mods

go.mod

@@ -78,3 +78,5 @@ require (
 	github.com/yudai/golcs v0.0.0-20170316035057-ecda9a501e82 // indirect
 	github.com/yudai/pp v2.0.1+incompatible // indirect
 )
+
+replace github.com/hashicorp/go-cty => github.com/zclconf/go-cty v1.13.2

src/aws.go

@@ -85,6 +85,9 @@ func AwsLookup(name string) interface{} {
 		"aws_ami_copy":                                                     awsAmiCopy,
 		"aws_ami_from_instance":                                            awsAmiFromInstance,
 		"aws_ami_launch_permission":                                        awsAmiLauchPermission,
+		"aws_amplify_app":                                                  awsAmplifyApp,
+		"aws_amplify_branch":                                               awsAmplifyBranch,
+		"aws_amplify_domain_association":                                   awsAmplifyDomainAssociation,
 		"aws_api_gateway_account":                                          awsAPIGatewayAccount,
 		"aws_api_gateway_api_key":                                          awsApigatewayv2Api,
 		"aws_api_gateway_authorizer":                                       awsApigatewayv2Api,
@@ -127,7 +130,21 @@ func AwsLookup(name string) interface{} {
 		"aws_appautoscaling_target":                                        awsAppautoscalingTarget,
 		"aws_appconfig_application":                                        awsAppconfigApplication,
 		"aws_appconfig_configuration_profile":                              awsAppconfigConfigurationProfile,
+		"aws_appconfig_environment":                                        awsAppconfigEnvironment,
+		"aws_appconfig_extension":                                          awsAppconfigExtension,
+		"aws_appconfig_extension_association":                              awsAppconfigExtensionAssociation,
+		"aws_appconfig_hosted_configuration_version":                       awsAppconfigHostedConfigurationVersion,
+		"aws_appflow_connector_profile":                                    awsAppflowConnectorProfile,
+		"aws_appflow_flow":                                                 awsAppflowFlow,
+		"aws_appintegrations_data_integration":                             awsAppintegrationsDataIntegration,
+		"aws_appintegrations_event_integration":                            awsAppintegrationsEventIntegration,
 		"aws_applicationinsights_application":                              awsApplicationinsightsApplication,
+		"aws_apprunner_auto_scaling_configuration_version":                 awsApprunnerAutoScalingConfigurationVersion,
+		"aws_apprunner_default_auto_scaling_configuration_version":         awsApprunnerDefaultAutoScalingConfigurationVersion,
+		"aws_apprunner_observability_configuration":                        awsApprunnerObservabilityConfiguration,
+		"aws_apprunner_service":                                            awsApprunnerService,
+		"aws_apprunner_vpc_connector":                                      awsApprunnerVpcConnector,
+		"aws_apprunner_vpc_ingress_connection":                             awsApprunnerVpcIngressConnection,
 		"aws_athena_data_catalog":                                          awsAthenaDataCatalog,
 		"aws_athena_database":                                              awsAthenaDatabase,
 		"aws_athena_named_query":                                           awsAthenaNamedQuery,
@@ -169,12 +186,28 @@ func AwsLookup(name string) interface{} {
 		"aws_bedrockagent_agent":                                           awsBedrockagentAgent,
 		"aws_bedrockagent_agent_action_group":                              awsBedrockagentActionGroup,
 		"aws_bedrockagent_agent_alias":                                     awsBedrockagentAgentAlias,
+		"aws_bedrockagent_data_source":                                     awsBedrockagentDatasource,
+		"aws_bedrockagent_knowledge_base":                                  awsBedrockagentKnowledgeBase,
 		"aws_budgets_budget":                                               awsBudgetsBudget,
 		"aws_budgets_budget_action":                                        awsBudgetsBudgetAction,
 		"aws_ce_anomaly_monitor":                                           awsCeAnomalyMonitor,
 		"aws_ce_anomaly_subscription":                                      awsCeAnomalySubscription,
 		"aws_ce_cost_allocation_tag":                                       awsCeCostAllocationTag,
 		"aws_ce_cost_category":                                             awsCeCostCategory,
+		"aws_chime_voice_connector":                                        awsChimeVoiceConnector,
+		"aws_chime_voice_connector_group":                                  awsChimeVoiceConnectorGroup,
+		"aws_chime_voice_connector_logging":                                awsChimeVoiceConnectorLogging,
+		"aws_chime_voice_connector_origination":                            awsChimeVoiceConnectorOrigination,
+		"aws_chime_voice_connector_streaming":                              awsChimeVoiceConnectorStreaming,
+		"aws_chime_voice_connector_termination":                            awsChimeVoiceConnectorTermination,
+		"aws_chime_voice_connector_termination_credentials":                awsChimeVoiceConnectorTerminationCredentials,
+		"aws_chimesdkmediapipelines_media_insights_pipeline_configuration": awsChimesdkmediapipelinesMediaInsightsPipelineConfiguration,
+		"aws_chimesdkvoice_global_settings":                                awsChimesdkvoiceGlobalSettings,
+		"aws_chimesdkvoice_sip_media_application":                          awsChimesdkvoiceSipMediaApplication,
+		"aws_chimesdkvoice_sip_rule":                                       awsChimesdkvoiceSipRule,
+		"aws_chimesdkvoice_voice_profile_domain":                           awsChimesdkvoiceVoiceProfileDomain,
+		"aws_cleanrooms_collaboration":                                     awsCleanroomsCollaboration,
+		"aws_cleanrooms_configured_table":                                  awsCleanroomsConfiguredTable,
 		"aws_cloud9_environment_ec2":                                       awsCloud9EnvironmentEc2,
 		"aws_cloudformation_stack":                                         awsCloudformationStack,
 		"aws_cloudformation_stack_set":                                     awsCloudFormationStackSet,
@@ -797,6 +830,7 @@ func AwsLookup(name string) interface{} {
 		"aws_vpclattice_target_group":                                      awsVpclatticeTargetGroup,
 		"aws_vpclattice_target_group_attachment":                           awsVpclatticeTargetGroupAssociation,
 		"aws_vpn_connection":                                               awsVpnConnection,
+		"aws_vpn_connection_route":                                         awsVpnConnectionRoute,
 		"aws_vpn_gateway":                                                  awsVpnGateway,
 		"aws_vpn_gateway_attachment":                                       awsVpnGatewayAttachment,
 		"aws_vpn_gateway_route_propagation":                                awsVpnGatewayRoutePropagation,
@@ -830,36 +864,19 @@ func AwsLookup(name string) interface{} {
 		"aws_wafv2_web_acl":                                                awsWafv2WebACL,
 		"aws_wafv2_web_acl_association":                                    awsWafv2WebACLAssociation,
 		"aws_wafv2_web_acl_logging_configuration":                          awsWafv2WebACLLoggingConfiguration,
+		"aws_workspaces_connection_alias":                                  awsWorkspacesConnectionAlias,
 		"aws_workspaces_directory":                                         awsWorkspacesDirectory,
+		"aws_workspaces_ip_group":                                          awsWorkspacesIpGroup,
 		"aws_workspaces_workspace":                                         awsWorkspacesWorkspace,
 		"aws_xray_encryption_config":                                       awsXrayEncryptionConfig,
 		"aws_xray_group":                                                   awsXrayGroup,
 		"aws_xray_sampling_rule":                                           awsXraySamplingRule,
 		"backend":                                                          s3backend,
-		"aws_amplify_app":                                                  awsAmplifyApp,
-		"aws_amplify_branch":                                               awsAmplifyBranch,
-		"aws_amplify_domain_association":                                   awsAmplifyDomainAssociation,
-		"aws_workspaces_connection_alias":                                  awsWorkspacesConnectionAlias,
-		"aws_workspaces_ip_group":                                          awsWorkspacesIpGroup,
-		"aws_chime_voice_connector":                                        awsChimeVoiceConnector,
-		"aws_chime_voice_connector_group":                                  awsChimeVoiceConnectorGroup,
-		"aws_chime_voice_connector_logging":                                awsChimeVoiceConnectorLogging,
-		"aws_chime_voice_connector_origination":                            awsChimeVoiceConnectorOrigination,
-		"aws_chime_voice_connector_streaming":                              awsChimeVoiceConnectorStreaming,
-		"aws_chime_voice_connector_termination":                            awsChimeVoiceConnectorTermination,
-		"aws_chime_voice_connector_termination_credentials":                awsChimeVoiceConnectorTerminationCredentials,
-		"aws_chimesdkmediapipelines_media_insights_pipeline_configuration": awsChimesdkmediapipelinesMediaInsightsPipelineConfiguration,
-		"aws_chimesdkvoice_global_settings":                                awsChimesdkvoiceGlobalSettings,
-		"aws_chimesdkvoice_sip_media_application":                          awsChimesdkvoiceSipMediaApplication,
-		"aws_chimesdkvoice_sip_rule":                                       awsChimesdkvoiceSipRule,
-		"aws_chimesdkvoice_voice_profile_domain":                           awsChimesdkvoiceVoiceProfileDomain,
-		"aws_appconfig_environment":                                        awsAppconfigEnvironment,
-		"aws_appconfig_extension":                                          awsAppconfigExtension,
-		"aws_appconfig_extension_association":                              awsAppconfigExtensionAssociation,
-		"aws_bedrockagent_data_source":                                     awsBedrockagentDatasource,
-		"aws_bedrockagent_knowledge_base":                                  awsBedrockagentKnowledgeBase,
-		"aws_cleanrooms_collaboration":                                     awsCleanroomsCollaboration,
-		"aws_cleanrooms_configured_table":                                  awsCleanroomsConfiguredTable,
+		"aws_appstream_image_builder":                                      awsAppstreamImageBuilder,
+		"aws_appsync_domain_name":                                          awsAppsyncDomainName,
+		"aws_appsync_domain_name_api_association":                          awsAppsyncDomainNameApiAssociation,
+		"aws_appsync_function":                                             awsAppsyncFunction,
+		"aws_appsync_resolver":                                             awsAppsyncResolver,
 	}
 
 	return TFLookup[name]

src/aws_datasource.go

@@ -580,6 +580,8 @@ func AwsDataLookup(find string) interface{} { //nolint:maintidx
 		"aws_transfer_connector":                                    dataAwsTransferConnector,
 		"aws_service_principal":                                     placeholder,
 		"aws_ecr_repository_creation_template":                      dataAwsEcrRepositoryCreationTemplate,
+		"aws_rds_cluster_parameter_group":                           dataAwsRdsClusterParameterGroup,
+		"aws_secretsmanager_secret_versions":                        dataAwsSecretsmanagerSecretVersions,
 	}
 
 	return TFLookup[find]

src/coverage/aws.md

@@ -1,53 +1,37 @@
 # todo aws
 
-Resource percentage coverage   56.16
+Resource percentage coverage   57.84
 Datasource percentage coverage 100.00
 
 ./resource.ps1 aws_amplify_backend_environment
 ./resource.ps1 aws_amplify_webhook
 ./resource.ps1 aws_appconfig_deployment
 ./resource.ps1 aws_appconfig_deployment_strategy
-./resource.ps1 aws_appconfig_hosted_configuration_version
 ./resource.ps1 aws_appfabric_app_authorization
 ./resource.ps1 aws_appfabric_app_authorization_connection
 ./resource.ps1 aws_appfabric_app_bundle
 ./resource.ps1 aws_appfabric_ingestion
 ./resource.ps1 aws_appfabric_ingestion_destination
-./resource.ps1 aws_appflow_connector_profile
-./resource.ps1 aws_appflow_flow
-./resource.ps1 aws_appintegrations_data_integration
-./resource.ps1 aws_appintegrations_event_integration
 ./resource.ps1 aws_appmesh_gateway_route
 ./resource.ps1 aws_appmesh_mesh
 ./resource.ps1 aws_appmesh_route
 ./resource.ps1 aws_appmesh_virtual_gateway
 ./resource.ps1 aws_appmesh_virtual_node
 ./resource.ps1 aws_appmesh_virtual_router
 ./resource.ps1 aws_appmesh_virtual_service
-./resource.ps1 aws_apprunner_auto_scaling_configuration_version
 ./resource.ps1 aws_apprunner_connection
 ./resource.ps1 aws_apprunner_custom_domain_association
-./resource.ps1 aws_apprunner_default_auto_scaling_configuration_version
 ./resource.ps1 aws_apprunner_deployment
-./resource.ps1 aws_apprunner_observability_configuration
-./resource.ps1 aws_apprunner_service
-./resource.ps1 aws_apprunner_vpc_connector
-./resource.ps1 aws_apprunner_vpc_ingress_connection
 ./resource.ps1 aws_appstream_directory_config
 ./resource.ps1 aws_appstream_fleet
 ./resource.ps1 aws_appstream_fleet_stack_association
-./resource.ps1 aws_appstream_image_builder
 ./resource.ps1 aws_appstream_stack
 ./resource.ps1 aws_appstream_user
 ./resource.ps1 aws_appstream_user_stack_association
 ./resource.ps1 aws_appsync_api_cache
 ./resource.ps1 aws_appsync_api_key
 ./resource.ps1 aws_appsync_datasource
-./resource.ps1 aws_appsync_domain_name
-./resource.ps1 aws_appsync_domain_name_api_association
-./resource.ps1 aws_appsync_function
 ./resource.ps1 aws_appsync_graphql_api
-./resource.ps1 aws_appsync_resolver
 ./resource.ps1 aws_appsync_type
 ./resource.ps1 aws_athena_prepared_statement
 ./resource.ps1 aws_bcmdataexports_export
@@ -446,6 +430,7 @@ Datasource percentage coverage 100.00
 ./resource.ps1 aws_rds_certificate
 ./resource.ps1 aws_rds_custom_db_engine_version
 ./resource.ps1 aws_rds_export_task
+./resource.ps1 aws_rds_integration
 ./resource.ps1 aws_rds_reserved_instance
 ./resource.ps1 aws_redshift_cluster_snapshot
 ./resource.ps1 aws_redshift_data_share_authorization
@@ -604,7 +589,6 @@ Datasource percentage coverage 100.00
 ./resource.ps1 aws_vpc_ipam_organization_admin_account
 ./resource.ps1 aws_vpc_ipv6_cidr_block_association
 ./resource.ps1 aws_vpc_network_performance_metric_subscription
-./resource.ps1 aws_vpn_connection_route
 ./resource.ps1 aws_wafregional_web_acl_association
 ./resource.ps1 aws_worklink_fleet
 ./resource.ps1 aws_worklink_website_certificate_authority_association

src/files.go

@@ -2223,3 +2223,54 @@ var awsCleanroomsCollaboration []byte
 
 //go:embed mapping/aws/resource/cleanrooms/aws_cleanrooms_configured_table.json
 var awsCleanroomsConfiguredTable []byte
+
+//go:embed mapping/aws/resource/ec2/aws_vpn_connection_route.json
+var awsVpnConnectionRoute []byte
+
+//go:embed mapping/aws/resource/appconfig/aws_appconfig_hosted_configuration_version.json
+var awsAppconfigHostedConfigurationVersion []byte
+
+//go:embed mapping/aws/resource/appflow/aws_appflow_connector_profile.json
+var awsAppflowConnectorProfile []byte
+
+//go:embed mapping/aws/resource/appflow/aws_appflow_flow.json
+var awsAppflowFlow []byte
+
+//go:embed mapping/aws/resource/app-integrations/aws_appintegrations_data_integration.json
+var awsAppintegrationsDataIntegration []byte
+
+//go:embed mapping/aws/resource/app-integrations/aws_appintegrations_event_integration.json
+var awsAppintegrationsEventIntegration []byte
+
+//go:embed mapping/aws/resource/apprunner/aws_apprunner_auto_scaling_configuration_version.json
+var awsApprunnerAutoScalingConfigurationVersion []byte
+
+//go:embed mapping/aws/resource/apprunner/aws_apprunner_default_auto_scaling_configuration_version.json
+var awsApprunnerDefaultAutoScalingConfigurationVersion []byte
+
+//go:embed mapping/aws/resource/apprunner/aws_apprunner_observability_configuration.json
+var awsApprunnerObservabilityConfiguration []byte
+
+//go:embed mapping/aws/resource/apprunner/aws_apprunner_service.json
+var awsApprunnerService []byte
+
+//go:embed mapping/aws/resource/apprunner/aws_apprunner_vpc_connector.json
+var awsApprunnerVpcConnector []byte
+
+//go:embed mapping/aws/resource/apprunner/aws_apprunner_vpc_ingress_connection.json
+var awsApprunnerVpcIngressConnection []byte
+
+//go:embed mapping/aws/resource/appstream/aws_appstream_image_builder.json
+var awsAppstreamImageBuilder []byte
+
+//go:embed mapping/aws/resource/appsync/aws_appsync_domain_name.json
+var awsAppsyncDomainName []byte
+
+//go:embed mapping/aws/resource/appsync/aws_appsync_domain_name_api_association.json
+var awsAppsyncDomainNameApiAssociation []byte
+
+//go:embed mapping/aws/resource/appsync/aws_appsync_function.json
+var awsAppsyncFunction []byte
+
+//go:embed mapping/aws/resource/appsync/aws_appsync_resolver.json
+var awsAppsyncResolver []byte

src/files_datasource.go

@@ -1473,3 +1473,9 @@ var dataAwsTransferConnector []byte
 
 //go:embed mapping/aws/data/ecr/aws_ecr_repository_creation_template.json
 var dataAwsEcrRepositoryCreationTemplate []byte
+
+//go:embed mapping/aws/data/rds/aws_rds_cluster_parameter_group.json
+var dataAwsRdsClusterParameterGroup []byte
+
+//go:embed mapping/aws/data/secretsmanager/aws_secretsmanager_secret_versions.json
+var dataAwsSecretsmanagerSecretVersions []byte

src/mapping/aws/data/rds/aws_rds_cluster_parameter_group.json

@@ -0,0 +1,13 @@
+[
+  {
+    "apply": [],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [],
+    "modify": [],
+    "plan": [
+      "rds:DescribeDBClusterParameterGroups"
+    ]
+  }
+]

src/mapping/aws/data/secretsmanager/aws_secretsmanager_secret_versions.json

@@ -0,0 +1,13 @@
+[
+  {
+    "apply": [],
+    "attributes": {
+      "tags": []
+    },
+    "destroy": [],
+    "modify": [],
+    "plan": [
+      "secretsmanager:ListSecretVersionIds"
+    ]
+  }
+]

src/mapping/aws/resource/access-analyzer/aws_accessanalyzer_analyzer.json

@@ -5,6 +5,8 @@
       "access-analyzer:DeleteAnalyzer",
       "access-analyzer:GetAnalyzer",
       "access-analyzer:ListAnalyzers",
+      "access-analyzer:DeleteArchiveRule",
+      "access-analyzer:UpdateArchiveRule",
       "iam:CreateServiceLinkedRole"
     ],
     "attributes": {
@@ -16,7 +18,10 @@
     "destroy": [
       "access-analyzer:DeleteAnalyzer"
     ],
-    "modify": [],
+    "modify": [
+      "access-analyzer:DeleteArchiveRule",
+      "access-analyzer:UpdateArchiveRule"
+    ],
     "plan": []
   }
 ]

src/mapping/aws/resource/app-integrations/aws_appintegrations_data_integration.json

@@ -0,0 +1,44 @@
+[
+  {
+    "apply": [
+      "app-integrations:CreateDataIntegration",
+      "appflow:DescribeConnectorProfiles",
+      "appflow:CreateFlow",
+      "appflow:DeleteFlow",
+      "appflow:DescribeConnectorEntity",
+      "appflow:UseConnectorProfile",
+      "kms:CreateGrant",
+      "kms:DescribeKey",
+      "kms:ListAliases",
+      "kms:ListGrants",
+      "kms:ListKeys",
+      "s3:GetBucketNotification",
+      "s3:PutBucketNotification",
+      "s3:GetEncryptionConfiguration",
+      "app-integrations:GetDataIntegration",
+      "app-integrations:UpdateDataIntegration",
+      "app-integrations:DeleteDataIntegration",
+      "appflow:DeleteFlow"
+    ],
+    "attributes": {
+      "tags": [
+        "appflow:TagResource",
+        "appflow:UntagResource",
+        "app-integrations:TagResource",
+        "app-integrations:UntagResource"
+      ]
+    },
+    "destroy": [
+      "app-integrations:DeleteDataIntegration",
+      "appflow:DeleteFlow"
+    ],
+    "modify": [
+      "app-integrations:GetDataIntegration",
+      "app-integrations:UpdateDataIntegration"
+    ],
+    "plan": [
+      "app-integrations:GetDataIntegration",
+      "app-integrations:ListTagsForResource"
+    ]
+  }
+]

src/mapping/aws/resource/app-integrations/aws_appintegrations_event_integration.json

@@ -0,0 +1,28 @@
+[
+  {
+    "apply": [
+      "app-integrations:CreateEventIntegration",
+      "app-integrations:DeleteEventIntegration",
+      "app-integrations:GetEventIntegration",
+      "app-integrations:ListTagsForResource",
+      "app-integrations:UpdateEventIntegration"
+    ],
+    "attributes": {
+      "tags": [
+        "app-integrations:TagResource",
+        "app-integrations:UntagResource"
+      ]
+    },
+    "destroy": [
+      "app-integrations:DeleteEventIntegration"
+    ],
+    "modify": [
+      "app-integrations:GetEventIntegration",
+      "app-integrations:UpdateEventIntegration"
+    ],
+    "plan": [
+      "app-integrations:GetEventIntegration",
+      "app-integrations:ListTagsForResource"
+    ]
+  }
+]