Create and delete IAM instance profiles

TODO: associate roles with the profiles

builtin/providers/aws/provider.go

@@ -55,6 +55,7 @@ func Provider() terraform.ResourceProvider {
  "aws_iam_access_key": resourceAwsIamAccessKey(),
  "aws_iam_group_policy": resourceAwsIamGroupPolicy(),
  "aws_iam_group": resourceAwsIamGroup(),
+ "aws_iam_instance_profile": resourceAwsIamInstanceProfile(),
  "aws_iam_role_policy": resourceAwsIamRolePolicy(),
  "aws_iam_role": resourceAwsIamRole(),
  "aws_iam_user_policy": resourceAwsIamUserPolicy(),

builtin/providers/aws/resource_aws_iam_instance_profile.go

@@ -0,0 +1,105 @@
+package aws
+
+import (
+ "fmt"
+
+ "github.com/hashicorp/aws-sdk-go/aws"
+ "github.com/hashicorp/aws-sdk-go/gen/iam"
+
+ "github.com/hashicorp/terraform/helper/schema"
+)
+
+func resourceAwsIamInstanceProfile() *schema.Resource {
+ return &schema.Resource{
+ Create: resourceAwsIamInstanceProfileCreate,
+ Read: resourceAwsIamInstanceProfileRead,
+ Delete: resourceAwsIamInstanceProfileDelete,
+
+ Schema: map[string]*schema.Schema{
+ "arn": &schema.Schema{
+ Type: schema.TypeString,
+ Computed: true,
+ },
+ "create_date": &schema.Schema{
+ Type: schema.TypeString,
+ Computed: true,
+ },
+ "unique_id": &schema.Schema{
+ Type: schema.TypeString,
+ Computed: true,
+ },
+ "name": &schema.Schema{
+ Type: schema.TypeString,
+ Required: true,
+ ForceNew: true,
+ },
+ "path": &schema.Schema{
+ Type: schema.TypeString,
+ Optional: true,
+ Default: "/",
+ ForceNew: true,
+ },
+ },
+ }
+}
+
+func resourceAwsIamInstanceProfileCreate(d *schema.ResourceData, meta interface{}) error {
+ iamconn := meta.(*AWSClient).iamconn
+ name := d.Get("name").(string)
+
+ request := &iam.CreateInstanceProfileRequest{
+ InstanceProfileName: aws.String(name),
+ Path: aws.String(d.Get("path").(string)),
+ }
+
+ response, err := iamconn.CreateInstanceProfile(request)
+ if err != nil {
+ return fmt.Errorf("Error creating IAM instance profile %s: %s", name, err)
+ }
+
+ return instanceProfileReadResult(d, response.InstanceProfile)
+}
+
+func resourceAwsIamInstanceProfileRead(d *schema.ResourceData, meta interface{}) error {
+ iamconn := meta.(*AWSClient).iamconn
+
+ request := &iam.GetInstanceProfileRequest{
+ InstanceProfileName: aws.String(d.Id()),
+ }
+
+ result, err := iamconn.GetInstanceProfile(request)
+ if err != nil {
+ if iamerr, ok := err.(aws.APIError); ok && iamerr.Code == "NoSuchEntity" {
+ d.SetId("")
+ return nil
+ }
+ return fmt.Errorf("Error reading IAM instance profile %s: %s", d.Id(), err)
+ }
+
+ return instanceProfileReadResult(d, result.InstanceProfile)
+}
+
+func resourceAwsIamInstanceProfileDelete(d *schema.ResourceData, meta interface{}) error {
+ iamconn := meta.(*AWSClient).iamconn
+
+ request := &iam.DeleteInstanceProfileRequest{
+ InstanceProfileName: aws.String(d.Id()),
+ }
+ err := iamconn.DeleteInstanceProfile(request)
+ if err != nil {
+ return fmt.Errorf("Error deleting IAM instance profile %s: %s", d.Id(), err)
+ }
+ d.SetId("")
+ return nil
+}
+
+func instanceProfileReadResult(d *schema.ResourceData, result *iam.InstanceProfile) error {
+ d.SetId(*result.InstanceProfileName)
+ if err := d.Set("name", result.InstanceProfileName); err != nil {
+ return err
+ }
+ if err := d.Set("path", result.Path); err != nil {
+ return err
+ }
+ return nil
+}