resource/aws_acmpca_certificate: Add api_passthrough argument

[StupidScience]

Description

This PR add support for APIPassthrough argument for aws_acmpca_certificate resource that can be provided for certain templates.

Relations

Closes #25520

References

https://docs.aws.amazon.com/acm-pca/latest/userguide/PcaIssueCert.html
https://docs.aws.amazon.com/acm-pca/latest/userguide/JavaApi-CustomExtensions.html#Sub_CA_NameConstraints

Output from Acceptance Testing

make testacc TESTS=TestAccACMPCACertificate PKG=acmpca
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/acmpca/... -v -count 1 -parallel 20 -run='TestAccACMPCACertificate'  -timeout 180m
=== RUN   TestAccACMPCACertificateAuthorityCertificate_rootCA
=== PAUSE TestAccACMPCACertificateAuthorityCertificate_rootCA
=== RUN   TestAccACMPCACertificateAuthorityCertificate_updateRootCA
=== PAUSE TestAccACMPCACertificateAuthorityCertificate_updateRootCA
=== RUN   TestAccACMPCACertificateAuthorityCertificate_subordinateCA
=== PAUSE TestAccACMPCACertificateAuthorityCertificate_subordinateCA
=== RUN   TestAccACMPCACertificateAuthorityDataSource_basic
=== PAUSE TestAccACMPCACertificateAuthorityDataSource_basic
=== RUN   TestAccACMPCACertificateAuthorityDataSource_s3ObjectACL
=== PAUSE TestAccACMPCACertificateAuthorityDataSource_s3ObjectACL
=== RUN   TestAccACMPCACertificateAuthority_basic
=== PAUSE TestAccACMPCACertificateAuthority_basic
=== RUN   TestAccACMPCACertificateAuthority_disappears
=== PAUSE TestAccACMPCACertificateAuthority_disappears
=== RUN   TestAccACMPCACertificateAuthority_enabledDeprecated
=== PAUSE TestAccACMPCACertificateAuthority_enabledDeprecated
=== RUN   TestAccACMPCACertificateAuthority_usageMode
=== PAUSE TestAccACMPCACertificateAuthority_usageMode
=== RUN   TestAccACMPCACertificateAuthority_deleteFromActiveState
=== PAUSE TestAccACMPCACertificateAuthority_deleteFromActiveState
=== RUN   TestAccACMPCACertificateAuthority_RevocationConfiguration_empty
=== PAUSE TestAccACMPCACertificateAuthority_RevocationConfiguration_empty
=== RUN   TestAccACMPCACertificateAuthority_RevocationCrl_customCNAME
=== PAUSE TestAccACMPCACertificateAuthority_RevocationCrl_customCNAME
=== RUN   TestAccACMPCACertificateAuthority_RevocationCrl_enabled
=== PAUSE TestAccACMPCACertificateAuthority_RevocationCrl_enabled
=== RUN   TestAccACMPCACertificateAuthority_RevocationCrl_expirationInDays
=== PAUSE TestAccACMPCACertificateAuthority_RevocationCrl_expirationInDays
=== RUN   TestAccACMPCACertificateAuthority_RevocationCrl_s3ObjectACL
=== PAUSE TestAccACMPCACertificateAuthority_RevocationCrl_s3ObjectACL
=== RUN   TestAccACMPCACertificateAuthority_RevocationOcsp_enabled
=== PAUSE TestAccACMPCACertificateAuthority_RevocationOcsp_enabled
=== RUN   TestAccACMPCACertificateAuthority_RevocationOcsp_customCNAME
=== PAUSE TestAccACMPCACertificateAuthority_RevocationOcsp_customCNAME
=== RUN   TestAccACMPCACertificateAuthority_tags
=== PAUSE TestAccACMPCACertificateAuthority_tags
=== RUN   TestAccACMPCACertificateDataSource_basic
=== PAUSE TestAccACMPCACertificateDataSource_basic
=== RUN   TestAccACMPCACertificate_rootCertificate
=== PAUSE TestAccACMPCACertificate_rootCertificate
=== RUN   TestAccACMPCACertificate_rootCertificateWithApiPassthrough
=== PAUSE TestAccACMPCACertificate_rootCertificateWithApiPassthrough
=== RUN   TestAccACMPCACertificate_subordinateCertificate
=== PAUSE TestAccACMPCACertificate_subordinateCertificate
=== RUN   TestAccACMPCACertificate_endEntityCertificate
=== PAUSE TestAccACMPCACertificate_endEntityCertificate
=== RUN   TestAccACMPCACertificate_Validity_endDate
=== PAUSE TestAccACMPCACertificate_Validity_endDate
=== RUN   TestAccACMPCACertificate_Validity_absolute
=== PAUSE TestAccACMPCACertificate_Validity_absolute
=== CONT  TestAccACMPCACertificateAuthorityCertificate_rootCA
=== CONT  TestAccACMPCACertificateAuthority_RevocationCrl_expirationInDays
=== CONT  TestAccACMPCACertificate_Validity_absolute
=== CONT  TestAccACMPCACertificateAuthority_tags
=== CONT  TestAccACMPCACertificate_subordinateCertificate
=== CONT  TestAccACMPCACertificateAuthority_enabledDeprecated
=== CONT  TestAccACMPCACertificate_rootCertificateWithApiPassthrough
=== CONT  TestAccACMPCACertificateAuthority_usageMode
=== CONT  TestAccACMPCACertificateAuthority_deleteFromActiveState
=== CONT  TestAccACMPCACertificate_endEntityCertificate
=== CONT  TestAccACMPCACertificate_rootCertificate
=== CONT  TestAccACMPCACertificate_Validity_endDate
=== CONT  TestAccACMPCACertificateAuthority_RevocationOcsp_customCNAME
=== CONT  TestAccACMPCACertificateDataSource_basic
=== CONT  TestAccACMPCACertificateAuthority_RevocationConfiguration_empty
=== CONT  TestAccACMPCACertificateAuthority_RevocationCrl_enabled
=== CONT  TestAccACMPCACertificateAuthority_RevocationCrl_customCNAME
=== CONT  TestAccACMPCACertificateAuthority_disappears
=== CONT  TestAccACMPCACertificateAuthority_RevocationOcsp_enabled
=== CONT  TestAccACMPCACertificateAuthorityDataSource_s3ObjectACL
--- PASS: TestAccACMPCACertificateAuthority_disappears (34.37s)
=== CONT  TestAccACMPCACertificateAuthority_basic
--- PASS: TestAccACMPCACertificateAuthorityDataSource_s3ObjectACL (47.20s)
=== CONT  TestAccACMPCACertificateAuthorityCertificate_subordinateCA
--- PASS: TestAccACMPCACertificateAuthority_deleteFromActiveState (47.92s)
=== CONT  TestAccACMPCACertificateAuthorityCertificate_updateRootCA
--- PASS: TestAccACMPCACertificateAuthority_usageMode (49.05s)
=== CONT  TestAccACMPCACertificateAuthorityDataSource_basic
--- PASS: TestAccACMPCACertificateAuthority_RevocationConfiguration_empty (49.26s)
=== CONT  TestAccACMPCACertificateAuthority_RevocationCrl_s3ObjectACL
--- PASS: TestAccACMPCACertificateDataSource_basic (49.43s)
--- PASS: TestAccACMPCACertificate_rootCertificate (54.54s)
--- PASS: TestAccACMPCACertificate_rootCertificateWithApiPassthrough (54.81s)
--- PASS: TestAccACMPCACertificateAuthorityCertificate_rootCA (55.45s)
--- PASS: TestAccACMPCACertificate_subordinateCertificate (56.26s)
--- PASS: TestAccACMPCACertificate_Validity_endDate (61.43s)
--- PASS: TestAccACMPCACertificate_Validity_absolute (62.99s)
--- PASS: TestAccACMPCACertificate_endEntityCertificate (63.04s)
--- PASS: TestAccACMPCACertificateAuthority_basic (37.83s)
--- PASS: TestAccACMPCACertificateAuthorityDataSource_basic (38.28s)
--- PASS: TestAccACMPCACertificateAuthorityCertificate_subordinateCA (43.01s)
--- PASS: TestAccACMPCACertificateAuthority_enabledDeprecated (94.57s)
--- PASS: TestAccACMPCACertificateAuthorityCertificate_updateRootCA (60.55s)
--- PASS: TestAccACMPCACertificateAuthority_RevocationOcsp_enabled (111.02s)
--- PASS: TestAccACMPCACertificateAuthority_RevocationCrl_expirationInDays (111.73s)
--- PASS: TestAccACMPCACertificateAuthority_tags (112.73s)
--- PASS: TestAccACMPCACertificateAuthority_RevocationCrl_s3ObjectACL (72.56s)
--- PASS: TestAccACMPCACertificateAuthority_RevocationOcsp_customCNAME (139.25s)
--- PASS: TestAccACMPCACertificateAuthority_RevocationCrl_enabled (139.46s)
--- PASS: TestAccACMPCACertificateAuthority_RevocationCrl_customCNAME (166.56s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/acmpca     173.485s

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this pull request by adding a 👍 reaction to the original post to help the community and maintainers prioritize this pull request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

For Submitters

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• For new resources and data sources, use skaff to generate scaffolding with comments detailing common expectations.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.

[github-actions]

Welcome @StupidScience 👋

It looks like this is your first Pull Request submission to the Terraform AWS Provider! If you haven’t already done so please make sure you have checked out our CONTRIBUTOR guide and FAQ to make sure your contribution is adhering to best practice and has all the necessary elements in place for a successful approval.

Also take a look at our FAQ which details how we prioritize Pull Requests for inclusion.

Thanks again, and welcome to the community! 😃

[riuvshyn]

cc @ewbankkit 🙏🏽

[ewbankkit]

LGTM 🚀.

% make testacc TESTARGS='-run=TestAccACMPCACertificate_' PKG=acmpca ACCTEST_PARALLELISM=3
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/acmpca/... -v -count 1 -parallel 3  -run=TestAccACMPCACertificate_ -timeout 180m
=== RUN   TestAccACMPCACertificate_rootCertificate
=== PAUSE TestAccACMPCACertificate_rootCertificate
=== RUN   TestAccACMPCACertificate_rootCertificateWithAPIPassthrough
=== PAUSE TestAccACMPCACertificate_rootCertificateWithAPIPassthrough
=== RUN   TestAccACMPCACertificate_subordinateCertificate
=== PAUSE TestAccACMPCACertificate_subordinateCertificate
=== RUN   TestAccACMPCACertificate_endEntityCertificate
=== PAUSE TestAccACMPCACertificate_endEntityCertificate
=== RUN   TestAccACMPCACertificate_Validity_endDate
=== PAUSE TestAccACMPCACertificate_Validity_endDate
=== RUN   TestAccACMPCACertificate_Validity_absolute
=== PAUSE TestAccACMPCACertificate_Validity_absolute
=== CONT  TestAccACMPCACertificate_rootCertificate
=== CONT  TestAccACMPCACertificate_endEntityCertificate
=== CONT  TestAccACMPCACertificate_Validity_absolute
--- PASS: TestAccACMPCACertificate_rootCertificate (38.32s)
=== CONT  TestAccACMPCACertificate_subordinateCertificate
--- PASS: TestAccACMPCACertificate_Validity_absolute (55.68s)
=== CONT  TestAccACMPCACertificate_Validity_endDate
--- PASS: TestAccACMPCACertificate_endEntityCertificate (59.38s)
=== CONT  TestAccACMPCACertificate_rootCertificateWithAPIPassthrough
--- PASS: TestAccACMPCACertificate_subordinateCertificate (36.08s)
--- PASS: TestAccACMPCACertificate_rootCertificateWithAPIPassthrough (31.28s)
--- PASS: TestAccACMPCACertificate_Validity_endDate (43.16s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/acmpca	131.397s

[ewbankkit]

@StupidScience Thanks for the contribution 🎉 👏.

[github-actions]

This functionality has been released in v4.63.0 of the Terraform AWS Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.