new resource: securityhub_insight

aws/internal/service/securityhub/finder/finder.go

@@ -1,6 +1,8 @@
 package finder
 
 import (
+	"context"
+
 	"github.com/aws/aws-sdk-go/aws"
 	"github.com/aws/aws-sdk-go/service/securityhub"
 )
@@ -30,3 +32,22 @@ func AdminAccount(conn *securityhub.SecurityHub, adminAccountID string) (*securi
 
 	return result, err
 }
+
+func Insight(ctx context.Context, conn *securityhub.SecurityHub, arn string) (*securityhub.Insight, error) {
+	input := &securityhub.GetInsightsInput{
+		InsightArns: aws.StringSlice([]string{arn}),
+		MaxResults:  aws.Int64(1),
+	}
+
+	output, err := conn.GetInsightsWithContext(ctx, input)
+
+	if err != nil {
+		return nil, err
+	}
+
+	if output == nil || len(output.Insights) == 0 {
+		return nil, nil
+	}
+
+	return output.Insights[0], nil
+}

aws/provider.go

@@ -976,6 +976,7 @@ func Provider() *schema.Provider {
 			"aws_security_group_rule":                                 resourceAwsSecurityGroupRule(),
 			"aws_securityhub_account":                                 resourceAwsSecurityHubAccount(),
 			"aws_securityhub_action_target":                           resourceAwsSecurityHubActionTarget(),
+			"aws_securityhub_insight":                                 resourceAwsSecurityHubInsight(),
 			"aws_securityhub_invite_accepter":                         resourceAwsSecurityHubInviteAccepter(),
 			"aws_securityhub_member":                                  resourceAwsSecurityHubMember(),
 			"aws_securityhub_organization_admin_account":              resourceAwsSecurityHubOrganizationAdminAccount(),