add aws_api_gateway_authorizer datasource

.changelog/28148.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+aws_api_gateway_authorizer
+```

internal/service/apigateway/authorizers_data_source.go

@@ -0,0 +1,84 @@
+package apigateway
+
+import (
+	"fmt"
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/service/apigateway"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+	"github.com/hashicorp/terraform-provider-aws/internal/conns"
+)
+
+// @SDKDataSource("aws_api_gateway_authorizers")
+func DataSourceAuthorizers() *schema.Resource {
+	return &schema.Resource{
+		Read: dataSourceAuthorizersRead,
+		Schema: map[string]*schema.Schema{
+			"rest_api_id": {
+				Type:     schema.TypeString,
+				Required: true,
+			},
+			"items": {
+				Type:     schema.TypeList,
+				Computed: true,
+				Elem: &schema.Resource{
+					Schema: map[string]*schema.Schema{
+						"name": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+						"type": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+						"auth_type": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+						"authorizer_uri": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+						"identity_source": {
+							Type:     schema.TypeString,
+							Computed: true,
+						},
+						"authorizer_result_ttl_in_seconds": {
+							Type:     schema.TypeInt,
+							Computed: true,
+						},
+					},
+				},
+			},
+		},
+	}
+}
+
+func dataSourceAuthorizersRead(d *schema.ResourceData, meta interface{}) error {
+	conn := meta.(*conns.AWSClient).APIGatewayConn
+
+	restApiId := d.Get("rest_api_id").(string)
+
+	authorizers, err := conn.GetAuthorizers(&apigateway.GetAuthorizersInput{
+		RestApiId: aws.String(restApiId),
+	})
+	if err != nil {
+		return err
+	}
+	items := make([]map[string]interface{}, 0, len(authorizers.Items))
+	for _, item := range authorizers.Items {
+		s := make(map[string]interface{})
+		s["name"] = item.Name
+		s["name"] = item.Name
+		s["type"] = item.Type
+		s["auth_type"] = item.AuthType
+		s["authorizer_uri"] = item.AuthorizerUri
+		s["identity_source"] = item.IdentitySource
+		s["authorizer_result_ttl_in_seconds"] = item.AuthorizerResultTtlInSeconds
+		items = append(items, s)
+	}
+	if err := d.Set("items", items); err != nil {
+		return fmt.Errorf("unable to set authorizer items: %s", err)
+	}
+	d.SetId(fmt.Sprintf("%s:authorizer", restApiId))
+	return nil
+}

internal/service/apigateway/authorizers_data_source_test.go

@@ -0,0 +1,43 @@
+package apigateway_test
+
+import (
+	tfapigateway "github.com/hashicorp/terraform-provider-aws/internal/service/apigateway"
+	"strconv"
+	"testing"
+
+	"github.com/aws/aws-sdk-go/service/apigateway"
+	sdkacctest "github.com/hashicorp/terraform-plugin-sdk/v2/helper/acctest"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+	"github.com/hashicorp/terraform-provider-aws/internal/acctest"
+)
+
+func TestAccAPIGatewayAuthorizersDataSource(t *testing.T) {
+	rName := sdkacctest.RandomWithPrefix(acctest.ResourcePrefix)
+	resourceName := "data.aws_api_gateway_authorizers.test"
+
+	resource.ParallelTest(t, resource.TestCase{
+		PreCheck:                 func() { acctest.PreCheck(t) },
+		ErrorCheck:               acctest.ErrorCheck(t, apigateway.EndpointsID),
+		ProtoV5ProviderFactories: acctest.ProtoV5ProviderFactories,
+		Steps: []resource.TestStep{
+			{
+				Config: testAccAuthorizerDataSource(rName),
+				Check: resource.ComposeTestCheckFunc(
+					resource.TestCheckResourceAttr(resourceName, "items.0.identity_source", "method.request.header.Authorization"),
+					resource.TestCheckResourceAttr(resourceName, "items.0.name", rName),
+					resource.TestCheckResourceAttr(resourceName, "items.0.type", "TOKEN"),
+					resource.TestCheckResourceAttr(resourceName, "items.0.authorizer_result_ttl_in_seconds", strconv.Itoa(tfapigateway.DefaultAuthorizerTTL)),
+				),
+			},
+		},
+	})
+}
+
+func testAccAuthorizerDataSource(rName string) string {
+	return testAccAuthorizerConfig_lambda(rName) + `
+data "aws_api_gateway_authorizers" "test" {
+  rest_api_id = aws_api_gateway_rest_api.test.id
+  depends_on  = [aws_api_gateway_authorizer.test]
+}
+`
+}

website/docs/d/api_gateway_authorizers.html.markdown

@@ -0,0 +1,42 @@
+---
+subcategory: "API Gateway"
+layout: "aws"
+page_title: "AWS: aws_api_gateway_authorizers"
+description: |-
+  Terraform data source for managing an AWS API Gateway authorizer.
+---
+
+# Data Source: aws_api_gateway_authorizers
+
+Terraform data source for managing an AWS API Gateway authorizer.
+
+## Example Usage
+
+### Basic Usage
+
+```terraform
+data "aws_api_gateway_authorizers" "example" {
+  rest_api_id = aws_api_gateway_rest_api.test.id
+}
+```
+
+## Argument Reference
+
+The following arguments are required:
+
+* `rest_api_id` - (Required) REST API id that owns the resource. If no REST API is found, an error will be returned.
+
+## Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+- `items` (List of Object).
+
+### Nested Attributes for `items`
+
+* `name` - Name of the REST API Authorizer to look up. If no REST API Authorizer is found with this name, an error will be returned.
+* `authorizer_uri` - Authorizer's Uniform Resource Identifier (URI). This must be a well-formed Lambda function URI in the form of `arn:aws:apigateway:{region}:lambda:path/{service_api}`,
+  e.g., `arn:aws:apigateway:us-west-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-west-2:012345678912:function:my-function/invocations`
+* `identity_source` - Source of the identity in an incoming request. Defaults to `method.request.header.Authorization`. For `REQUEST` type, this may be a comma-separated list of values, including headers, query string parameters and stage variables - e.g., `"method.request.header.SomeHeaderName,method.request.querystring.SomeQueryStringName,stageVariables.SomeStageVariableName"`
+* `type` - Type of the authorizer. Possible values are `TOKEN` for a Lambda function using a single authorization token submitted in a custom header, `REQUEST` for a Lambda function using incoming request parameters, or `COGNITO_USER_POOLS` for using an Amazon Cognito user pool. Defaults to `TOKEN`.
+* `authorizer_result_ttl_in_seconds` - TTL of cached authorizer results in seconds. Defaults to `300`.