data-source/aws_iam_user: Add permissions_boundary attribute

aws/data_source_aws_iam_user.go

@@ -1,11 +1,11 @@
 package aws
 
 import (
+	"fmt"
 	"log"
 
 	"github.com/aws/aws-sdk-go/aws"
 	"github.com/aws/aws-sdk-go/service/iam"
-	"github.com/hashicorp/errwrap"
 	"github.com/hashicorp/terraform/helper/schema"
 )
 
@@ -22,6 +22,10 @@ func dataSourceAwsIAMUser() *schema.Resource {
 				Type:     schema.TypeString,
 				Computed: true,
 			},
+			"permissions_boundary": {
+				Type:     schema.TypeString,
+				Computed: true,
+			},
 			"user_id": {
 				Type:     schema.TypeString,
 				Computed: true,
@@ -44,13 +48,17 @@ func dataSourceAwsIAMUserRead(d *schema.ResourceData, meta interface{}) error {
 	log.Printf("[DEBUG] Reading IAM User: %s", req)
 	resp, err := iamconn.GetUser(req)
 	if err != nil {
-		return errwrap.Wrapf("error getting user: {{err}}", err)
+		return fmt.Errorf("error getting user: %s", err)
 	}
 
 	user := resp.User
-	d.SetId(*user.UserId)
+	d.SetId(aws.StringValue(user.UserId))
 	d.Set("arn", user.Arn)
 	d.Set("path", user.Path)
+	d.Set("permissions_boundary", "")
+	if user.PermissionsBoundary != nil {
+		d.Set("permissions_boundary", user.PermissionsBoundary.PermissionsBoundaryArn)
+	}
 	d.Set("user_id", user.UserId)
 
 	return nil

aws/data_source_aws_iam_user_test.go

@@ -21,8 +21,9 @@ func TestAccAWSDataSourceIAMUser_basic(t *testing.T) {
 				Check: resource.ComposeTestCheckFunc(
 					resource.TestCheckResourceAttrSet("data.aws_iam_user.test", "user_id"),
 					resource.TestCheckResourceAttr("data.aws_iam_user.test", "path", "/"),
+					resource.TestCheckResourceAttr("data.aws_iam_user.test", "permissions_boundary", ""),
 					resource.TestCheckResourceAttr("data.aws_iam_user.test", "user_name", userName),
-					resource.TestMatchResourceAttr("data.aws_iam_user.test", "arn", regexp.MustCompile("^arn:aws:iam::[0-9]{12}:user/"+userName)),
+					resource.TestMatchResourceAttr("data.aws_iam_user.test", "arn", regexp.MustCompile("^arn:[^:]+:iam::[0-9]{12}:user/"+userName)),
 				),
 			},
 		},

website/docs/d/iam_user.html.markdown

@@ -27,7 +27,6 @@ data "aws_iam_user" "example" {
 ## Attributes Reference
 
 * `arn` - The Amazon Resource Name (ARN) assigned by AWS for this user.
-
 * `path` - Path in which this user was created.
-
+* `permissions_boundary` - The ARN of the policy that is used to set the permissions boundary for the user.
 * `user_id` - The unique ID assigned by AWS for this user.