r/aws_elb: Add listener ssl_certificate_id ARN validation

[bflad]

Closes #2122

[radeksimko]

Thanks for the enhancement, just FYI - this probably won't help in the mentioned example as we don't/can't run validation at plan time if the field contains references - it's not possible to guess what's going to be the interpolated string before we have chance to fully interpolate.

We discussed some approaches to that problem, e.g. adding more specific types to fields, so that we know that it's always going to be a valid ARN, even if it is computed by the API, but we haven't gotten beyond the stage of brainstorming.

That said this may help folks who have hardcoded value in ssl_certificate_id, so 🤷‍♂️ LGTM.

I'm ok with closing the issue, because such early validation is a feature request which belongs to core anyway - i.e. hashicorp/terraform.

[bflad]

Makes sense -- I wonder if core during the plan could use the validateFunc of the computed attribute to ensure its "output" aligns with the input? If that doesn't work even a simple new "outputFormat" schema option that provides a necessary validation string/type? I agree it is definitely a core enhancement.

I'll poke around the core issues and create something if I can't find anything. 😄

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!