00
"aws_elastictranscoder_pipeline": resourceAwsElasticTranscoderPipeline(),
"aws_elastictranscoder_preset": resourceAwsElasticTranscoderPreset(),
re-go-fmt after rebase use us-west-2 region in tests update test with working config provider/aws: Update EMR contribution with passing test, polling for instance in DELETE method remove defaulted role document emr_cluster rename aws_emr -> aws_emr_cluster update docs for name change update delete timeout/polling rename emr taskgroup to emr instance group default instance group count to 0, down from 60 update to ref emr_cluster, emr_instance_group more cleanups for instance groups; need to read and update add read, delete method for instance groups refactor the read method to seperate out the fetching of the specific group more refactoring for finding instance groups update emr instance group docs err check on reading HTTP. Dont' return the error, just log it refactor the create method to catch optionals additional cleanups, added a read method update test to be non-master-only wrap up the READ method for clusters poll for instance group to be running after a modification patch up a possible deref provider/aws: EMR cleanups fix test naming remove outdated docs randomize emr_profile names
2016-09-22 21:59:13 +02:00
"aws_elb": resourceAwsElb(),
"aws_elb_attachment": resourceAwsElbAttachment(),
"aws_emr_cluster": resourceAwsEMRCluster(),
"aws_emr_instance_group": resourceAwsEMRInstanceGroup(),
"aws_flow_log": resourceAwsFlowLog(),
"aws_glacier_vault": resourceAwsGlacierVault(),
"aws_iam_access_key": resourceAwsIamAccessKey(),
Add `aws_iam_account_alias` resource (#12648)
2017-03-14 14:35:38 +01:00
"aws_iam_account_alias": resourceAwsIamAccountAlias(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_iam_account_password_policy": resourceAwsIamAccountPasswordPolicy(),
"aws_iam_group_policy": resourceAwsIamGroupPolicy(),
"aws_iam_group": resourceAwsIamGroup(),
"aws_iam_group_membership": resourceAwsIamGroupMembership(),
provider/aws: Add per user, role and group policy attachment (supersedes #5816) (#6858) * Add per user, role and group policy attachment * Add docs for new IAM policy attachment resources. * Make policy attachment resources manage only 1 entity<->policy attachment * provider/aws: Tidy up IAM Group/User/Role attachments
2016-05-25 18:03:43 +02:00
"aws_iam_group_policy_attachment": resourceAwsIamGroupPolicyAttachment(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_iam_instance_profile": resourceAwsIamInstanceProfile(),
"aws_iam_policy": resourceAwsIamPolicy(),
"aws_iam_policy_attachment": resourceAwsIamPolicyAttachment(),
provider/aws: Add per user, role and group policy attachment (supersedes #5816) (#6858) * Add per user, role and group policy attachment * Add docs for new IAM policy attachment resources. * Make policy attachment resources manage only 1 entity<->policy attachment * provider/aws: Tidy up IAM Group/User/Role attachments
2016-05-25 18:03:43 +02:00
"aws_iam_role_policy_attachment": resourceAwsIamRolePolicyAttachment(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_iam_role_policy": resourceAwsIamRolePolicy(),
"aws_iam_role": resourceAwsIamRole(),
"aws_iam_saml_provider": resourceAwsIamSamlProvider(),
"aws_iam_server_certificate": resourceAwsIAMServerCertificate(),
provider/aws: Add per user, role and group policy attachment (supersedes #5816) (#6858) * Add per user, role and group policy attachment * Add docs for new IAM policy attachment resources. * Make policy attachment resources manage only 1 entity<->policy attachment * provider/aws: Tidy up IAM Group/User/Role attachments
2016-05-25 18:03:43 +02:00
"aws_iam_user_policy_attachment": resourceAwsIamUserPolicyAttachment(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_iam_user_policy": resourceAwsIamUserPolicy(),
provider/aws: Scaffold `aws_iam_user_ssh_key` resource
2016-03-22 02:19:16 +01:00
"aws_iam_user_ssh_key": resourceAwsIamUserSshKey(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_iam_user": resourceAwsIamUser(),
provider/aws: aws_iam_user_login_profile resource This commit introduces an `aws_iam_user_login_profile` resource which creates a password for an IAM user, and encrypts it using a PGP key specified in the configuration or obtained from Keybase. For example: ``` resource "aws_iam_user" "u" { name = "auser" path = "/" force_destroy = true } resource "aws_iam_user_login_profile" "u" { user = "${aws_iam_user.u.name}" pgp_key = "keybase:some_person_that_exists" } output "password" { value = "${aws_iam_user_login_profile.u.encrypted_password}" } ``` The resulting attribute "encrypted_password" can be decrypted using PGP or Keybase - for example: ``` terraform output password | base64 --decode | keybase pgp decrypt ``` Optionally the user can retain the password rather than the default of being forced to change it at first login. Generated passwords are currently 20 characters long.
2016-10-25 17:33:42 +02:00
"aws_iam_user_login_profile": resourceAwsIamUserLoginProfile(),
provider/aws: Add Inspector Support (#11217) * provider/aws: Add Inspector Support * inscrease time to 1 hour
2017-01-17 18:30:46 +01:00
"aws_inspector_assessment_target": resourceAWSInspectorAssessmentTarget(),
"aws_inspector_assessment_template": resourceAWSInspectorAssessmentTemplate(),
"aws_inspector_resource_group": resourceAWSInspectorResourceGroup(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_instance": resourceAwsInstance(),
"aws_internet_gateway": resourceAwsInternetGateway(),
"aws_key_pair": resourceAwsKeyPair(),
"aws_kinesis_firehose_delivery_stream": resourceAwsKinesisFirehoseDeliveryStream(),
"aws_kinesis_stream": resourceAwsKinesisStream(),
Added AWS KMS key & alias support
2015-09-09 17:58:24 +02:00
"aws_kms_alias": resourceAwsKmsAlias(),
"aws_kms_key": resourceAwsKmsKey(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_lambda_function": resourceAwsLambdaFunction(),
"aws_lambda_event_source_mapping": resourceAwsLambdaEventSourceMapping(),
"aws_lambda_alias": resourceAwsLambdaAlias(),
"aws_lambda_permission": resourceAwsLambdaPermission(),
"aws_launch_configuration": resourceAwsLaunchConfiguration(),
provider/aws: Add support for AWS Lightsail Domain (#10637) ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSLightsailDomain_' ==> Checking that code complies with gofmt requirements... go generate $(go list ./... | grep -v /terraform/vendor/) 2016/12/09 15:19:58 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSLightsailDomain_ -timeout 120m === RUN TestAccAWSLightsailDomain_basic --- PASS: TestAccAWSLightsailDomain_basic (16.28s) === RUN TestAccAWSLightsailDomain_disappears --- PASS: TestAccAWSLightsailDomain_disappears (12.71s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws29.015s ```
2016-12-09 18:56:48 +01:00
"aws_lightsail_domain": resourceAwsLightsailDomain(),
provider/aws: Add Lightsail Instance Adds initial support for AWS Lightsail Instances
2016-12-01 18:35:11 +01:00
"aws_lightsail_instance": resourceAwsLightsailInstance(),
provider/aws: add aws_lightsail_key_pair
2016-12-06 20:21:50 +01:00
"aws_lightsail_key_pair": resourceAwsLightsailKeyPair(),
provider/aws: Add support for aws_lightsail_static_ip (#13175)
2017-03-30 15:59:28 +02:00
"aws_lightsail_static_ip": resourceAwsLightsailStaticIp(),
provider/aws: Add support for Lightsail Static IP Attachment (#13207)
2017-03-31 08:30:25 +02:00
"aws_lightsail_static_ip_attachment": resourceAwsLightsailStaticIpAttachment(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_lb_cookie_stickiness_policy": resourceAwsLBCookieStickinessPolicy(),
rename aws load balancer policy resources team redundancy team had a good run, but is over now
2016-08-08 04:34:26 +02:00
"aws_load_balancer_policy": resourceAwsLoadBalancerPolicy(),
"aws_load_balancer_backend_server_policy": resourceAwsLoadBalancerBackendServerPolicies(),
"aws_load_balancer_listener_policy": resourceAwsLoadBalancerListenerPolicies(),
Add new resource aws_lb_ssl_negotiation_policy Added new resource to create an AWS ELB SSL negotiation policy, and an acceptance test.
2016-03-15 05:13:44 +01:00
"aws_lb_ssl_negotiation_policy": resourceAwsLBSSLNegotiationPolicy(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_main_route_table_association": resourceAwsMainRouteTableAssociation(),
"aws_nat_gateway": resourceAwsNatGateway(),
"aws_network_acl": resourceAwsNetworkAcl(),
provider/aws: Default Network ACL resource (#6165) * provider/aws: Default Network ACL resource Provides a resource to manage the default AWS Network ACL. VPC Only. * Remove subnet_id update, mark as computed value. Remove extra tag update * refactor default rule number to be a constant * refactor revokeRulesForType to be revokeAllNetworkACLEntries Refactor method to delete all network ACL entries, regardless of type. The previous implementation was under the assumption that we may only eliminate some rule types and possibly not others, so the split was necessary. We're now removing them all, so the logic isn't necessary Several doc and test cleanups are here as well * smite subnet_id, improve docs
2016-04-18 18:02:00 +02:00
"aws_default_network_acl": resourceAwsDefaultNetworkAcl(),
provider/aws: Add aws_default_route_table resource (#8323) * provider/aws: Add docs for Default Route Table * add new default_route_table_id attribute, test to VPC * stub * add warning to docs * rough implementation * first test * update test, add swap test * fix typo
2016-08-25 23:02:44 +02:00
"aws_default_route_table": resourceAwsDefaultRouteTable(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_network_acl_rule": resourceAwsNetworkAclRule(),
"aws_network_interface": resourceAwsNetworkInterface(),
Opsworks Application support
2015-12-22 17:45:27 +01:00
"aws_opsworks_application": resourceAwsOpsworksApplication(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_opsworks_stack": resourceAwsOpsworksStack(),
"aws_opsworks_java_app_layer": resourceAwsOpsworksJavaAppLayer(),
"aws_opsworks_haproxy_layer": resourceAwsOpsworksHaproxyLayer(),
"aws_opsworks_static_web_layer": resourceAwsOpsworksStaticWebLayer(),
"aws_opsworks_php_app_layer": resourceAwsOpsworksPhpAppLayer(),
"aws_opsworks_rails_app_layer": resourceAwsOpsworksRailsAppLayer(),
"aws_opsworks_nodejs_app_layer": resourceAwsOpsworksNodejsAppLayer(),
"aws_opsworks_memcached_layer": resourceAwsOpsworksMemcachedLayer(),
"aws_opsworks_mysql_layer": resourceAwsOpsworksMysqlLayer(),
"aws_opsworks_ganglia_layer": resourceAwsOpsworksGangliaLayer(),
"aws_opsworks_custom_layer": resourceAwsOpsworksCustomLayer(),
Add support for Opsworks Instances New resource checklist - [x] Acceptance testing - [x] Documentation - [x] Well-formed code
2015-12-12 00:35:22 +01:00
"aws_opsworks_instance": resourceAwsOpsworksInstance(),
providers/aws: Opsworks permission resource (#6304) * add opsworks permission resource * add docs * remove permission from state if the permission object could not be found * remove nil validate function. validation is done in schema.Resource. * add id to the list of exported values * renge over permission to check that we have found got the correct one * removed comment * removed set id * fix unknown region us-east-1c * add user_profile resource * add docs * add default value
2016-07-21 01:29:33 +02:00
"aws_opsworks_user_profile": resourceAwsOpsworksUserProfile(),
"aws_opsworks_permission": resourceAwsOpsworksPermission(),
provider/aws: Add opsworks rds db resource (#10294) * add rds db for opsworks * switched to stack in vpc * implement update method * add docs * implement and document force new resource behavior * implement retry for update and delete * add test that forces new resource
2016-12-05 17:14:15 +01:00
"aws_opsworks_rds_db_instance": resourceAwsOpsworksRdsDbInstance(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_placement_group": resourceAwsPlacementGroup(),
"aws_proxy_protocol_policy": resourceAwsProxyProtocolPolicy(),
"aws_rds_cluster": resourceAwsRDSCluster(),
"aws_rds_cluster_instance": resourceAwsRDSClusterInstance(),
add resource aws_rds_cluster_parameter_group
2016-02-23 11:52:07 +01:00
"aws_rds_cluster_parameter_group": resourceAwsRDSClusterParameterGroup(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_redshift_cluster": resourceAwsRedshiftCluster(),
"aws_redshift_security_group": resourceAwsRedshiftSecurityGroup(),
"aws_redshift_parameter_group": resourceAwsRedshiftParameterGroup(),
"aws_redshift_subnet_group": resourceAwsRedshiftSubnetGroup(),
"aws_route53_delegation_set": resourceAwsRoute53DelegationSet(),
"aws_route53_record": resourceAwsRoute53Record(),
"aws_route53_zone_association": resourceAwsRoute53ZoneAssociation(),
"aws_route53_zone": resourceAwsRoute53Zone(),
"aws_route53_health_check": resourceAwsRoute53HealthCheck(),
"aws_route": resourceAwsRoute(),
"aws_route_table": resourceAwsRouteTable(),
"aws_route_table_association": resourceAwsRouteTableAssociation(),
Add SES resource (#5387) * Add SES resource * Detect ReceiptRule deletion outside of Terraform * Handle order of rule actions * Add position field to docs * Fix hashes, add log messages, and other small cleanup * Fix rebase issue * Fix formatting
2016-06-26 23:07:14 +02:00
"aws_ses_active_receipt_rule_set": resourceAwsSesActiveReceiptRuleSet(),
provider/aws: Implement aws_ses_domain_identity (#13098) * provider/aws: New resource: aws_ses_domain_identity Provide a resource to manage domain identities in SES. Exports the verification_code attribute which can be used to add the TXT record to the domain to complete the domain verification. * provider/aws: Acceptance tests for aws_ses_domain_identity * Resource aws_ses_domain_identity: Documentation update Provide documentation for the new resource type.
2017-04-01 07:57:34 +02:00
"aws_ses_domain_identity": resourceAwsSesDomainIdentity(),
Add SES resource (#5387) * Add SES resource * Detect ReceiptRule deletion outside of Terraform * Handle order of rule actions * Add position field to docs * Fix hashes, add log messages, and other small cleanup * Fix rebase issue * Fix formatting
2016-06-26 23:07:14 +02:00
"aws_ses_receipt_filter": resourceAwsSesReceiptFilter(),
"aws_ses_receipt_rule": resourceAwsSesReceiptRule(),
"aws_ses_receipt_rule_set": resourceAwsSesReceiptRuleSet(),
provider/aws: Support for SES Configuration sets and Event Destinations (#10735) * adding configuration set * adding event destination * adding test, all tests passing * adding doccumentation
2016-12-16 12:46:39 +01:00
"aws_ses_configuration_set": resourceAwsSesConfigurationSet(),
"aws_ses_event_destination": resourceAwsSesEventDestination(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_s3_bucket": resourceAwsS3Bucket(),
provider/aws: Add aws_s3_bucket_policy resource This commit adds a new "attachment" style resource for setting the policy of an AWS S3 bucket. This is desirable such that the ARN of the bucket can be referenced in an IAM Policy Document. In addition, we now suppress diffs on the (now-computed) policy in the S3 bucket for structurally equivalent policies, which prevents flapping because of whitespace and map ordering changes made by the S3 endpoint.
2016-09-02 00:34:45 +02:00
"aws_s3_bucket_policy": resourceAwsS3BucketPolicy(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_s3_bucket_object": resourceAwsS3BucketObject(),
provider/aws: Support S3 bucket notification * Implement aws_s3_bucket_notification resource
2016-04-05 04:23:06 +02:00
"aws_s3_bucket_notification": resourceAwsS3BucketNotification(),
provider/aws: Add Default Security Group Resource (#8861) * Docs for default security group * overrides of default behavior * add special disclaimer * update to support classic environments
2016-09-15 20:59:20 +02:00
"aws_default_security_group": resourceAwsDefaultSecurityGroup(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_security_group": resourceAwsSecurityGroup(),
"aws_security_group_rule": resourceAwsSecurityGroupRule(),
SimpleDB domain resource (#7600)
2016-07-12 13:55:58 +02:00
"aws_simpledb_domain": resourceAwsSimpleDBDomain(),
New AWS resource `ssm_activation` (#9111) Adding a new resource to support activation of managed instances for on-premise virtual-machines.
2016-10-28 11:59:12 +02:00
"aws_ssm_activation": resourceAwsSsmActivation(),
provider/aws: add aws_ssm_association resource
2016-09-02 09:43:03 +02:00
"aws_ssm_association": resourceAwsSsmAssociation(),
provider/aws: Adding `aws_ssm_document` resource (#8460) * provider/aws: add `aws_ssm_document` resource * provider/aws: Changes to `aws_ssm_document` post code review The changes are things like using d.Id rather than d.Get("name").(string) and errwrap.Wrapf rather than fmt.Errorf
2016-08-25 10:47:24 +02:00
"aws_ssm_document": resourceAwsSsmDocument(),
provider/aws: New resource `aws_spot_datafeed_subscription` Fixes: #4922 ``` % make testacc TEST=./builtin/providers/aws TESTARGS='-run=TestAccAWSSpotDatafeedSubscription_' ==> Checking that code complies with gofmt requirements... /Users/stacko/Code/go/bin/stringer go generate $(go list ./... | grep -v /terraform/vendor/) 2016/08/24 10:46:23 Generated command/internal_plugin_list.go TF_ACC=1 go test ./builtin/providers/aws -v -run=TestAccAWSSpotDatafeedSubscription_ -timeout 120m === RUN TestAccAWSSpotDatafeedSubscription_importBasic --- PASS: TestAccAWSSpotDatafeedSubscription_importBasic (56.31s) === RUN TestAccAWSSpotDatafeedSubscription_basic --- PASS: TestAccAWSSpotDatafeedSubscription_basic (56.77s) === RUN TestAccAWSSpotDatafeedSubscription_disappears --- PASS: TestAccAWSSpotDatafeedSubscription_disappears (56.79s) PASS ok github.com/hashicorp/terraform/builtin/providers/aws 169.893s ```
2016-08-24 11:51:57 +02:00
"aws_spot_datafeed_subscription": resourceAwsSpotDataFeedSubscription(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_spot_instance_request": resourceAwsSpotInstanceRequest(),
Add an AWS Spot fleet resource
2016-06-22 02:16:02 +02:00
"aws_spot_fleet_request": resourceAwsSpotFleetRequest(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_sqs_queue": resourceAwsSqsQueue(),
provider/aws: Add aws_sqs_queue_policy
2016-09-05 08:45:04 +02:00
"aws_sqs_queue_policy": resourceAwsSqsQueuePolicy(),
implement aws_snapshot_create_volume_permission This adds the new resource aws_snapshot_create_volume_permission which manages the createVolumePermission attribute of snapshots. This allows granting an AWS account permissions to create a volume from a particular snapshot. This is often required to allow another account to copy a private AMI.
2016-11-04 22:41:16 +01:00
"aws_snapshot_create_volume_permission": resourceAwsSnapshotCreateVolumePermission(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_sns_topic": resourceAwsSnsTopic(),
provider/aws: Add aws_sns_topic_policy
2016-09-04 09:30:10 +02:00
"aws_sns_topic_policy": resourceAwsSnsTopicPolicy(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_sns_topic_subscription": resourceAwsSnsTopicSubscription(),
Added Step Function resources (State Machine & Activity) (#11420) * Added Step Function Activity & Step Function State Machine * Added SFN State Machine documentation * Added aws_sfn_activity & documentation * Allowed import of sfn resources * Added more checks on tests, fixed documentation * Handled the update case of a SFN function (might be already deleting) * Removed the State Machine import test file * Fixed the eventual consistency of the read after delete for SFN functions
2017-01-31 21:17:38 +01:00
"aws_sfn_activity": resourceAwsSfnActivity(),
"aws_sfn_state_machine": resourceAwsSfnStateMachine(),
provider/aws: Add Elastic Beanstalk Application, Configuration Template, and Environment This adds support for Elastic Beanstalk Applications, Configuration Templates, and Environments. This is a combined work of @catsby, @dharrisio, @Bowbaq, and @jen20
2016-03-07 21:42:30 +01:00
"aws_subnet": resourceAwsSubnet(),
"aws_volume_attachment": resourceAwsVolumeAttachment(),
"aws_vpc_dhcp_options_association": resourceAwsVpcDhcpOptionsAssociation(),
"aws_vpc_dhcp_options": resourceAwsVpcDhcpOptions(),
"aws_vpc_peering_connection": resourceAwsVpcPeeringConnection(),
Initial commit from @BSick7: Implementing vpc_peering_connection_accept. Additions from @ewbankkit: Rename 'aws_vpc_peering_connection_accept' to 'aws_vpc_peering_connection_accepter'. Get it working reusing functionality from 'aws_vpc_peering_connection' resource.
2016-05-24 00:24:28 +02:00
"aws_vpc_peering_connection_accepter": resourceAwsVpcPeeringConnectionAccepter(),
"aws_vpc": resourceAwsVpc(),
"aws_vpc_endpoint": resourceAwsVpcEndpoint(),
"aws_vpc_endpoint_route_table_association": resourceAwsVpcEndpointRouteTableAssociation(),
"aws_vpn_connection": resourceAwsVpnConnection(),
"aws_vpn_connection_route": resourceAwsVpnConnectionRoute(),
"aws_vpn_gateway": resourceAwsVpnGateway(),
"aws_vpn_gateway_attachment": resourceAwsVpnGatewayAttachment(),
"aws_waf_byte_match_set": resourceAwsWafByteMatchSet(),
"aws_waf_ipset": resourceAwsWafIPSet(),
"aws_waf_rule": resourceAwsWafRule(),
"aws_waf_size_constraint_set": resourceAwsWafSizeConstraintSet(),
"aws_waf_web_acl": resourceAwsWafWebAcl(),
"aws_waf_xss_match_set": resourceAwsWafXssMatchSet(),
"aws_waf_sql_injection_match_set": resourceAwsWafSqlInjectionMatchSet(),
providers/aws: resource_aws_eip is in new framework
2014-08-20 01:56:23 +02:00
},
Refactored about 90% Still need to update 2 resources and check the acceptance tests, but overall we’re nearly there :smiley:
2014-11-21 17:58:34 +01:00
ConfigureFunc: providerConfigure,
providers/aws: proper DefaultFunc to return nil if no env
2014-09-10 06:46:50 +02:00
}
}
Add descriptions for AWS inputs
2014-09-29 22:30:28 +02:00
var descriptions map[string]string
func init() {
descriptions = map[string]string{
"region": "The region where AWS operations will take place. Examples\n" +
"are us-east-1, us-west-2, etc.",
"access_key": "The access key for API operations. You can retrieve this\n" +
"from the 'Security & Credentials' section of the AWS console.",
"secret_key": "The secret key for API operations. You can retrieve this\n" +
"from the 'Security & Credentials' section of the AWS console.",
Support session token in AWS credentials Session tokens are necessary to utilize temporary credentials. http://docs.aws.amazon.com/STS/latest/UsingSTS/Welcome.html
2015-04-20 20:26:59 +02:00
provider/aws: Add profile to provider config This allows specification of the profile for the shared credentials provider for AWS to be specified in Terraform configuration. This is useful if defining providers with aliases, or if you don't want to set environment variables. Example: $ aws configure --profile this_is_dog ... enter keys $ cat main.tf provider "aws" { profile = "this_is_dog" # Optionally also specify the path to the credentials file shared_credentials_file = "/tmp/credentials" } This is equivalent to specifying AWS_PROFILE or AWS_SHARED_CREDENTIALS_FILE in the environment.
2016-01-11 16:22:09 +01:00
"profile": "The profile for API operations. If not set, the default profile\n" +
"created with `aws configure` will be used.",
"shared_credentials_file": "The path to the shared credentials file. If not set\n" +
"this defaults to ~/.aws/credentials.",
Support session token in AWS credentials Session tokens are necessary to utilize temporary credentials. http://docs.aws.amazon.com/STS/latest/UsingSTS/Welcome.html
2015-04-20 20:26:59 +02:00
"token": "session token. A session token is only required if you are\n" +
"using temporary security credentials.",
aws: make MaxRetries for API calls configurable - Make it configurable in the AWS provider by add an option 'max_retries'. - Set the default from 3 to 11 retries.
2015-05-03 11:08:47 +02:00
"max_retries": "The maximum number of times an AWS API request is\n" +
"being executed. If the API request still fails, an error is\n" +
"thrown.",
dynamodb-local Add `dynamodb_endpoint` allowing to change the DynamoDB Endpoint for example to connect to dynamodb-local
2015-07-22 23:57:29 +02:00
dynamodb-local Use ` instead of : to refer region to keep the consistency with the provider docs
2015-07-29 18:36:02 +02:00
"dynamodb_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n" +
dynamodb-local Add `dynamodb_endpoint` allowing to change the DynamoDB Endpoint for example to connect to dynamodb-local
2015-07-22 23:57:29 +02:00
"It's typically used to connect to dynamodb-local.",
provider/aws: allow local kinesis
2015-09-16 18:58:46 +02:00
"kinesis_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n" +
"It's typically used to connect to kinesalite.",
support custom endpoints for AWS EC2 ELB and IAM
2015-12-11 16:27:49 +01:00
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
"iam_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n",
support custom endpoints for AWS EC2 ELB and IAM
2015-12-11 16:27:49 +01:00
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
"ec2_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n",
support custom endpoints for AWS EC2 ELB and IAM
2015-12-11 16:27:49 +01:00
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
"elb_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n",
support custom endpoints for AWS EC2 ELB and IAM
2015-12-11 16:27:49 +01:00
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
"s3_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n",
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
"insecure": "Explicitly allow the provider to perform \"insecure\" SSL requests. If omitted," +
"default value is `false`",
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
aws: Change field names + desc according to reality - skip_iam_creds_validation => skip_credentials_validation - skip_iam_account_id => skip_requesting_account_id
2016-08-10 17:46:02 +02:00
"skip_credentials_validation": "Skip the credentials validation via STS API. " +
"Used for AWS API implementations that do not have STS available/implemented.",
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
provider/aws: Allow bypassing region validation
2017-01-23 16:01:22 +01:00
"skip_region_validation": "Skip static validation of region name. " +
"Used by users of alternative AWS-like APIs or users w/ access to regions that are not public (yet).",
aws: Change field names + desc according to reality - skip_iam_creds_validation => skip_credentials_validation - skip_iam_account_id => skip_requesting_account_id
2016-08-10 17:46:02 +02:00
"skip_requesting_account_id": "Skip requesting the account ID. " +
"Used for AWS API implementations that do not have IAM/STS API and/or metadata API.",
Skip IAM/STS validation and metadata check (#7874) * Skip IAM/STS validation and metadata check * Skip IAM/STS identity validation - For environments or other api implementations where there are no IAM/STS endpoints available, this option lets you opt out from that provider initialization step. * Skip metdata api check - For environments in which you know ahead of time there isn't going to be a metadta api endpoint, this option lets you opt out from that check to save time. * Allow iam/sts initialization even if skipping account/cred validation (#7874) * Split out skip of IAM validation into credentials and account id (#7874)
2016-08-10 16:10:34 +02:00
"skip_medatadata_api_check": "Skip the AWS Metadata API check. " +
"Used for AWS API implementations that do not have a metadata api endpoint.",
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
"s3_force_path_style": "Set this to true to force the request to use path-style addressing,\n" +
"i.e., http://s3.amazonaws.com/BUCKET/KEY. By default, the S3 client will\n" +
"use virtual hosted bucket addressing when possible\n" +
"(http://BUCKET.s3.amazonaws.com/KEY). Specific to the Amazon S3 service.",
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
"assume_role_role_arn": "The ARN of an IAM role to assume prior to making API calls.",
provider/aws: Fix misspelled words
2016-09-12 08:14:24 +02:00
"assume_role_session_name": "The session name to use when assuming the role. If omitted," +
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
" no session name is passed to the AssumeRole call.",
provider/aws: Fix misspelled words
2016-09-12 08:14:24 +02:00
"assume_role_external_id": "The external ID to use when assuming the role. If omitted," +
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
" no external ID is passed to the AssumeRole call.",
provider/aws: Add support for policy to AWS provider assume_role (#11501) Fixes: #11461 This will allow the user to pass a policy to further restrict the use of AssumeRole. It is important to note that it will NOT allow an expansion of access rights
2017-01-29 21:32:24 +01:00
"assume_role_policy": "The permissions applied when assuming a role. You cannot use," +
" this policy to grant further permissions that are in excess to those of the, " +
" role that is being assumed.",
Add descriptions for AWS inputs
2014-09-29 22:30:28 +02:00
}
}
Refactored about 90% Still need to update 2 resources and check the acceptance tests, but overall we’re nearly there :smiley:
2014-11-21 17:58:34 +01:00
func providerConfigure(d *schema.ResourceData) (interface{}, error) {
config := Config{
aws: Change field names + desc according to reality - skip_iam_creds_validation => skip_credentials_validation - skip_iam_account_id => skip_requesting_account_id
2016-08-10 17:46:02 +02:00
AccessKey: d.Get("access_key").(string),
SecretKey: d.Get("secret_key").(string),
Profile: d.Get("profile").(string),
CredsFilename: d.Get("shared_credentials_file").(string),
Token: d.Get("token").(string),
Region: d.Get("region").(string),
MaxRetries: d.Get("max_retries").(int),
Insecure: d.Get("insecure").(bool),
SkipCredsValidation: d.Get("skip_credentials_validation").(bool),
provider/aws: Allow bypassing region validation
2017-01-23 16:01:22 +01:00
SkipRegionValidation: d.Get("skip_region_validation").(bool),
aws: Change field names + desc according to reality - skip_iam_creds_validation => skip_credentials_validation - skip_iam_account_id => skip_requesting_account_id
2016-08-10 17:46:02 +02:00
SkipRequestingAccountId: d.Get("skip_requesting_account_id").(bool),
SkipMetadataApiCheck: d.Get("skip_metadata_api_check").(bool),
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
S3ForcePathStyle: d.Get("s3_force_path_style").(bool),
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
}
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
assumeRoleList := d.Get("assume_role").(*schema.Set).List()
if len(assumeRoleList) == 1 {
assumeRole := assumeRoleList[0].(map[string]interface{})
config.AssumeRoleARN = assumeRole["role_arn"].(string)
config.AssumeRoleSessionName = assumeRole["session_name"].(string)
config.AssumeRoleExternalID = assumeRole["external_id"].(string)
provider/aws: Add support for policy to AWS provider assume_role (#11501) Fixes: #11461 This will allow the user to pass a policy to further restrict the use of AssumeRole. It is important to note that it will NOT allow an expansion of access rights
2017-01-29 21:32:24 +01:00
if v := assumeRole["policy"].(string); v != "" {
config.AssumeRolePolicy = v
}
log.Printf("[INFO] assume_role configuration set: (ARN: %q, SessionID: %q, ExternalID: %q, Policy: %q)",
config.AssumeRoleARN, config.AssumeRoleSessionName, config.AssumeRoleExternalID, config.AssumeRolePolicy)
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
} else {
log.Printf("[INFO] No assume_role block read from configuration")
}
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
endpointsSet := d.Get("endpoints").(*schema.Set)
for _, endpointsSetI := range endpointsSet.List() {
endpoints := endpointsSetI.(map[string]interface{})
provider/aws: Unify custom endpoint fields in provider schema (#11768)
2017-02-08 14:08:59 +01:00
config.DynamoDBEndpoint = endpoints["dynamodb"].(string)
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
config.IamEndpoint = endpoints["iam"].(string)
config.Ec2Endpoint = endpoints["ec2"].(string)
config.ElbEndpoint = endpoints["elb"].(string)
provider/aws: Unify custom endpoint fields in provider schema (#11768)
2017-02-08 14:08:59 +01:00
config.KinesisEndpoint = endpoints["kinesis"].(string)
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
config.S3Endpoint = endpoints["s3"].(string)
Refactored about 90% Still need to update 2 resources and check the acceptance tests, but overall we’re nearly there :smiley:
2014-11-21 17:58:34 +01:00
}
AWS account ID protection added
2015-04-20 00:54:42 +02:00
if v, ok := d.GetOk("allowed_account_ids"); ok {
config.AllowedAccountIds = v.(*schema.Set).List()
}
if v, ok := d.GetOk("forbidden_account_ids"); ok {
config.ForbiddenAccountIds = v.(*schema.Set).List()
}
Refactored about 90% Still need to update 2 resources and check the acceptance tests, but overall we’re nearly there :smiley:
2014-11-21 17:58:34 +01:00
return config.Client()
}
provider/aws: serialize SG rule access to fix race condition Because `aws_security_group_rule` resources are an abstraction on top of Security Groups, they must interact with the AWS Security Group APIs in a pattern that often results in lots of parallel requests interacting with the same security group. We've found that this pattern can trigger race conditions resulting in inconsistent behavior, including: * Rules that report as created but don't actually exist on AWS's side * Rules that show up in AWS but don't register as being created locally, resulting in follow up attempts to authorize the rule failing w/ Duplicate errors Here, we introduce a per-SG mutex that must be held by any security group before it is allowed to interact with AWS APIs. This protects the space between `DescribeSecurityGroup` and `Authorize*` / `Revoke*` calls, ensuring that no other rules interact with the SG during that span. The included test exposes the race by applying a security group with lots of rules, which based on the dependency graph can all be handled in parallel. This fails most of the time without the new locking behavior. I've omitted the mutex from `Read`, since it is only called during the Refresh walk when no changes are being made, meaning a bunch of parallel `DescribeSecurityGroup` API calls should be consistent in that case.
2015-08-24 15:59:54 +02:00
// This is a global MutexKV for use within this plugin.
var awsMutexKV = mutexkv.NewMutexKV()
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
func assumeRoleSchema() *schema.Schema {
return &schema.Schema{
Type: schema.TypeSet,
Optional: true,
MaxItems: 1,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"role_arn": {
Type: schema.TypeString,
Optional: true,
Description: descriptions["assume_role_role_arn"],
},
"session_name": {
Type: schema.TypeString,
Optional: true,
Description: descriptions["assume_role_session_name"],
},
"external_id": {
Type: schema.TypeString,
Optional: true,
Description: descriptions["assume_role_external_id"],
},
provider/aws: Add support for policy to AWS provider assume_role (#11501) Fixes: #11461 This will allow the user to pass a policy to further restrict the use of AssumeRole. It is important to note that it will NOT allow an expansion of access rights
2017-01-29 21:32:24 +01:00
"policy": {
Type: schema.TypeString,
Optional: true,
Description: descriptions["assume_role_policy"],
},
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
},
},
Set: assumeRoleToHash,
}
}
func assumeRoleToHash(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["role_arn"].(string)))
buf.WriteString(fmt.Sprintf("%s-", m["session_name"].(string)))
buf.WriteString(fmt.Sprintf("%s-", m["external_id"].(string)))
provider/aws: Add support for policy to AWS provider assume_role (#11501) Fixes: #11461 This will allow the user to pass a policy to further restrict the use of AssumeRole. It is important to note that it will NOT allow an expansion of access rights
2017-01-29 21:32:24 +01:00
buf.WriteString(fmt.Sprintf("%s-", m["policy"].(string)))
provider/aws: Add assume_role block to provider This replaces the previous `role_arn` with a block which looks like this: ``` provider "aws" { // secret key, access key etc assume_role { role_arn = "<Role ARN>" session_name = "<Session Name>" external_id = "<External ID>" } } ``` We also modify the configuration structure and read the values from the block if present into those values and adjust the call to AssumeRole to include the SessionName and ExternalID based on the values set in the configuration block. Finally we clean up the tests and add in missing error checks, and clean up the error handling logic in the Auth helper functions.
2016-09-02 19:36:01 +02:00
return hashcode.String(buf.String())
}
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
func endpointsSchema() *schema.Schema {
return &schema.Schema{
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
provider/aws: Unify custom endpoint fields in provider schema (#11768)
2017-02-08 14:08:59 +01:00
"dynamodb": {
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["dynamodb_endpoint"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"iam": {
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["iam_endpoint"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"ec2": {
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["ec2_endpoint"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"elb": {
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["elb_endpoint"],
},
provider/aws: Unify custom endpoint fields in provider schema (#11768)
2017-02-08 14:08:59 +01:00
"kinesis": {
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["kinesis_endpoint"],
},
provider/aws: Clean up AWS provider schema defns Remove unnecessary &schema.Schema from the AWS provider schema definition.
2016-09-02 19:29:59 +02:00
"s3": {
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
Type: schema.TypeString,
Optional: true,
Default: "",
Description: descriptions["s3_endpoint"],
},
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
},
},
Set: endpointsToHash,
}
}
func endpointsToHash(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
provider/aws: Unify custom endpoint fields in provider schema (#11768)
2017-02-08 14:08:59 +01:00
buf.WriteString(fmt.Sprintf("%s-", m["dynamodb"].(string)))
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
buf.WriteString(fmt.Sprintf("%s-", m["iam"].(string)))
buf.WriteString(fmt.Sprintf("%s-", m["ec2"].(string)))
buf.WriteString(fmt.Sprintf("%s-", m["elb"].(string)))
provider/aws: Unify custom endpoint fields in provider schema (#11768)
2017-02-08 14:08:59 +01:00
buf.WriteString(fmt.Sprintf("%s-", m["kinesis"].(string)))
Add S3 endpoint override ability and expose S3 path style option (#7871) * Overriding S3 endpoint - Enable specifying your own S3 api endpoint to override the default one, under endpoints. * Force S3 path style - Expose this option from the aws-sdk-go configuration to the provider.
2016-08-12 18:52:12 +02:00
buf.WriteString(fmt.Sprintf("%s-", m["s3"].(string)))
Move endpoint options into endpoints block
2016-02-07 22:40:51 +01:00
return hashcode.String(buf.String())
}