feat: add new lacework_managed_policies resource

[PengyuanZhao]

Description:

Create a new resource lacework_managed_policies to manage the state (enable/disable) and the severity of Lacework defined policies (policies that start with lacework-global)

Example Usage

resource "lacework_managed_policies" "example" {
  policy {
    id       = "lacework-global-1"
    enabled  = true
    severity = "High"
  }
  policy {
    id       = "lacework-global-2"
    enabled  = true
    severity = "Critical"
  }
  policy {
    id       = "lacework-global-10"
    enabled  = false
  }
}

Argument Reference

The following arguments are supported:

• id - (Required) The Lacework defined policy id.
• enabled - (Required) Whether the policy is enabled or disabled.
• severity - (Optional) The list of the severities. Valid severities include:
  Critical, High, Medium, Low and Info.

Additional Info:

Run make integration-test regex=TestManagedPolicies to test.

Verify that the resource can update the data correctly via the following steps:

[djmctavish]

Checked out the code, and ran the integration tests - all passed!!

[afiune]

The main use case is not fulfilled.

When changes happen outside of Terraform, this resource should detect them and apply the provider policy state and severity.

[afiune]

why is this necessary?

[PengyuanZhao]

destroy will call the read first which could throw errors. This makes sure destroy can delete the resource regardless of the errors.

[afiune]

I do not follow how this function getBulkUpdatePolicies() could throw errors on destroy. The function is not even accessing APIs.

What is the error you are seeing?

[PengyuanZhao]

For the integration tests, getBulkUpdatePolicies will throw errors when destroying the state of TestManagedPoliciesWithDuplicateIDs. Then the old state persists and will fail TestManagedPoliciesWithCustomIDs.

[afiune]

can ids be nil or empty? 🤔

[PengyuanZhao]

When running the tests, entries with empty id are being added for some reason.

For example:

Could not figure out why this is happening. Any ideas?

[afiune]

Talking with @PengyuanZhao we agreed that this is the best approach we can come up with.