Add new data source: iam_access_keys

[tmatilai]

Description

The aws_iam_access_keys data source can be used to fetch information about IAM access keys of a specific IAM user.

One use case would be to conditionally create access keys (with the aws_iam_access_key resource) for a user only if none exist yet, and pass the created keys to a service which will then rotate them. This way there are no active keys in the Terraform state, nor anywhere outside the service.

Relations

Closes #25585

Output from Acceptance Testing

$ make testacc TESTS=TestAccIAMAccessKeysDataSource PKG=iam
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/iam/... -v -count 1 -parallel 20 -run='TestAccIAMAccessKeysDataSource'  -timeout 180m
=== RUN   TestAccIAMAccessKeysDataSource_basic
=== PAUSE TestAccIAMAccessKeysDataSource_basic
=== RUN   TestAccIAMAccessKeysDataSource_twoKeys
=== PAUSE TestAccIAMAccessKeysDataSource_twoKeys
=== CONT  TestAccIAMAccessKeysDataSource_basic
=== CONT  TestAccIAMAccessKeysDataSource_twoKeys
--- PASS: TestAccIAMAccessKeysDataSource_basic (22.36s)
--- PASS: TestAccIAMAccessKeysDataSource_twoKeys (22.41s)
PASS
ok      github.com/hashicorp/terraform-provider-aws/internal/service/iam        24.459s

[github-actions]

Community Note

Voting for Prioritization

• Please vote on this pull request by adding a 👍 reaction to the original post to help the community and maintainers prioritize this pull request.
• Please see our prioritization guide for information on how we prioritize.
• Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for issue followers and do not help prioritize the request.

For Submitters

• Review the contribution guide relating to the type of change you are making to ensure all of the necessary steps have been taken.
• For new resources and data sources, use skaff to generate scaffolding with comments detailing common expectations.
• Whether or not the branch has been rebased will not impact prioritization, but doing so is always a welcome surprise.

[ewbankkit]

LGTM 🚀.

% make testacc TESTARGS='-run=TestAccIAMAccessKeysDataSource_' PKG=iam
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./internal/service/iam/... -v -count 1 -parallel 20  -run=TestAccIAMAccessKeysDataSource_ -timeout 180m
=== RUN   TestAccIAMAccessKeysDataSource_basic
=== PAUSE TestAccIAMAccessKeysDataSource_basic
=== RUN   TestAccIAMAccessKeysDataSource_twoKeys
=== PAUSE TestAccIAMAccessKeysDataSource_twoKeys
=== CONT  TestAccIAMAccessKeysDataSource_basic
=== CONT  TestAccIAMAccessKeysDataSource_twoKeys
--- PASS: TestAccIAMAccessKeysDataSource_basic (19.56s)
--- PASS: TestAccIAMAccessKeysDataSource_twoKeys (19.63s)
PASS
ok  	github.com/hashicorp/terraform-provider-aws/internal/service/iam	26.131s

[ewbankkit]

@tmatilai Thanks for the contribution 🎉 👏.

[github-actions]

This functionality has been released in v4.64.0 of the Terraform AWS Provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template. Thank you!

[tmatilai]

Thanks for merging! 🤗

Btw, the changelog item was not included in the release notes or changelog, maybe because of this failure?
Of course this is not the most significant feature. 😅

[ewbankkit]

@tmatilai Actually the problem is there are only 2 backtick characters at the start of .changelog/29278.txt, not 3 😄.
I'll make sure that the v4.64.0 CHANGELOG section is updated.

[tmatilai]

Oh my 🤦 😂

[github-actions]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.