New Resource: aws_ssm_resource_data_sync

aws/provider.go

@@ -450,6 +450,7 @@ func Provider() terraform.ResourceProvider {
 			"aws_ssm_patch_baseline":                       resourceAwsSsmPatchBaseline(),
 			"aws_ssm_patch_group":                          resourceAwsSsmPatchGroup(),
 			"aws_ssm_parameter":                            resourceAwsSsmParameter(),
+			"aws_ssm_resource_data_sync":                   resourceAwsSsmResourceDataSync(),
 			"aws_spot_datafeed_subscription":               resourceAwsSpotDataFeedSubscription(),
 			"aws_spot_instance_request":                    resourceAwsSpotInstanceRequest(),
 			"aws_spot_fleet_request":                       resourceAwsSpotFleetRequest(),

aws/resource_aws_ssm_resource_data_sync.go

@@ -0,0 +1,180 @@
+package aws
+
+import (
+	"bytes"
+	"fmt"
+	"log"
+	"strings"
+
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/awserr"
+	"github.com/aws/aws-sdk-go/service/ssm"
+	"github.com/hashicorp/terraform/helper/hashcode"
+	"github.com/hashicorp/terraform/helper/schema"
+)
+
+func resourceAwsSsmResourceDataSync() *schema.Resource {
+	return &schema.Resource{
+		Create: resourceAwsSsmResourceDataSyncCreate,
+		Read:   resourceAwsSsmResourceDataSyncRead,
+		Delete: resourceAwsSsmResourceDataSyncDelete,
+
+		Schema: map[string]*schema.Schema{
+			"name": &schema.Schema{
+				Type:     schema.TypeString,
+				Required: true,
+				ForceNew: true,
+			},
+			"destination": {
+				Type:     schema.TypeSet,
+				Required: true,
+				ForceNew: true,
+				MaxItems: 1,
+				Elem: &schema.Resource{
+					Schema: map[string]*schema.Schema{
+						"key": {
+							Type:     schema.TypeString,
+							Optional: true,
+						},
+						"bucket": {
+							Type:     schema.TypeString,
+							Required: true,
+						},
+						"prefix": {
+							Type:     schema.TypeString,
+							Optional: true,
+						},
+						"region": {
+							Type:     schema.TypeString,
+							Required: true,
+						},
+					},
+				},
+				Set: func(v interface{}) int {
+					var buf bytes.Buffer
+					m := v.(map[string]interface{})
+					buf.WriteString(fmt.Sprintf("%s-", strings.ToLower(m["bucket"].(string))))
+					buf.WriteString(fmt.Sprintf("%s-", strings.ToLower(m["region"].(string))))
+					if val, ok := m["key"]; ok {
+						buf.WriteString(fmt.Sprintf("%s-", strings.ToLower(val.(string))))
+					}
+					if val, ok := m["prefix"]; ok {
+						buf.WriteString(fmt.Sprintf("%s-", strings.ToLower(val.(string))))
+					}
+					return hashcode.String(buf.String())
+				},
+			},
+		},
+	}
+}
+
+func resourceAwsSsmResourceDataSyncCreate(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*AWSClient).ssmconn
+
+	input := &ssm.CreateResourceDataSyncInput{
+		S3Destination: &ssm.ResourceDataSyncS3Destination{
+			SyncFormat: aws.String(ssm.ResourceDataSyncS3FormatJsonSerDe),
+		},
+		SyncName: aws.String(d.Get("name").(string)),
+	}
+	destination := d.Get("destination").(*schema.Set).List()
+	for _, v := range destination {
+		dest := v.(map[string]interface{})
+		input.S3Destination.SetBucketName(dest["bucket"].(string))
+		input.S3Destination.SetRegion(dest["region"].(string))
+		if val, ok := dest["key"].(string); ok && val != "" {
+			input.S3Destination.SetAWSKMSKeyARN(val)
+		}
+		if val, ok := dest["prefix"].(string); ok && val != "" {
+			input.S3Destination.SetPrefix(val)
+		}
+	}
+
+	_, err := conn.CreateResourceDataSync(input)
+	if err != nil {
+		if aerr, ok := err.(awserr.Error); ok {
+			switch aerr.Code() {
+			case ssm.ErrCodeResourceDataSyncAlreadyExistsException:
+				if err := resourceAwsSsmResourceDataSyncDeleteAndCreate(meta, input); err != nil {
+					return err
+				}
+			default:
+				return err
+			}
+		} else {
+			return err
+		}
+	}
+	d.SetId(d.Get("name").(string))
+	return resourceAwsSsmResourceDataSyncRead(d, meta)
+}
+
+func resourceAwsSsmResourceDataSyncRead(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*AWSClient).ssmconn
+
+	nextToken := ""
+	found := false
+	for {
+		input := &ssm.ListResourceDataSyncInput{}
+		if nextToken != "" {
+			input.NextToken = aws.String(nextToken)
+		}
+		resp, err := conn.ListResourceDataSync(input)
+		if err != nil {
+			return err
+		}
+		for _, v := range resp.ResourceDataSyncItems {
+			if *v.SyncName == d.Get("name").(string) {
+				found = true
+			}
+		}
+		if found || *resp.NextToken == "" {
+			break
+		}
+		nextToken = *resp.NextToken
+	}
+	if !found {
+		log.Printf("[INFO] No Resource Data Sync found for SyncName: %s", d.Get("name").(string))
+	}
+	return nil
+}
+
+func resourceAwsSsmResourceDataSyncDelete(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*AWSClient).ssmconn
+
+	input := &ssm.DeleteResourceDataSyncInput{
+		SyncName: aws.String(d.Get("name").(string)),
+	}
+
+	_, err := conn.DeleteResourceDataSync(input)
+	if err != nil {
+		if aerr, ok := err.(awserr.Error); ok {
+			switch aerr.Code() {
+			case ssm.ErrCodeResourceDataSyncNotFoundException:
+				return nil
+			default:
+				return err
+			}
+		}
+		return err
+	}
+	return nil
+}
+
+func resourceAwsSsmResourceDataSyncDeleteAndCreate(meta interface{}, input *ssm.CreateResourceDataSyncInput) error {
+	conn := meta.(*AWSClient).ssmconn
+
+	delinput := &ssm.DeleteResourceDataSyncInput{
+		SyncName: input.SyncName,
+	}
+
+	_, err := conn.DeleteResourceDataSync(delinput)
+	if err != nil {
+		return err
+	}
+	_, err = conn.CreateResourceDataSync(input)
+	if err != nil {
+		return err
+	}
+	return nil
+}

aws/resource_aws_ssm_resource_data_sync_test.go

@@ -0,0 +1,130 @@
+package aws
+
+import (
+	"fmt"
+	"log"
+	"testing"
+
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/service/ssm"
+	"github.com/hashicorp/terraform/helper/acctest"
+	"github.com/hashicorp/terraform/helper/resource"
+	"github.com/hashicorp/terraform/terraform"
+)
+
+func TestAccAWSSsmResourceDataSync(t *testing.T) {
+	rInt := acctest.RandInt()
+	resource.Test(t, resource.TestCase{
+		PreCheck:     func() { testAccPreCheck(t) },
+		Providers:    testAccProviders,
+		CheckDestroy: testAccCheckAWSSsmResourceDataSyncDestroy,
+		Steps: []resource.TestStep{
+			{
+				Config: testAccSsmResourceDataSyncConfig(rInt),
+				Check: resource.ComposeTestCheckFunc(
+					testAccCheckAWSSsmResourceDataSyncExists("aws_ssm_resource_data_sync.foo"),
+				),
+			},
+		},
+	})
+}
+
+func testAccCheckAWSSsmResourceDataSyncDestroy(s *terraform.State) error {
+	conn := testAccProvider.Meta().(*AWSClient).ssmconn
+
+	for _, rs := range s.RootModule().Resources {
+		if rs.Type != "aws_ssm_resource_data_sync" {
+			continue
+		}
+		nextToken := ""
+		found := false
+		for {
+			input := &ssm.ListResourceDataSyncInput{}
+			if nextToken != "" {
+				input.NextToken = aws.String(nextToken)
+			}
+			resp, err := conn.ListResourceDataSync(input)
+			if err != nil {
+				return err
+			}
+			for _, v := range resp.ResourceDataSyncItems {
+				if *v.SyncName == rs.Primary.Attributes["name"] {
+					found = true
+				}
+			}
+			if resp.NextToken != nil {
+				nextToken = *resp.NextToken
+			}
+			if found || nextToken == "" {
+				break
+			}
+		}
+		if found {
+			return fmt.Errorf("[DELETE ERROR] Resource Data Sync found for SyncName: %s", rs.Primary.Attributes["name"])
+		}
+	}
+	return nil
+}
+
+func testAccCheckAWSSsmResourceDataSyncExists(name string) resource.TestCheckFunc {
+	return func(s *terraform.State) error {
+		log.Println(s.RootModule().Resources)
+		_, ok := s.RootModule().Resources[name]
+		if !ok {
+			return fmt.Errorf("Not found: %s", name)
+		}
+		return nil
+	}
+}
+
+func testAccSsmResourceDataSyncConfig(randInt int) string {
+	return fmt.Sprintf(`
+    resource "aws_s3_bucket" "hoge" {
+      bucket = "tf-test-bucket-%d"
+      region = "us-east-1"
+      force_destroy = true
+    }
+
+    resource "aws_s3_bucket_policy" "hoge" {
+    	bucket = "${aws_s3_bucket.hoge.bucket}"
+    	policy = <<EOF
+{
+        "Version": "2012-10-17",
+        "Statement": [
+            {
+                "Sid": "SSMBucketPermissionsCheck",
+                "Effect": "Allow",
+                "Principal": {
+                    "Service": "ssm.amazonaws.com"
+                },
+                "Action": "s3:GetBucketAcl",
+                "Resource": "arn:aws:s3:::tf-test-bucket-%d"
+            },
+            {
+                "Sid": " SSMBucketDelivery",
+                "Effect": "Allow",
+                "Principal": {
+                    "Service": "ssm.amazonaws.com"
+                },
+                "Action": "s3:PutObject",
+                "Resource": ["arn:aws:s3:::tf-test-bucket-%d/*"],
+                "Condition": {
+                    "StringEquals": {
+                        "s3:x-amz-acl": "bucket-owner-full-control"
+                    }
+                }
+            }
+          ]
+      }
+      EOF
+    }
+
+    resource "aws_ssm_resource_data_sync" "foo" {
+      name = "foo"
+      destination = {
+        bucket = "${aws_s3_bucket.hoge.bucket}"
+        region = "${aws_s3_bucket.hoge.region}"
+      }
+    }
+    `, randInt, randInt, randInt)
+}

website/aws.erb

@@ -1425,6 +1425,10 @@
                             <a href="/docs/providers/aws/r/ssm_parameter.html">aws_ssm_parameter</a>
                         </li>
 
+                        <li<%= sidebar_current("docs-aws-resource-ssm-resource-data-sync") %>>
+                            <a href="/docs/providers/aws/r/ssm_resource_data_sync.html">aws_ssm_resource_data_sync</a>
+                        </li>
+
                     </ul>
                 </li>