feat(region): support eu-west-3 region

[VEBERArnaud]

Description

add support for eu-west-3 (Paris) region

WIP

some ids are still missing from aws documentation, will update this PR when available

• hosted zone id
• cloudtrail service account
• elb hosted zone id
• redshift service account
• elb account id

Depends

• Bump aws-sdk-go to v1.12.49 #2706 Bump aws-sdk-go to v1.12.49
• Bump aws-sdk-go to v1.12.50 #2718 Bump aws-sdk-go to v1.12.50

Resolve

resolves #2735

[mvisonneau]

looks like https://docs.aws.amazon.com/general/latest/gr/rande.html has a bit more info but still not everything needed

[tsellers-r7]

Does this depend on aws-sdk-go v1.12.49? It looks like support for eu-west-3 was added there.

PR in this repo to bump aws-sdk-go to v1.12.49: PR #2706

Related PR in aws-sdk-go: aws/aws-sdk-go#1702

[jen20]

From experimenting in the Paris region, it looks like the ELB Account ID is 009996457667, although I don't yet see this in the documentation.

[jen20]

More interestingly, Redshift audit logging (which is the reason for requiring this AFAIK) is broken in eu-west-3. When I configure audit logging, the following happens:

Invalid principal in policy (Service: Amazon S3; Status Code: 400; Error Code: MalformedPolicy; Request ID: 042DF0CD38FA5831; S3 Extended Request ID: WOupLp4qyMYoZZiyYncnTWt5QUEtmFZZnp16HwPQuSBASWS/U5yw7Qwsnp7sE8znT9TQ/AAp3FU=) (Service: Amazon S3; Status Code: 400; Error Code: MalformedPolicy; Request ID: 042DF0CD38FA5831)

[jen20]

It would be good if someone with support access and a vested interest in this PR could follow up with Amazon with regards to Redshift - that is the last blocker for this PR as far as I can see.

[mvisonneau]

Redshift service account ID has been released : http://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html

915173422425

[jen20]

@mvisonneau Great news! I'll look at getting this merged.

[jen20]

@mvisonneau I'm going to pull this down locally to take it over the line.

[jen20]

This has been merged in 132d10b - thanks @VEBERArnaud and @mvisonneau! Fixes #2735,

[pbramy]

Great news, how should I proceed to obtain the patch ? impatient to test it and hydrate our project..

[bflad]

This has been released in terraform-provider-aws version 1.7.0. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!