aws datasource

JamesWoolfenden · Jun 18, 2024 · 05f69e9 · 05f69e9
1 parent 9e22ef8
commit 05f69e9
Show file tree

Hide file tree

Showing 7 changed files with 38 additions and 32 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -43,6 +43,6 @@ jobs:
         run: go test ./... -coverprofile=./cover.out
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@a079530fc142d3d288ddf76321ca0b7fe5b18df5 # v4.4.1
+        uses: codecov/codecov-action@79066c46f8dcdf8d7355f820dbac958c5b4cb9d3 # v4.5.0
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
diff --git a/src/aws_datasource.go b/src/aws_datasource.go
@@ -571,6 +571,7 @@ func AwsDataLookup(find string) interface{} {
 		"aws_identitystore_groups":                                  dataAwsIdentitystoreGroups,
 		"aws_datazone_environment_blueprint":                        dataAwsDatazoneEnvironmentBlueprint,
 		"aws_chatbot_slack_workspace":                               dataAwsChatbotSlackWorkspace,
+		"aws_ec2_capacity_block_offering":                           dataAwsEc2CapacityBlockOffering,
 	}
 
 	return TFLookup[find]

diff --git a/src/coverage/aws.md b/src/coverage/aws.md
@@ -1,7 +1,7 @@
 # todo aws
 
-Resource percentage coverage   54.31
-Datasource percentage coverage 100.00
+Resource percentage coverage   54.11
+Datasource percentage coverage 99.81
 
 ./resource.ps1 aws_amplify_app
 ./resource.ps1 aws_amplify_backend_environment
@@ -14,6 +14,8 @@ Datasource percentage coverage 100.00
 ./resource.ps1 aws_appconfig_extension
 ./resource.ps1 aws_appconfig_extension_association
 ./resource.ps1 aws_appconfig_hosted_configuration_version
+./resource.ps1 aws_appfabric_app_authorization
+./resource.ps1 aws_appfabric_app_bundle
 ./resource.ps1 aws_appflow_connector_profile
 ./resource.ps1 aws_appflow_flow
 ./resource.ps1 aws_appintegrations_data_integration
@@ -156,6 +158,7 @@ Datasource percentage coverage 100.00
 ./resource.ps1 aws_dynamodb_table_replica
 ./resource.ps1 aws_ebs_fast_snapshot_restore
 ./resource.ps1 aws_ebs_snapshot_import
+./resource.ps1 aws_ec2_capacity_block_reservation
 ./resource.ps1 aws_ec2_image_block_public_access
 ./resource.ps1 aws_ec2_instance
 ./resource.ps1 aws_ec2_instance_connect_endpoint
@@ -223,6 +226,7 @@ Datasource percentage coverage 100.00
 ./resource.ps1 aws_fis_experiment_template
 ./resource.ps1 aws_fms_admin_account
 ./resource.ps1 aws_fms_policy
+./resource.ps1 aws_fms_resource_set
 ./resource.ps1 aws_gamelift_alias
 ./resource.ps1 aws_gamelift_build
 ./resource.ps1 aws_gamelift_fleet
@@ -249,6 +253,7 @@ Datasource percentage coverage 100.00
 ./resource.ps1 aws_guardduty_filter
 ./resource.ps1 aws_guardduty_invite_accepter
 ./resource.ps1 aws_guardduty_ipset
+./resource.ps1 aws_guardduty_malware_protection_plan
 ./resource.ps1 aws_guardduty_member
 ./resource.ps1 aws_guardduty_organization_admin_account
 ./resource.ps1 aws_guardduty_organization_configuration
@@ -629,3 +634,4 @@ Datasource percentage coverage 100.00
 ./resource.ps1 aws_worklink_website_certificate_authority_association
 ./resource.ps1 aws_workspaces_connection_alias
 ./resource.ps1 aws_workspaces_ip_group
+./resource.ps1 aws_ec2_capacity_block_offering -type data
diff --git a/src/files_datasource.go b/src/files_datasource.go
@@ -1446,3 +1446,6 @@ var dataAwsDatazoneEnvironmentBlueprint []byte
 
 //go:embed mapping/aws/data/chatbot/aws_chatbot_slack_workspace.json
 var dataAwsChatbotSlackWorkspace []byte
+
+//go:embed mapping/aws/data/ec2/aws_ec2_capacity_block_offering.json
+var dataAwsEc2CapacityBlockOffering []byte
diff --git a/src/mapping/aws/data/ec2/aws_ec2_capacity_block_offering.json b/src/mapping/aws/data/ec2/aws_ec2_capacity_block_offering.json
@@ -0,0 +1,13 @@
+[
+  {
+    "apply": [],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [],
+    "modify": [],
+    "plan": [
+      "ec2:DescribeCapacityBlockOfferings"
+    ]
+  }
+]
diff --git a/terraform/aws/data.aws_ec2_capacity_block_offering.tf b/terraform/aws/data.aws_ec2_capacity_block_offering.tf
@@ -0,0 +1,11 @@
+data "aws_ec2_capacity_block_offering" "pike" {
+  capacity_duration_hours = 24
+  end_date_range          = "2024-06-30T15:04:05Z"
+  instance_count          = 1
+  instance_type           = "p4d.24xlarge"
+  start_date_range        = "2024-06-28T15:04:05Z"
+}
+
+output "aws_ec2_capacity_block_offering" {
+  value = data.aws_ec2_capacity_block_offering.pike
+}
diff --git a/terraform/aws/role/aws_iam_policy.basic.tf b/terraform/aws/role/aws_iam_policy.basic.tf
@@ -7,35 +7,7 @@ resource "aws_iam_policy" "basic" {
         "Sid" : "0",
         "Effect" : "Allow",
         "Action" : [
-          "dynamodb:DeleteItem",
-          "dynamodb:DescribeTable",
-          "dynamodb:GetItem",
-          "dynamodb:PutItem",
-          "ec2:CreateSnapshot",
-          "ec2:CreateVolume",
-          "ec2:DeleteSnapshot",
-          "ec2:DeleteVolume",
-          "ec2:DescribeSnapshots",
-          "ec2:DescribeVolumes",
-          "ec2:ModifyVolume",
-          "s3:DeleteObject",
-          "s3:GetObject",
-          "s3:ListBucket",
-          "s3:PutObject",
-
-          //aws_sns_platform_application
-          "sns:CreatePlatformApplication",
-          "sns:DeletePlatformApplication",
-          "sns:SetPlatformApplicationAttributes",
-          "sns:GetPlatformApplicationAttributes",
-
-          //aws_simpledb_domain
-          "sdb:CreateDomain",
-          "sdb:DomainMetadata",
-          "sdb:DeleteDomain",
-
-          //aws_snapshot_create_volume_permission
-          "ec2:ModifySnapshotAttribute"
+          "ec2:DescribeCapacityBlockOfferings"
         ],
         "Resource" : "*",
       }