add aws_ssoadmin_permissions_boundary_attachment resource

[atkretsch]

Description

Adds a aws_ssoadmin_permissions_boundary_attachment resource to enable attaching a permissions boundary to a permission set. Example usage:

resource "aws_ssoadmin_permissions_boundary_attachment" "example" {
  instance_arn       = aws_ssoadmin_permission_set.example.instance_arn
  permission_set_arn = aws_ssoadmin_permission_set.example.arn
  permissions_boundary {
    customer_managed_policy_reference {
      name = aws_iam_policy.example.name
      path = "/"
    }
  }
}

This is my first contribution, so if I've failed to follow any important conventions in the code, documentation, or this PR itself, please let me know!

Relations

Closes #25893

Output from Acceptance Testing

$ make testacc TESTS=TestAccSSOAdminPermissionsBoundaryAttachment_ PKG=ssoadmin 
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go1.19 test ./internal/service/ssoadmin/... -v -count 1 -parallel 20 -run='TestAccSSOAdminPermissionsBoundaryAttachment_'  -timeout 180m
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_basic
=== PAUSE TestAccSSOAdminPermissionsBoundaryAttachment_basic
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_forceNew
=== PAUSE TestAccSSOAdminPermissionsBoundaryAttachment_forceNew
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_disappears
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_disappears (39.21s)
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_Disappears_permissionSet
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_Disappears_permissionSet (32.64s)
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined
=== PAUSE TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined
=== CONT  TestAccSSOAdminPermissionsBoundaryAttachment_basic
=== CONT  TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined
=== CONT  TestAccSSOAdminPermissionsBoundaryAttachment_forceNew
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined (16.58s)
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_basic (45.94s)
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_forceNew (77.32s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/ssoadmin	151.866s

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this pull request by adding a 👍 reaction to the original post to help the community and maintainers prioritize this pull request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

For Submitters

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• For new resources and data sources, use skaff to generate scaffolding with comments detailing common expectations.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.

[github-actions]

Welcome @atkretsch 👋

It looks like this is your first Pull Request submission to the Terraform AWS Provider! If you haven’t already done so please make sure you have checked out our CONTRIBUTOR guide and FAQ to make sure your contribution is adhering to best practice and has all the necessary elements in place for a successful approval.

Also take a look at our FAQ which details how we prioritize Pull Requests for inclusion.

Thanks again, and welcome to the community! 😃

[ewbankkit]

LGTM 🚀.

% make testacc TESTARGS='-run=TestAccSSOAdminPermissionsBoundaryAttachment_' PKG=ssoadmin ACCTEST_PARALLELISM=3
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/ssoadmin/... -v -count 1 -parallel 3  -run=TestAccSSOAdminPermissionsBoundaryAttachment_ -timeout 180m
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_basic
=== PAUSE TestAccSSOAdminPermissionsBoundaryAttachment_basic
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_forceNew
=== PAUSE TestAccSSOAdminPermissionsBoundaryAttachment_forceNew
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_disappears
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_disappears (27.53s)
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_Disappears_permissionSet
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_Disappears_permissionSet (19.98s)
=== RUN   TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined
=== PAUSE TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined
=== CONT  TestAccSSOAdminPermissionsBoundaryAttachment_basic
=== CONT  TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined
=== CONT  TestAccSSOAdminPermissionsBoundaryAttachment_forceNew
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_managedPolicyAndCustomerManagedPolicyRefBothDefined (8.85s)
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_basic (29.68s)
--- PASS: TestAccSSOAdminPermissionsBoundaryAttachment_forceNew (52.89s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/ssoadmin	105.719s

[jar-b]

LGTM 🎉

Also confirmed status checks have passed on this branch, although they are not currently displaying on the latest commit.

https://github.com/hashicorp/terraform-provider-aws/actions?query=branch%3Af-aws_ssoadmin_permissions_boundary_attachment+actor%3Ajar-b

[jar-b]

Thanks for your contribution @atkretsch!

[github-actions]

This functionality has been released in v4.47.0 of the Terraform AWS Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.