Terraform-provider-aws: Feature Request: Macie2 Support

[kamirendawkins]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

As of May 13th a new Version of AWS Macie is available that is incompatible with existing Macie resources.

New or Affected Resource(s)

• aws_macie2_classification_job
• aws_macie2_custom_data_identifier
• aws_macie2_findings_filter

Potential Terraform Configuration

# New Resource - not implemented
resource "aws_macie2_classification_job" "example" {
  name = ""
  description = ""
  job-type = ""
  custom_data_identifier_ids = []
  s3_job_definition = ""
  sampling_percentage = ""
  schedule_frequency = ""
  tags = ""
}

# New Resource - not implemented
resource "aws_macie2_custom_data_identifier" "example" {
  # ...
}

# New Resource - not implemented
resource "aws_macie2_findings_filter" "example" {
  # ...
}

References

• https://aws.amazon.com/about-aws/whats-new/2020/05/announcing-major-enhancements-to-amazon-macie-an-80-percent-plus-price-reduction-and-global-region-expansion/
• https://awscli.amazonaws.com/v2/documentation/api/latest/reference/macie2/index.html#cli-aws-macie2

[ewbankkit]

From the _Macie Classic_ FAQ:

Q: Can I still activate Macie Classic in new accounts?

No, you cannot activate Macie Classic in new accounts. However, you can still use Macie Classic with already activated accounts. You can reach out to AWS support if you have a unique situation and would like to activate Macie Classic in new accounts.

A first step is to note this in the current Macie resource documentation (and maybe rename the category to "Macie Classic" as that's how AWS are now branding Macie v1).

[cparmar]

The pricing for the service has been significantly reduced and the ability to administrate it using the terraform AWS provider would be great.

[anGie44]

Support for the macie2 service client has been merged and will be released with 3.9.0 of the Terraform AWS provider, likely out tomorrow.

[toddmichael]

Support for the macie2 service client has been merged and will be released with 3.9.0 of the Terraform AWS provider, likely out tomorrow.

@anGie44 appears this didn't make it into 3.9.0 or 3.10.0. Trying to sort out the reason, but I'm apparently not bright enough to do that today. Any ideas? Thank you!

[anGie44]

Hi @toddmichael and others following this issue! The support included in v3.9.0 of the Terraform AWS Provider is for the macie2 service client (merged in #15256 per New Service Implementation) but this does not include any new resources/data sources that may relate to this issue. At this time support for new resource/data-sources, such as that in #15408 (Custom Data Identifier), doesn’t have enough community support for the internal team to prioritize; nevertheless, we will continue to monitor the community interest in the features, and once enough support is demonstrated, the team will queue the PR(s) up for review.