Merge pull request #30234 from lawliet89/securitylake-client

Add Security Lake Client
hashicorp · Mar 31, 2023 · bea2cb0 · bea2cb0
2 parents d0303f6 + 455bfcf
commit bea2cb0
Show file tree

Hide file tree

Showing 19 changed files with 197 additions and 72 deletions.
diff --git a/.ci/.semgrep-service-name0.yml b/.ci/.semgrep-service-name0.yml
@@ -3304,3 +3304,17 @@ rules:
             - pattern-not-regex: "^TestAccConfigService"
             - pattern-regex: ^TestAcc.*
     severity: WARNING
+  - id: configservice-in-const-name
+    languages:
+      - go
+    message: Do not use "ConfigService" in const name inside configservice package
+    paths:
+      include:
+        - internal/service/configservice
+    patterns:
+      - pattern: const $NAME = ...
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)ConfigService"
+    severity: WARNING
diff --git a/.ci/.semgrep-service-name1.yml b/.ci/.semgrep-service-name1.yml
@@ -1,19 +1,5 @@
 # Generated by internal/generate/servicesemgrep/main.go; DO NOT EDIT.
 rules:
-  - id: configservice-in-const-name
-    languages:
-      - go
-    message: Do not use "ConfigService" in const name inside configservice package
-    paths:
-      include:
-        - internal/service/configservice
-    patterns:
-      - pattern: const $NAME = ...
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-regex: "(?i)ConfigService"
-    severity: WARNING
   - id: configservice-in-var-name
     languages:
       - go
@@ -3306,3 +3292,32 @@ rules:
           patterns:
             - pattern-regex: "(?i)Inspector2"
     severity: WARNING
+  - id: inspectorv2-in-func-name
+    languages:
+      - go
+    message: Do not use "inspectorv2" in func name inside inspector2 package
+    paths:
+      include:
+        - internal/service/inspector2
+    patterns:
+      - pattern: func $NAME( ... ) { ... }
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)inspectorv2"
+            - pattern-not-regex: ^TestAcc.*
+    severity: WARNING
+  - id: inspectorv2-in-const-name
+    languages:
+      - go
+    message: Do not use "inspectorv2" in const name inside inspector2 package
+    paths:
+      include:
+        - internal/service/inspector2
+    patterns:
+      - pattern: const $NAME = ...
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)inspectorv2"
+    severity: WARNING
diff --git a/.ci/.semgrep-service-name2.yml b/.ci/.semgrep-service-name2.yml
@@ -1,34 +1,5 @@
 # Generated by internal/generate/servicesemgrep/main.go; DO NOT EDIT.
 rules:
-  - id: inspectorv2-in-func-name
-    languages:
-      - go
-    message: Do not use "inspectorv2" in func name inside inspector2 package
-    paths:
-      include:
-        - internal/service/inspector2
-    patterns:
-      - pattern: func $NAME( ... ) { ... }
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-regex: "(?i)inspectorv2"
-            - pattern-not-regex: ^TestAcc.*
-    severity: WARNING
-  - id: inspectorv2-in-const-name
-    languages:
-      - go
-    message: Do not use "inspectorv2" in const name inside inspector2 package
-    paths:
-      include:
-        - internal/service/inspector2
-    patterns:
-      - pattern: const $NAME = ...
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-regex: "(?i)inspectorv2"
-    severity: WARNING
   - id: inspectorv2-in-var-name
     languages:
       - go
@@ -3317,3 +3288,32 @@ rules:
           patterns:
             - pattern-regex: "(?i)recyclebin"
     severity: WARNING
+  - id: recyclebin-in-var-name
+    languages:
+      - go
+    message: Do not use "recyclebin" in var name inside rbin package
+    paths:
+      include:
+        - internal/service/rbin
+    patterns:
+      - pattern: var $NAME = ...
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)recyclebin"
+    severity: WARNING
+  - id: redshift-in-func-name
+    languages:
+      - go
+    message: Do not use "Redshift" in func name inside redshift package
+    paths:
+      include:
+        - internal/service/redshift
+    patterns:
+      - pattern: func $NAME( ... ) { ... }
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)Redshift"
+            - pattern-not-regex: ^TestAcc.*
+    severity: WARNING
diff --git a/.ci/.semgrep-service-name3.yml b/.ci/.semgrep-service-name3.yml
@@ -1,34 +1,5 @@
 # Generated by internal/generate/servicesemgrep/main.go; DO NOT EDIT.
 rules:
-  - id: recyclebin-in-var-name
-    languages:
-      - go
-    message: Do not use "recyclebin" in var name inside rbin package
-    paths:
-      include:
-        - internal/service/rbin
-    patterns:
-      - pattern: var $NAME = ...
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-regex: "(?i)recyclebin"
-    severity: WARNING
-  - id: redshift-in-func-name
-    languages:
-      - go
-    message: Do not use "Redshift" in func name inside redshift package
-    paths:
-      include:
-        - internal/service/redshift
-    patterns:
-      - pattern: func $NAME( ... ) { ... }
-      - metavariable-pattern:
-          metavariable: $NAME
-          patterns:
-            - pattern-regex: "(?i)Redshift"
-            - pattern-not-regex: ^TestAcc.*
-    severity: WARNING
   - id: redshift-in-test-name
     languages:
       - go
@@ -1404,6 +1375,64 @@ rules:
           patterns:
             - pattern-regex: "(?i)SecurityHub"
     severity: WARNING
+  - id: securitylake-in-func-name
+    languages:
+      - go
+    message: Do not use "SecurityLake" in func name inside securitylake package
+    paths:
+      include:
+        - internal/service/securitylake
+    patterns:
+      - pattern: func $NAME( ... ) { ... }
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)SecurityLake"
+            - pattern-not-regex: ^TestAcc.*
+    severity: WARNING
+  - id: securitylake-in-test-name
+    languages:
+      - go
+    message: Include "SecurityLake" in test name
+    paths:
+      include:
+        - internal/service/securitylake/*_test.go
+    patterns:
+      - pattern: func $NAME( ... ) { ... }
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-not-regex: "^TestAccSecurityLake"
+            - pattern-regex: ^TestAcc.*
+    severity: WARNING
+  - id: securitylake-in-const-name
+    languages:
+      - go
+    message: Do not use "SecurityLake" in const name inside securitylake package
+    paths:
+      include:
+        - internal/service/securitylake
+    patterns:
+      - pattern: const $NAME = ...
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)SecurityLake"
+    severity: WARNING
+  - id: securitylake-in-var-name
+    languages:
+      - go
+    message: Do not use "SecurityLake" in var name inside securitylake package
+    paths:
+      include:
+        - internal/service/securitylake
+    patterns:
+      - pattern: var $NAME = ...
+      - metavariable-pattern:
+          metavariable: $NAME
+          patterns:
+            - pattern-regex: "(?i)SecurityLake"
+    severity: WARNING
   - id: serverlessapplicationrepository-in-func-name
     languages:
       - go

diff --git a/.github/labeler-issue-triage.yml b/.github/labeler-issue-triage.yml
@@ -561,6 +561,8 @@ service/secretsmanager:
   - '((\*|-)\s*`?|(data|resource)\s+"?)aws_secretsmanager_'
 service/securityhub:
   - '((\*|-)\s*`?|(data|resource)\s+"?)aws_securityhub_'
+service/securitylake:
+  - '((\*|-)\s*`?|(data|resource)\s+"?)aws_securitylake_'
 service/serverlessrepo:
   - '((\*|-)\s*`?|(data|resource)\s+"?)aws_serverlessapplicationrepository_'
 service/servicecatalog:

diff --git a/.github/labeler-pr-triage.yml b/.github/labeler-pr-triage.yml
@@ -920,6 +920,9 @@ service/secretsmanager:
 service/securityhub:
   - 'internal/service/securityhub/**/*'
   - 'website/**/securityhub_*'
+service/securitylake:
+  - 'internal/service/securitylake/**/*'
+  - 'website/**/securitylake_*'
 service/serverlessrepo:
   - 'internal/service/serverlessrepo/**/*'
   - 'website/**/serverlessapplicationrepository_*'

diff --git a/.teamcity/components/generated/services_all.kt b/.teamcity/components/generated/services_all.kt
@@ -164,6 +164,7 @@ val services = mapOf(
     "schemas" to ServiceSpec("EventBridge Schemas"),
     "secretsmanager" to ServiceSpec("Secrets Manager"),
     "securityhub" to ServiceSpec("Security Hub"),
+    "securitylake" to ServiceSpec("Security Lake"),
     "serverlessrepo" to ServiceSpec("Serverless Application Repository"),
     "servicecatalog" to ServiceSpec("Service Catalog"),
     "servicediscovery" to ServiceSpec("Cloud Map", vpcLock = true),

diff --git a/go.mod b/go.mod
@@ -31,6 +31,7 @@ require (
 	github.com/aws/aws-sdk-go-v2/service/route53domains v1.14.6
 	github.com/aws/aws-sdk-go-v2/service/s3control v1.31.1
 	github.com/aws/aws-sdk-go-v2/service/scheduler v1.1.7
+	github.com/aws/aws-sdk-go-v2/service/securitylake v1.3.2
 	github.com/aws/aws-sdk-go-v2/service/sesv2 v1.17.2
 	github.com/aws/aws-sdk-go-v2/service/ssm v1.36.0
 	github.com/aws/aws-sdk-go-v2/service/ssmcontacts v1.15.0

diff --git a/go.sum b/go.sum
@@ -98,6 +98,8 @@ github.com/aws/aws-sdk-go-v2/service/s3control v1.31.1 h1:Ro2Sn4iDcZtXSkXLxAo7Cj
 github.com/aws/aws-sdk-go-v2/service/s3control v1.31.1/go.mod h1:5NoUY8X5HcZ+u93hu5+Y/EB4u72t+Uythw+A1DYloIs=
 github.com/aws/aws-sdk-go-v2/service/scheduler v1.1.7 h1:rm1z3GmTf75NdaANHLG6ZRKUrQsDuffYpmok2C6ZbWM=
 github.com/aws/aws-sdk-go-v2/service/scheduler v1.1.7/go.mod h1:4Ac3JoGbiIfpUlZMNqMpJbAVCiMpcO7FGeCnYqB9ALg=
+github.com/aws/aws-sdk-go-v2/service/securitylake v1.3.2 h1:yt395VA4AFCzRRlUBWuqGg0/ueHaEBbEGrSt+nKpXEY=
+github.com/aws/aws-sdk-go-v2/service/securitylake v1.3.2/go.mod h1:vqBDr+SNABpfTaYcV4onWwrFj5V2dxs6meSOMSR4AYE=
 github.com/aws/aws-sdk-go-v2/service/sesv2 v1.17.2 h1:jxYG0lW2AGc11834RsUneuOOg4aZON8IABvG76iBTkg=
 github.com/aws/aws-sdk-go-v2/service/sesv2 v1.17.2/go.mod h1:Ym44Peh6n3qTmR7rZmlpj7jGNXQqZL5lJQjVA0Cb7E8=
 github.com/aws/aws-sdk-go-v2/service/ssm v1.36.0 h1:L1gK0SF7Filotf8Jbhiq0Y+rKVs/W1av8MH0+AXPrAg=

diff --git a/infrastructure/repository/labels-service.tf b/infrastructure/repository/labels-service.tf
@@ -268,6 +268,7 @@ variable "service_labels" {
     "schemas",
     "secretsmanager",
     "securityhub",
+    "securitylake",
     "serverlessrepo",
     "servicecatalog",
     "servicecatalogappregistry",

diff --git a/internal/conns/awsclient_gen.go b/internal/conns/awsclient_gen.go
diff --git a/internal/conns/config_gen.go b/internal/conns/config_gen.go
diff --git a/internal/provider/service_packages_gen.go b/internal/provider/service_packages_gen.go
diff --git a/internal/service/securitylake/README.md b/internal/service/securitylake/README.md
@@ -0,0 +1,5 @@
+# Terraform AWS Provider Security Lake Package
+
+* AWS Provider: [Contribution Guide](https://hashicorp.github.io/terraform-provider-aws/#contribute)
+* Service User Guide: [What is Amazon EventBridge Scheduler?](https://docs.aws.amazon.com/scheduler/latest/UserGuide/what-is-scheduler.html)
+* Service API Guide: [Welcome](https://docs.aws.amazon.com/scheduler/latest/APIReference/Welcome.html)
diff --git a/internal/service/securitylake/service_package_gen.go b/internal/service/securitylake/service_package_gen.go