terraform/builtin/providers/aws/resource_aws_ses_receipt_ru...

766 lines
18 KiB
Go

package aws
import (
"bytes"
"fmt"
"log"
"sort"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/aws/awserr"
"github.com/aws/aws-sdk-go/service/ses"
"github.com/hashicorp/terraform/helper/hashcode"
"github.com/hashicorp/terraform/helper/schema"
)
func resourceAwsSesReceiptRule() *schema.Resource {
return &schema.Resource{
Create: resourceAwsSesReceiptRuleCreate,
Update: resourceAwsSesReceiptRuleUpdate,
Read: resourceAwsSesReceiptRuleRead,
Delete: resourceAwsSesReceiptRuleDelete,
Schema: map[string]*schema.Schema{
"name": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
},
"rule_set_name": {
Type: schema.TypeString,
Required: true,
ForceNew: true,
},
"after": {
Type: schema.TypeString,
Optional: true,
},
"enabled": {
Type: schema.TypeBool,
Optional: true,
Computed: true,
},
"recipients": {
Type: schema.TypeSet,
Elem: &schema.Schema{Type: schema.TypeString},
Optional: true,
Set: schema.HashString,
},
"scan_enabled": {
Type: schema.TypeBool,
Optional: true,
Computed: true,
},
"tls_policy": {
Type: schema.TypeString,
Optional: true,
Computed: true,
},
"add_header_action": {
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"header_name": {
Type: schema.TypeString,
Required: true,
},
"header_value": {
Type: schema.TypeString,
Required: true,
},
"position": {
Type: schema.TypeInt,
Required: true,
},
},
},
Set: func(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["header_name"].(string)))
buf.WriteString(fmt.Sprintf("%s-", m["header_value"].(string)))
buf.WriteString(fmt.Sprintf("%d-", m["position"].(int)))
return hashcode.String(buf.String())
},
},
"bounce_action": {
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"message": {
Type: schema.TypeString,
Required: true,
},
"sender": {
Type: schema.TypeString,
Required: true,
},
"smtp_reply_code": {
Type: schema.TypeString,
Required: true,
},
"status_code": {
Type: schema.TypeString,
Optional: true,
},
"topic_arn": {
Type: schema.TypeString,
Optional: true,
},
"position": {
Type: schema.TypeInt,
Required: true,
},
},
},
Set: func(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["message"].(string)))
buf.WriteString(fmt.Sprintf("%s-", m["sender"].(string)))
buf.WriteString(fmt.Sprintf("%s-", m["smtp_reply_code"].(string)))
if _, ok := m["status_code"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["status_code"].(string)))
}
if _, ok := m["topic_arn"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["topic_arn"].(string)))
}
buf.WriteString(fmt.Sprintf("%d-", m["position"].(int)))
return hashcode.String(buf.String())
},
},
"lambda_action": {
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"function_arn": {
Type: schema.TypeString,
Required: true,
},
"invocation_type": {
Type: schema.TypeString,
Optional: true,
Computed: true,
},
"topic_arn": {
Type: schema.TypeString,
Optional: true,
},
"position": {
Type: schema.TypeInt,
Required: true,
},
},
},
Set: func(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["function_arn"].(string)))
if _, ok := m["invocation_type"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["invocation_type"].(string)))
}
if _, ok := m["topic_arn"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["topic_arn"].(string)))
}
buf.WriteString(fmt.Sprintf("%d-", m["position"].(int)))
return hashcode.String(buf.String())
},
},
"s3_action": {
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"bucket_name": {
Type: schema.TypeString,
Required: true,
},
"kms_key_arn": {
Type: schema.TypeString,
Optional: true,
ValidateFunc: validateArn,
},
"object_key_prefix": {
Type: schema.TypeString,
Optional: true,
},
"topic_arn": {
Type: schema.TypeString,
Optional: true,
},
"position": {
Type: schema.TypeInt,
Required: true,
},
},
},
Set: func(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["bucket_name"].(string)))
if _, ok := m["kms_key_arn"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["kms_key_arn"].(string)))
}
if _, ok := m["object_key_prefix"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["object_key_prefix"].(string)))
}
if _, ok := m["topic_arn"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["topic_arn"].(string)))
}
buf.WriteString(fmt.Sprintf("%d-", m["position"].(int)))
return hashcode.String(buf.String())
},
},
"sns_action": {
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"topic_arn": {
Type: schema.TypeString,
Required: true,
},
"position": {
Type: schema.TypeInt,
Required: true,
},
},
},
Set: func(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["topic_arn"].(string)))
buf.WriteString(fmt.Sprintf("%d-", m["position"].(int)))
return hashcode.String(buf.String())
},
},
"stop_action": {
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"scope": {
Type: schema.TypeString,
Required: true,
},
"topic_arn": {
Type: schema.TypeString,
Optional: true,
},
"position": {
Type: schema.TypeInt,
Required: true,
},
},
},
Set: func(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["scope"].(string)))
if _, ok := m["topic_arn"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["topic_arn"].(string)))
}
buf.WriteString(fmt.Sprintf("%d-", m["position"].(int)))
return hashcode.String(buf.String())
},
},
"workmail_action": {
Type: schema.TypeSet,
Optional: true,
Elem: &schema.Resource{
Schema: map[string]*schema.Schema{
"organization_arn": {
Type: schema.TypeString,
Required: true,
},
"topic_arn": {
Type: schema.TypeString,
Optional: true,
},
"position": {
Type: schema.TypeInt,
Required: true,
},
},
},
Set: func(v interface{}) int {
var buf bytes.Buffer
m := v.(map[string]interface{})
buf.WriteString(fmt.Sprintf("%s-", m["organization_arn"].(string)))
if _, ok := m["topic_arn"]; ok {
buf.WriteString(fmt.Sprintf("%s-", m["topic_arn"].(string)))
}
buf.WriteString(fmt.Sprintf("%d-", m["position"].(int)))
return hashcode.String(buf.String())
},
},
},
}
}
func resourceAwsSesReceiptRuleCreate(d *schema.ResourceData, meta interface{}) error {
conn := meta.(*AWSClient).sesConn
createOpts := &ses.CreateReceiptRuleInput{
Rule: buildReceiptRule(d, meta),
RuleSetName: aws.String(d.Get("rule_set_name").(string)),
}
if v, ok := d.GetOk("after"); ok {
createOpts.After = aws.String(v.(string))
}
_, err := conn.CreateReceiptRule(createOpts)
if err != nil {
return fmt.Errorf("Error creating SES rule: %s", err)
}
d.SetId(d.Get("name").(string))
return resourceAwsSesReceiptRuleUpdate(d, meta)
}
func resourceAwsSesReceiptRuleUpdate(d *schema.ResourceData, meta interface{}) error {
conn := meta.(*AWSClient).sesConn
updateOpts := &ses.UpdateReceiptRuleInput{
Rule: buildReceiptRule(d, meta),
RuleSetName: aws.String(d.Get("rule_set_name").(string)),
}
_, err := conn.UpdateReceiptRule(updateOpts)
if err != nil {
return fmt.Errorf("Error updating SES rule: %s", err)
}
if d.HasChange("after") {
changePosOpts := &ses.SetReceiptRulePositionInput{
After: aws.String(d.Get("after").(string)),
RuleName: aws.String(d.Get("name").(string)),
RuleSetName: aws.String(d.Get("rule_set_name").(string)),
}
_, err := conn.SetReceiptRulePosition(changePosOpts)
if err != nil {
return fmt.Errorf("Error updating SES rule: %s", err)
}
}
return resourceAwsSesReceiptRuleRead(d, meta)
}
func resourceAwsSesReceiptRuleRead(d *schema.ResourceData, meta interface{}) error {
conn := meta.(*AWSClient).sesConn
describeOpts := &ses.DescribeReceiptRuleInput{
RuleName: aws.String(d.Id()),
RuleSetName: aws.String(d.Get("rule_set_name").(string)),
}
response, err := conn.DescribeReceiptRule(describeOpts)
if err != nil {
_, ok := err.(awserr.Error)
if ok && err.(awserr.Error).Code() == "RuleDoesNotExist" {
log.Printf("[WARN] SES Receipt Rule (%s) not found", d.Id())
d.SetId("")
return nil
} else {
return err
}
}
d.Set("enabled", *response.Rule.Enabled)
d.Set("recipients", flattenStringList(response.Rule.Recipients))
d.Set("scan_enabled", *response.Rule.ScanEnabled)
d.Set("tls_policy", *response.Rule.TlsPolicy)
addHeaderActionList := []map[string]interface{}{}
bounceActionList := []map[string]interface{}{}
lambdaActionList := []map[string]interface{}{}
s3ActionList := []map[string]interface{}{}
snsActionList := []map[string]interface{}{}
stopActionList := []map[string]interface{}{}
workmailActionList := []map[string]interface{}{}
for i, element := range response.Rule.Actions {
if element.AddHeaderAction != nil {
addHeaderAction := map[string]interface{}{
"header_name": *element.AddHeaderAction.HeaderName,
"header_value": *element.AddHeaderAction.HeaderValue,
"position": i + 1,
}
addHeaderActionList = append(addHeaderActionList, addHeaderAction)
}
if element.BounceAction != nil {
bounceAction := map[string]interface{}{
"message": *element.BounceAction.Message,
"sender": *element.BounceAction.Sender,
"smtp_reply_code": *element.BounceAction.SmtpReplyCode,
"position": i + 1,
}
if element.BounceAction.StatusCode != nil {
bounceAction["status_code"] = *element.BounceAction.StatusCode
}
if element.BounceAction.TopicArn != nil {
bounceAction["topic_arn"] = *element.BounceAction.TopicArn
}
bounceActionList = append(bounceActionList, bounceAction)
}
if element.LambdaAction != nil {
lambdaAction := map[string]interface{}{
"function_arn": *element.LambdaAction.FunctionArn,
"position": i + 1,
}
if element.LambdaAction.InvocationType != nil {
lambdaAction["invocation_type"] = *element.LambdaAction.InvocationType
}
if element.LambdaAction.TopicArn != nil {
lambdaAction["topic_arn"] = *element.LambdaAction.TopicArn
}
lambdaActionList = append(lambdaActionList, lambdaAction)
}
if element.S3Action != nil {
s3Action := map[string]interface{}{
"bucket_name": *element.S3Action.BucketName,
"position": i + 1,
}
if element.S3Action.KmsKeyArn != nil {
s3Action["kms_key_arn"] = *element.S3Action.KmsKeyArn
}
if element.S3Action.ObjectKeyPrefix != nil {
s3Action["object_key_prefix"] = *element.S3Action.ObjectKeyPrefix
}
if element.S3Action.TopicArn != nil {
s3Action["topic_arn"] = *element.S3Action.TopicArn
}
s3ActionList = append(s3ActionList, s3Action)
}
if element.SNSAction != nil {
snsAction := map[string]interface{}{
"topic_arn": *element.SNSAction.TopicArn,
"position": i + 1,
}
snsActionList = append(snsActionList, snsAction)
}
if element.StopAction != nil {
stopAction := map[string]interface{}{
"scope": *element.StopAction.Scope,
"position": i + 1,
}
if element.StopAction.TopicArn != nil {
stopAction["topic_arn"] = *element.StopAction.TopicArn
}
stopActionList = append(stopActionList, stopAction)
}
if element.WorkmailAction != nil {
workmailAction := map[string]interface{}{
"organization_arn": *element.WorkmailAction.OrganizationArn,
"position": i + 1,
}
if element.WorkmailAction.TopicArn != nil {
workmailAction["topic_arn"] = *element.WorkmailAction.TopicArn
}
workmailActionList = append(workmailActionList, workmailAction)
}
}
err = d.Set("add_header_action", addHeaderActionList)
if err != nil {
return err
}
err = d.Set("bounce_action", bounceActionList)
if err != nil {
return err
}
err = d.Set("lambda_action", lambdaActionList)
if err != nil {
return err
}
err = d.Set("s3_action", s3ActionList)
if err != nil {
return err
}
err = d.Set("sns_action", snsActionList)
if err != nil {
return err
}
err = d.Set("stop_action", stopActionList)
if err != nil {
return err
}
err = d.Set("workmail_action", workmailActionList)
if err != nil {
return err
}
return nil
}
func resourceAwsSesReceiptRuleDelete(d *schema.ResourceData, meta interface{}) error {
conn := meta.(*AWSClient).sesConn
deleteOpts := &ses.DeleteReceiptRuleInput{
RuleName: aws.String(d.Id()),
RuleSetName: aws.String(d.Get("rule_set_name").(string)),
}
_, err := conn.DeleteReceiptRule(deleteOpts)
if err != nil {
return fmt.Errorf("Error deleting SES receipt rule: %s", err)
}
return nil
}
func buildReceiptRule(d *schema.ResourceData, meta interface{}) *ses.ReceiptRule {
receiptRule := &ses.ReceiptRule{
Name: aws.String(d.Get("name").(string)),
}
if v, ok := d.GetOk("enabled"); ok {
receiptRule.Enabled = aws.Bool(v.(bool))
}
if v, ok := d.GetOk("recipients"); ok {
receiptRule.Recipients = expandStringList(v.(*schema.Set).List())
}
if v, ok := d.GetOk("scan_enabled"); ok {
receiptRule.ScanEnabled = aws.Bool(v.(bool))
}
if v, ok := d.GetOk("tls_policy"); ok {
receiptRule.TlsPolicy = aws.String(v.(string))
}
actions := make(map[int]*ses.ReceiptAction)
if v, ok := d.GetOk("add_header_action"); ok {
for _, element := range v.(*schema.Set).List() {
elem := element.(map[string]interface{})
actions[elem["position"].(int)] = &ses.ReceiptAction{
AddHeaderAction: &ses.AddHeaderAction{
HeaderName: aws.String(elem["header_name"].(string)),
HeaderValue: aws.String(elem["header_value"].(string)),
},
}
}
}
if v, ok := d.GetOk("bounce_action"); ok {
for _, element := range v.(*schema.Set).List() {
elem := element.(map[string]interface{})
bounceAction := &ses.BounceAction{
Message: aws.String(elem["message"].(string)),
Sender: aws.String(elem["sender"].(string)),
SmtpReplyCode: aws.String(elem["smtp_reply_code"].(string)),
}
if elem["status_code"] != "" {
bounceAction.StatusCode = aws.String(elem["status_code"].(string))
}
if elem["topic_arn"] != "" {
bounceAction.TopicArn = aws.String(elem["topic_arn"].(string))
}
actions[elem["position"].(int)] = &ses.ReceiptAction{
BounceAction: bounceAction,
}
}
}
if v, ok := d.GetOk("lambda_action"); ok {
for _, element := range v.(*schema.Set).List() {
elem := element.(map[string]interface{})
lambdaAction := &ses.LambdaAction{
FunctionArn: aws.String(elem["function_arn"].(string)),
}
if elem["invocation_type"] != "" {
lambdaAction.InvocationType = aws.String(elem["invocation_type"].(string))
}
if elem["topic_arn"] != "" {
lambdaAction.TopicArn = aws.String(elem["topic_arn"].(string))
}
actions[elem["position"].(int)] = &ses.ReceiptAction{
LambdaAction: lambdaAction,
}
}
}
if v, ok := d.GetOk("s3_action"); ok {
for _, element := range v.(*schema.Set).List() {
elem := element.(map[string]interface{})
s3Action := &ses.S3Action{
BucketName: aws.String(elem["bucket_name"].(string)),
KmsKeyArn: aws.String(elem["kms_key_arn"].(string)),
ObjectKeyPrefix: aws.String(elem["object_key_prefix"].(string)),
}
if elem["topic_arn"] != "" {
s3Action.TopicArn = aws.String(elem["topic_arn"].(string))
}
actions[elem["position"].(int)] = &ses.ReceiptAction{
S3Action: s3Action,
}
}
}
if v, ok := d.GetOk("sns_action"); ok {
for _, element := range v.(*schema.Set).List() {
elem := element.(map[string]interface{})
snsAction := &ses.SNSAction{
TopicArn: aws.String(elem["topic_arn"].(string)),
}
actions[elem["position"].(int)] = &ses.ReceiptAction{
SNSAction: snsAction,
}
}
}
if v, ok := d.GetOk("stop_action"); ok {
for _, element := range v.(*schema.Set).List() {
elem := element.(map[string]interface{})
stopAction := &ses.StopAction{
Scope: aws.String(elem["scope"].(string)),
}
if elem["topic_arn"] != "" {
stopAction.TopicArn = aws.String(elem["topic_arn"].(string))
}
actions[elem["position"].(int)] = &ses.ReceiptAction{
StopAction: stopAction,
}
}
}
if v, ok := d.GetOk("workmail_action"); ok {
for _, element := range v.(*schema.Set).List() {
elem := element.(map[string]interface{})
workmailAction := &ses.WorkmailAction{
OrganizationArn: aws.String(elem["organization_arn"].(string)),
}
if elem["topic_arn"] != "" {
workmailAction.TopicArn = aws.String(elem["topic_arn"].(string))
}
actions[elem["position"].(int)] = &ses.ReceiptAction{
WorkmailAction: workmailAction,
}
}
}
var keys []int
for k := range actions {
keys = append(keys, k)
}
sort.Ints(keys)
sortedActions := []*ses.ReceiptAction{}
for _, k := range keys {
sortedActions = append(sortedActions, actions[k])
}
receiptRule.Actions = sortedActions
return receiptRule
}