github.com/joshgarnett/terraform@v0.5.4-0.20160219181435-92dc20bb3594/builtin/providers/aws/provider.go (about)

     1  package aws
     2  
     3  import (
     4  	"bytes"
     5  	"fmt"
     6  
     7  	"github.com/hashicorp/terraform/helper/hashcode"
     8  	"github.com/hashicorp/terraform/helper/mutexkv"
     9  	"github.com/hashicorp/terraform/helper/schema"
    10  	"github.com/hashicorp/terraform/terraform"
    11  )
    12  
    13  // Provider returns a terraform.ResourceProvider.
    14  func Provider() terraform.ResourceProvider {
    15  	// TODO: Move the validation to this, requires conditional schemas
    16  	// TODO: Move the configuration to this, requires validation
    17  
    18  	// The actual provider
    19  	return &schema.Provider{
    20  		Schema: map[string]*schema.Schema{
    21  			"access_key": &schema.Schema{
    22  				Type:        schema.TypeString,
    23  				Optional:    true,
    24  				Default:     "",
    25  				Description: descriptions["access_key"],
    26  			},
    27  
    28  			"secret_key": &schema.Schema{
    29  				Type:        schema.TypeString,
    30  				Optional:    true,
    31  				Default:     "",
    32  				Description: descriptions["secret_key"],
    33  			},
    34  
    35  			"profile": &schema.Schema{
    36  				Type:        schema.TypeString,
    37  				Optional:    true,
    38  				Default:     "",
    39  				Description: descriptions["profile"],
    40  			},
    41  
    42  			"shared_credentials_file": &schema.Schema{
    43  				Type:        schema.TypeString,
    44  				Optional:    true,
    45  				Default:     "",
    46  				Description: descriptions["shared_credentials_file"],
    47  			},
    48  
    49  			"token": &schema.Schema{
    50  				Type:        schema.TypeString,
    51  				Optional:    true,
    52  				Default:     "",
    53  				Description: descriptions["token"],
    54  			},
    55  
    56  			"region": &schema.Schema{
    57  				Type:     schema.TypeString,
    58  				Required: true,
    59  				DefaultFunc: schema.MultiEnvDefaultFunc([]string{
    60  					"AWS_REGION",
    61  					"AWS_DEFAULT_REGION",
    62  				}, nil),
    63  				Description:  descriptions["region"],
    64  				InputDefault: "us-east-1",
    65  			},
    66  
    67  			"max_retries": &schema.Schema{
    68  				Type:        schema.TypeInt,
    69  				Optional:    true,
    70  				Default:     11,
    71  				Description: descriptions["max_retries"],
    72  			},
    73  
    74  			"allowed_account_ids": &schema.Schema{
    75  				Type:          schema.TypeSet,
    76  				Elem:          &schema.Schema{Type: schema.TypeString},
    77  				Optional:      true,
    78  				ConflictsWith: []string{"forbidden_account_ids"},
    79  				Set:           schema.HashString,
    80  			},
    81  
    82  			"forbidden_account_ids": &schema.Schema{
    83  				Type:          schema.TypeSet,
    84  				Elem:          &schema.Schema{Type: schema.TypeString},
    85  				Optional:      true,
    86  				ConflictsWith: []string{"allowed_account_ids"},
    87  				Set:           schema.HashString,
    88  			},
    89  
    90  			"dynamodb_endpoint": &schema.Schema{
    91  				Type:        schema.TypeString,
    92  				Optional:    true,
    93  				Default:     "",
    94  				Description: descriptions["dynamodb_endpoint"],
    95  			},
    96  
    97  			"kinesis_endpoint": &schema.Schema{
    98  				Type:        schema.TypeString,
    99  				Optional:    true,
   100  				Default:     "",
   101  				Description: descriptions["kinesis_endpoint"],
   102  			},
   103  			"endpoints": endpointsSchema(),
   104  
   105  			"insecure": &schema.Schema{
   106  				Type:        schema.TypeBool,
   107  				Optional:    true,
   108  				Default:     false,
   109  				Description: descriptions["insecure"],
   110  			},
   111  		},
   112  
   113  		ResourcesMap: map[string]*schema.Resource{
   114  			"aws_ami":                              resourceAwsAmi(),
   115  			"aws_ami_copy":                         resourceAwsAmiCopy(),
   116  			"aws_ami_from_instance":                resourceAwsAmiFromInstance(),
   117  			"aws_app_cookie_stickiness_policy":     resourceAwsAppCookieStickinessPolicy(),
   118  			"aws_autoscaling_group":                resourceAwsAutoscalingGroup(),
   119  			"aws_autoscaling_notification":         resourceAwsAutoscalingNotification(),
   120  			"aws_autoscaling_policy":               resourceAwsAutoscalingPolicy(),
   121  			"aws_autoscaling_schedule":             resourceAwsAutoscalingSchedule(),
   122  			"aws_cloudformation_stack":             resourceAwsCloudFormationStack(),
   123  			"aws_cloudtrail":                       resourceAwsCloudTrail(),
   124  			"aws_cloudwatch_event_rule":            resourceAwsCloudWatchEventRule(),
   125  			"aws_cloudwatch_event_target":          resourceAwsCloudWatchEventTarget(),
   126  			"aws_cloudwatch_log_group":             resourceAwsCloudWatchLogGroup(),
   127  			"aws_autoscaling_lifecycle_hook":       resourceAwsAutoscalingLifecycleHook(),
   128  			"aws_cloudwatch_metric_alarm":          resourceAwsCloudWatchMetricAlarm(),
   129  			"aws_codedeploy_app":                   resourceAwsCodeDeployApp(),
   130  			"aws_codedeploy_deployment_group":      resourceAwsCodeDeployDeploymentGroup(),
   131  			"aws_codecommit_repository":            resourceAwsCodeCommitRepository(),
   132  			"aws_customer_gateway":                 resourceAwsCustomerGateway(),
   133  			"aws_db_instance":                      resourceAwsDbInstance(),
   134  			"aws_db_parameter_group":               resourceAwsDbParameterGroup(),
   135  			"aws_db_security_group":                resourceAwsDbSecurityGroup(),
   136  			"aws_db_subnet_group":                  resourceAwsDbSubnetGroup(),
   137  			"aws_directory_service_directory":      resourceAwsDirectoryServiceDirectory(),
   138  			"aws_dynamodb_table":                   resourceAwsDynamoDbTable(),
   139  			"aws_ebs_volume":                       resourceAwsEbsVolume(),
   140  			"aws_ecr_repository":                   resourceAwsEcrRepository(),
   141  			"aws_ecr_repository_policy":            resourceAwsEcrRepositoryPolicy(),
   142  			"aws_ecs_cluster":                      resourceAwsEcsCluster(),
   143  			"aws_ecs_service":                      resourceAwsEcsService(),
   144  			"aws_ecs_task_definition":              resourceAwsEcsTaskDefinition(),
   145  			"aws_efs_file_system":                  resourceAwsEfsFileSystem(),
   146  			"aws_efs_mount_target":                 resourceAwsEfsMountTarget(),
   147  			"aws_eip":                              resourceAwsEip(),
   148  			"aws_elasticache_cluster":              resourceAwsElasticacheCluster(),
   149  			"aws_elasticache_parameter_group":      resourceAwsElasticacheParameterGroup(),
   150  			"aws_elasticache_security_group":       resourceAwsElasticacheSecurityGroup(),
   151  			"aws_elasticache_subnet_group":         resourceAwsElasticacheSubnetGroup(),
   152  			"aws_elasticsearch_domain":             resourceAwsElasticSearchDomain(),
   153  			"aws_elb":                              resourceAwsElb(),
   154  			"aws_flow_log":                         resourceAwsFlowLog(),
   155  			"aws_glacier_vault":                    resourceAwsGlacierVault(),
   156  			"aws_iam_access_key":                   resourceAwsIamAccessKey(),
   157  			"aws_iam_group_policy":                 resourceAwsIamGroupPolicy(),
   158  			"aws_iam_group":                        resourceAwsIamGroup(),
   159  			"aws_iam_group_membership":             resourceAwsIamGroupMembership(),
   160  			"aws_iam_instance_profile":             resourceAwsIamInstanceProfile(),
   161  			"aws_iam_policy":                       resourceAwsIamPolicy(),
   162  			"aws_iam_policy_attachment":            resourceAwsIamPolicyAttachment(),
   163  			"aws_iam_role_policy":                  resourceAwsIamRolePolicy(),
   164  			"aws_iam_role":                         resourceAwsIamRole(),
   165  			"aws_iam_saml_provider":                resourceAwsIamSamlProvider(),
   166  			"aws_iam_server_certificate":           resourceAwsIAMServerCertificate(),
   167  			"aws_iam_user_policy":                  resourceAwsIamUserPolicy(),
   168  			"aws_iam_user":                         resourceAwsIamUser(),
   169  			"aws_instance":                         resourceAwsInstance(),
   170  			"aws_internet_gateway":                 resourceAwsInternetGateway(),
   171  			"aws_key_pair":                         resourceAwsKeyPair(),
   172  			"aws_kinesis_firehose_delivery_stream": resourceAwsKinesisFirehoseDeliveryStream(),
   173  			"aws_kinesis_stream":                   resourceAwsKinesisStream(),
   174  			"aws_lambda_function":                  resourceAwsLambdaFunction(),
   175  			"aws_lambda_event_source_mapping":      resourceAwsLambdaEventSourceMapping(),
   176  			"aws_lambda_alias":                     resourceAwsLambdaAlias(),
   177  			"aws_lambda_permission":                resourceAwsLambdaPermission(),
   178  			"aws_launch_configuration":             resourceAwsLaunchConfiguration(),
   179  			"aws_lb_cookie_stickiness_policy":      resourceAwsLBCookieStickinessPolicy(),
   180  			"aws_main_route_table_association":     resourceAwsMainRouteTableAssociation(),
   181  			"aws_nat_gateway":                      resourceAwsNatGateway(),
   182  			"aws_network_acl":                      resourceAwsNetworkAcl(),
   183  			"aws_network_acl_rule":                 resourceAwsNetworkAclRule(),
   184  			"aws_network_interface":                resourceAwsNetworkInterface(),
   185  			"aws_opsworks_stack":                   resourceAwsOpsworksStack(),
   186  			"aws_opsworks_java_app_layer":          resourceAwsOpsworksJavaAppLayer(),
   187  			"aws_opsworks_haproxy_layer":           resourceAwsOpsworksHaproxyLayer(),
   188  			"aws_opsworks_static_web_layer":        resourceAwsOpsworksStaticWebLayer(),
   189  			"aws_opsworks_php_app_layer":           resourceAwsOpsworksPhpAppLayer(),
   190  			"aws_opsworks_rails_app_layer":         resourceAwsOpsworksRailsAppLayer(),
   191  			"aws_opsworks_nodejs_app_layer":        resourceAwsOpsworksNodejsAppLayer(),
   192  			"aws_opsworks_memcached_layer":         resourceAwsOpsworksMemcachedLayer(),
   193  			"aws_opsworks_mysql_layer":             resourceAwsOpsworksMysqlLayer(),
   194  			"aws_opsworks_ganglia_layer":           resourceAwsOpsworksGangliaLayer(),
   195  			"aws_opsworks_custom_layer":            resourceAwsOpsworksCustomLayer(),
   196  			"aws_placement_group":                  resourceAwsPlacementGroup(),
   197  			"aws_proxy_protocol_policy":            resourceAwsProxyProtocolPolicy(),
   198  			"aws_rds_cluster":                      resourceAwsRDSCluster(),
   199  			"aws_rds_cluster_instance":             resourceAwsRDSClusterInstance(),
   200  			"aws_redshift_cluster":                 resourceAwsRedshiftCluster(),
   201  			"aws_redshift_security_group":          resourceAwsRedshiftSecurityGroup(),
   202  			"aws_redshift_parameter_group":         resourceAwsRedshiftParameterGroup(),
   203  			"aws_redshift_subnet_group":            resourceAwsRedshiftSubnetGroup(),
   204  			"aws_route53_delegation_set":           resourceAwsRoute53DelegationSet(),
   205  			"aws_route53_record":                   resourceAwsRoute53Record(),
   206  			"aws_route53_zone_association":         resourceAwsRoute53ZoneAssociation(),
   207  			"aws_route53_zone":                     resourceAwsRoute53Zone(),
   208  			"aws_route53_health_check":             resourceAwsRoute53HealthCheck(),
   209  			"aws_route":                            resourceAwsRoute(),
   210  			"aws_route_table":                      resourceAwsRouteTable(),
   211  			"aws_route_table_association":          resourceAwsRouteTableAssociation(),
   212  			"aws_s3_bucket":                        resourceAwsS3Bucket(),
   213  			"aws_s3_bucket_object":                 resourceAwsS3BucketObject(),
   214  			"aws_security_group":                   resourceAwsSecurityGroup(),
   215  			"aws_security_group_rule":              resourceAwsSecurityGroupRule(),
   216  			"aws_spot_instance_request":            resourceAwsSpotInstanceRequest(),
   217  			"aws_sqs_queue":                        resourceAwsSqsQueue(),
   218  			"aws_sns_topic":                        resourceAwsSnsTopic(),
   219  			"aws_sns_topic_subscription":           resourceAwsSnsTopicSubscription(),
   220  			"aws_subnet":                           resourceAwsSubnet(),
   221  			"aws_volume_attachment":                resourceAwsVolumeAttachment(),
   222  			"aws_vpc_dhcp_options_association":     resourceAwsVpcDhcpOptionsAssociation(),
   223  			"aws_vpc_dhcp_options":                 resourceAwsVpcDhcpOptions(),
   224  			"aws_vpc_peering_connection":           resourceAwsVpcPeeringConnection(),
   225  			"aws_vpc":                              resourceAwsVpc(),
   226  			"aws_vpc_endpoint":                     resourceAwsVpcEndpoint(),
   227  			"aws_vpn_connection":                   resourceAwsVpnConnection(),
   228  			"aws_vpn_connection_route":             resourceAwsVpnConnectionRoute(),
   229  			"aws_vpn_gateway":                      resourceAwsVpnGateway(),
   230  		},
   231  
   232  		ConfigureFunc: providerConfigure,
   233  	}
   234  }
   235  
   236  var descriptions map[string]string
   237  
   238  func init() {
   239  	descriptions = map[string]string{
   240  		"region": "The region where AWS operations will take place. Examples\n" +
   241  			"are us-east-1, us-west-2, etc.",
   242  
   243  		"access_key": "The access key for API operations. You can retrieve this\n" +
   244  			"from the 'Security & Credentials' section of the AWS console.",
   245  
   246  		"secret_key": "The secret key for API operations. You can retrieve this\n" +
   247  			"from the 'Security & Credentials' section of the AWS console.",
   248  
   249  		"profile": "The profile for API operations. If not set, the default profile\n" +
   250  			"created with `aws configure` will be used.",
   251  
   252  		"shared_credentials_file": "The path to the shared credentials file. If not set\n" +
   253  			"this defaults to ~/.aws/credentials.",
   254  
   255  		"token": "session token. A session token is only required if you are\n" +
   256  			"using temporary security credentials.",
   257  
   258  		"max_retries": "The maximum number of times an AWS API request is\n" +
   259  			"being executed. If the API request still fails, an error is\n" +
   260  			"thrown.",
   261  
   262  		"dynamodb_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n" +
   263  			"It's typically used to connect to dynamodb-local.",
   264  
   265  		"kinesis_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n" +
   266  			"It's typically used to connect to kinesalite.",
   267  
   268  		"iam_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n",
   269  
   270  		"ec2_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n",
   271  
   272  		"elb_endpoint": "Use this to override the default endpoint URL constructed from the `region`.\n",
   273  
   274  		"insecure": "Explicitly allow the provider to perform \"insecure\" SSL requests. If omitted," +
   275  			"default value is `false`",
   276  	}
   277  }
   278  
   279  func providerConfigure(d *schema.ResourceData) (interface{}, error) {
   280  	config := Config{
   281  		AccessKey:        d.Get("access_key").(string),
   282  		SecretKey:        d.Get("secret_key").(string),
   283  		Profile:          d.Get("profile").(string),
   284  		CredsFilename:    d.Get("shared_credentials_file").(string),
   285  		Token:            d.Get("token").(string),
   286  		Region:           d.Get("region").(string),
   287  		MaxRetries:       d.Get("max_retries").(int),
   288  		DynamoDBEndpoint: d.Get("dynamodb_endpoint").(string),
   289  		KinesisEndpoint:  d.Get("kinesis_endpoint").(string),
   290  		Insecure:         d.Get("insecure").(bool),
   291  	}
   292  
   293  	endpointsSet := d.Get("endpoints").(*schema.Set)
   294  
   295  	for _, endpointsSetI := range endpointsSet.List() {
   296  		endpoints := endpointsSetI.(map[string]interface{})
   297  		config.IamEndpoint = endpoints["iam"].(string)
   298  		config.Ec2Endpoint = endpoints["ec2"].(string)
   299  		config.ElbEndpoint = endpoints["elb"].(string)
   300  	}
   301  
   302  	if v, ok := d.GetOk("allowed_account_ids"); ok {
   303  		config.AllowedAccountIds = v.(*schema.Set).List()
   304  	}
   305  
   306  	if v, ok := d.GetOk("forbidden_account_ids"); ok {
   307  		config.ForbiddenAccountIds = v.(*schema.Set).List()
   308  	}
   309  
   310  	return config.Client()
   311  }
   312  
   313  // This is a global MutexKV for use within this plugin.
   314  var awsMutexKV = mutexkv.NewMutexKV()
   315  
   316  func endpointsSchema() *schema.Schema {
   317  	return &schema.Schema{
   318  		Type:     schema.TypeSet,
   319  		Optional: true,
   320  		Elem: &schema.Resource{
   321  			Schema: map[string]*schema.Schema{
   322  				"iam": &schema.Schema{
   323  					Type:        schema.TypeString,
   324  					Optional:    true,
   325  					Default:     "",
   326  					Description: descriptions["iam_endpoint"],
   327  				},
   328  
   329  				"ec2": &schema.Schema{
   330  					Type:        schema.TypeString,
   331  					Optional:    true,
   332  					Default:     "",
   333  					Description: descriptions["ec2_endpoint"],
   334  				},
   335  
   336  				"elb": &schema.Schema{
   337  					Type:        schema.TypeString,
   338  					Optional:    true,
   339  					Default:     "",
   340  					Description: descriptions["elb_endpoint"],
   341  				},
   342  			},
   343  		},
   344  		Set: endpointsToHash,
   345  	}
   346  }
   347  
   348  func endpointsToHash(v interface{}) int {
   349  	var buf bytes.Buffer
   350  	m := v.(map[string]interface{})
   351  	buf.WriteString(fmt.Sprintf("%s-", m["iam"].(string)))
   352  	buf.WriteString(fmt.Sprintf("%s-", m["ec2"].(string)))
   353  	buf.WriteString(fmt.Sprintf("%s-", m["elb"].(string)))
   354  
   355  	return hashcode.String(buf.String())
   356  }